Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e5a11af-2b04-33c9-bdcc-32e28c8dfa77.roa
File: 2e5a11af-2b04-33c9-bdcc-32e28c8dfa77.roa (raw, json)
Hash identifier: pAauVvA13VIexVs1Vhh0WVS0d54hvotJZWQ/Plm1ucI=
Subject key identifier: 9D:A4:DE:C7:18:78:3C:59:E9:40:82:B1:17:89:CC:B0:A3:C2:18:30
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA149E1DD895E161490BB5880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e5a11af-2b04-33c9-bdcc-32e28c8dfa77.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:29::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:49:e1:dd:89:5e:16:14:90:bb:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=f79d9a7d-b20b-44e9-9c87-acb884e9930e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:10:a7:aa:04:59:b5:d9:23:df:aa:0b:b7:
cf:fd:78:2b:58:19:4e:18:3f:70:97:96:b0:b5:d9:
9d:fd:07:f3:de:58:d3:f4:39:47:fe:aa:c5:71:82:
be:21:9c:aa:f6:23:10:e7:b0:87:d6:70:e7:48:37:
f7:96:ff:3b:ed:81:77:1b:a2:cb:70:18:13:d5:44:
f7:c3:d4:4f:2d:30:a7:81:37:57:05:02:c4:fd:c8:
a1:7f:90:6b:4e:48:62:00:1d:e7:70:c6:46:22:a8:
67:ee:98:14:ef:36:52:3d:bf:93:63:b7:23:20:92:
02:b9:0b:83:36:b1:4c:55:e8:86:1a:d6:d2:eb:fd:
ea:4b:0b:4a:ce:93:35:cf:ea:fc:e2:3c:bd:99:4c:
91:5e:29:a8:0e:b4:e5:d1:44:f3:6c:64:2c:cf:cf:
4e:3e:89:3d:c3:e4:3a:f7:91:28:59:95:04:e1:67:
04:46:ee:f0:11:9f:32:03:47:2e:05:d9:b2:6d:8d:
1f:6a:7c:20:7d:c7:86:82:42:ee:bc:c8:d3:ae:42:
3d:7a:85:07:84:a5:64:10:e1:56:18:30:c5:91:4e:
ff:ea:82:53:ff:8a:ec:9d:f8:03:7d:e2:44:82:e0:
08:3a:2f:50:11:c1:86:0f:b0:63:e2:a7:22:2d:fc:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:DE:C7:18:78:3C:59:E9:40:82:B1:17:89:CC:B0:A3:C2:18:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e5a11af-2b04-33c9-bdcc-32e28c8dfa77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:29::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:4e:71:af:15:76:8f:8a:e3:04:99:94:a5:42:8a:8c:ba:02:
f1:12:32:b8:49:64:7d:82:ca:d4:1b:01:2c:7e:1a:a4:c9:80:
81:d1:87:d9:39:d8:d2:d5:d5:f4:2a:c0:e3:dc:ce:1c:37:26:
13:93:28:c6:37:57:53:bf:2c:19:d1:20:eb:3a:d3:50:ba:c2:
f2:ba:05:a6:19:90:f6:82:f9:1a:dd:a5:ba:81:81:af:f7:af:
c2:50:f6:6a:3a:4e:18:f2:fa:27:4a:4a:2a:51:9e:78:fb:98:
f3:9d:00:61:12:b9:9a:d7:37:18:70:3c:bf:82:ff:b4:d4:4d:
ab:d8:f8:4f:cb:42:c9:d2:2d:f9:a9:29:79:98:9d:ac:6a:a2:
82:c0:d1:13:9d:71:68:97:2d:0d:f0:4d:09:7d:5a:ae:fb:79:
a2:43:45:a1:00:23:32:df:0a:1d:0c:30:f2:ef:f5:57:89:3f:
bd:02:ce:83:6c:ea:a4:39:13:07:ee:fe:be:9a:e6:86:fb:df:
5a:0c:57:58:e3:68:8f:08:26:7e:87:f1:4d:e7:23:e2:a4:77:
3d:e7:6d:92:e7:05:6b:63:1b:96:f4:e6:c0:5c:c7:d7:30:4c:
c9:7b:d6:47:4f:95:ab:c8:93:d3:ac:76:a3:3d:7c:be:25:7e:
74:11:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:23 2025 by rpki-client