Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cf569db-e518-3f61-85f1-6ef2e49abd54.roa
File: 3cf569db-e518-3f61-85f1-6ef2e49abd54.roa (raw, json)
Hash identifier: GPAzdwiVHQw0Ulnx/RplNPPeGWwY26qvy6B61Q1yNw0=
Subject key identifier: BB:4B:40:64:97:BD:10:B2:A2:EF:96:35:99:26:19:5E:DF:72:07:21
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA149CECB5FC306C55ED13880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cf569db-e518-3f61-85f1-6ef2e49abd54.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:3200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:49:ce:cb:5f:c3:06:c5:5e:d1:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=b31d00bb-92bf-4bf5-bac3-141b6716db3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:24:bd:72:65:e5:ec:4d:14:6a:45:35:d1:
37:47:12:ef:51:e7:98:a9:82:70:81:50:f1:e4:bd:
79:5e:9a:81:e7:c5:0b:17:61:a3:bf:1e:3d:6e:4a:
12:76:a8:f2:8d:0c:61:c2:7f:d7:95:ce:ec:ef:ff:
84:f7:16:71:71:c3:d9:3d:7b:53:9e:af:28:eb:67:
7d:25:cb:de:d4:76:54:bf:ca:a5:d2:5e:6a:2c:98:
a3:9a:1b:50:f7:9d:14:15:85:40:79:64:dc:22:0f:
a5:ec:58:78:5a:f0:f3:5d:c7:a6:01:92:0a:e7:b4:
b8:4d:dc:ca:10:6b:5b:3a:a1:e5:b4:7a:bc:bd:dd:
1a:7d:4d:e1:2f:0f:22:36:07:55:52:d0:4d:41:60:
7f:39:5c:ac:86:c5:f8:8b:4e:ab:95:ea:ba:fb:ad:
c8:86:57:b6:4c:a1:56:c3:cf:07:10:d5:c3:6a:dc:
a9:28:cb:60:5f:1b:81:85:bb:2b:3d:50:52:58:45:
e8:80:2d:b1:04:7b:be:ef:5f:36:64:83:cd:ce:a1:
b3:a9:7a:48:ce:57:49:0c:a8:d3:db:b3:26:d0:31:
65:23:e4:ca:05:cb:f6:90:74:9e:48:b2:b1:a0:e0:
bb:b3:08:ee:13:fe:6d:6c:ec:df:fa:53:de:cc:ee:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4B:40:64:97:BD:10:B2:A2:EF:96:35:99:26:19:5E:DF:72:07:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cf569db-e518-3f61-85f1-6ef2e49abd54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:3200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:ba:99:d6:48:12:c1:c3:ff:ea:5e:02:39:a7:cd:41:1b:99:
1f:49:ea:e8:85:10:48:d2:31:71:10:0e:4a:27:bc:bd:ba:82:
74:37:a6:5f:79:f7:53:a3:15:c5:44:f2:84:39:af:47:40:32:
1e:51:5d:10:01:38:23:ca:a7:81:7b:0a:19:d3:df:10:c1:aa:
6d:57:a6:b8:1b:f3:44:24:a7:05:0d:21:45:c2:d1:28:a8:f3:
7f:13:2d:d1:12:62:5f:b6:90:5d:36:62:1c:6e:4b:95:79:68:
69:fd:b3:d3:3c:b4:d2:17:f5:0d:ff:b3:b9:0a:4a:fe:24:20:
56:30:b3:32:07:a1:e0:fd:84:43:1b:6e:3c:8a:c7:bc:79:65:
f1:7e:92:be:3f:1f:af:55:eb:9d:8f:aa:dd:1e:6d:eb:09:e4:
cf:78:01:76:e3:0b:5c:1b:5d:00:3e:4d:27:0b:f8:55:ed:82:
13:a1:3c:b3:a0:dc:9b:e2:a0:7d:05:68:6d:d9:1b:40:52:23:
30:7b:78:8c:b7:ab:e6:1a:ce:42:1c:22:25:55:21:f1:01:0a:
5f:26:ae:cf:ab:f2:e1:65:a4:b9:4b:32:62:82:47:14:34:b1:
e4:d4:22:31:54:d8:e7:6e:13:82:81:af:0d:7b:86:e3:54:d6:
f8:27:50:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:24 2025 by rpki-client