Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ea9c015-ce14-3091-83da-069d077f2141.roa
File: 3ea9c015-ce14-3091-83da-069d077f2141.roa (raw, json)
Hash identifier: FmZBpKFCv9Dek5TWdMf6iJbrgGZa6OGeF1QL7u53zOQ=
Subject key identifier: 7B:2B:53:B7:C6:DF:87:F6:D2:F9:84:0D:07:93:40:D3:21:41:02:09
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661774EF5A4DCF5D62D40080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ea9c015-ce14-3091-83da-069d077f2141.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.7.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:17:74:ef:5a:4d:cf:5d:62:d4:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=e3d366da-a92f-458c-98f8-d278ca61a678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:a3:9d:d7:60:e4:ec:d2:6f:46:7f:88:ac:
5a:69:db:70:f5:68:9f:23:4c:e9:f0:80:ca:c4:85:
00:96:cb:8a:a3:6b:6e:e3:11:86:83:9c:8f:0a:31:
9d:86:68:9a:cd:8c:b2:0a:ca:51:97:16:3a:65:a1:
01:8f:01:eb:9f:f5:07:37:05:ce:5a:b8:d9:cd:f3:
a3:a6:72:de:76:1c:c8:7d:7e:32:e0:f0:c9:11:de:
bf:df:e4:f7:16:d5:47:e0:59:25:d4:fd:5e:9a:da:
57:e1:14:0d:3e:ec:8b:39:40:ea:f2:a4:73:ea:f9:
52:eb:03:57:de:fe:7f:f8:78:f9:63:30:a1:d0:3e:
d5:8c:61:91:e6:78:8f:4d:6e:a6:94:e7:f3:7f:8a:
b7:92:b6:f3:2f:48:de:d7:f4:bd:24:b9:45:9c:aa:
a7:af:77:a1:39:d0:53:78:35:5a:91:af:ed:be:8f:
4b:00:10:75:97:c5:f1:dc:2f:b1:77:50:d8:9e:ac:
cf:d6:1f:b0:e1:9f:07:8f:c5:1f:f7:7d:eb:7e:fc:
ab:fe:a7:c8:25:37:de:16:26:72:d7:19:21:9c:cc:
40:cc:8d:6c:a1:a4:90:9a:92:8a:08:4f:9d:f4:24:
2a:e7:ec:6e:37:49:66:30:55:39:14:12:e6:1c:aa:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:53:B7:C6:DF:87:F6:D2:F9:84:0D:07:93:40:D3:21:41:02:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3ea9c015-ce14-3091-83da-069d077f2141.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.7.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:29:a4:2d:85:e5:ab:d8:57:ad:a8:ba:0d:b9:58:84:a8:0b:
90:bf:57:5e:36:a3:16:3b:4f:ac:76:fd:a1:84:94:6f:79:04:
ee:82:e9:2f:ce:ac:f5:b7:b2:69:19:bd:f5:88:04:f3:75:61:
cf:1d:f1:86:df:da:cb:28:80:8e:5c:14:92:0d:e0:74:8e:92:
19:c8:04:c7:3d:f2:d4:77:fd:8d:b3:e2:66:bb:ce:80:a3:e0:
7d:98:3f:18:81:7f:d0:b2:86:fb:70:81:de:1f:63:fd:fe:3a:
ed:48:42:77:2e:4e:39:df:fe:67:45:93:c9:57:8e:e2:01:eb:
e8:36:12:0d:b3:75:4c:a7:e8:ec:9e:44:e4:eb:09:e1:83:b0:
21:5b:00:09:6c:c2:ed:24:55:44:99:05:94:52:1a:5a:11:6a:
42:bb:90:3c:cf:ae:44:d0:b2:ec:8d:be:31:0a:e2:74:eb:ef:
c7:4e:cf:03:78:a7:b4:ba:3a:a4:e7:db:56:af:f2:7e:a1:1d:
f5:6e:63:39:8e:0d:f9:8e:f3:85:9e:29:a7:89:de:b7:8e:cb:
90:b2:8c:68:ff:82:e6:27:83:24:80:4d:19:cf:78:32:b7:85:
c1:54:48:52:93:e6:fa:7a:64:a3:88:7f:31:91:e7:51:3a:62:
f6:9a:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:01 2025 by rpki-client