Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41b4b4b2-bc67-3df8-b661-ee6868e396db.roa
File: 41b4b4b2-bc67-3df8-b661-ee6868e396db.roa (raw, json)
Hash identifier: JR8q2L9JBGxxs8DH6PslB6UCgf8EKKTD8ulmV6lAlKQ=
Subject key identifier: 1C:27:8F:C6:1C:B8:F2:61:78:83:4A:64:A5:A7:AA:46:23:0D:B5:D1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661A9D35B0625A99459A2300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41b4b4b2-bc67-3df8-b661-ee6868e396db.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 75.88.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1a:9d:35:b0:62:5a:99:45:9a:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=4f4ad602-d7f6-4738-ac14-68d698e90ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:a3:8b:a9:69:66:5f:28:d1:9b:e9:fe:05:
90:e3:9a:15:05:25:5f:39:c7:5f:ee:23:6b:ab:7a:
bb:41:c6:49:2c:00:28:26:34:0c:3b:31:cd:d7:a1:
d4:8a:24:dc:53:61:37:06:15:7c:a0:03:e1:47:74:
d6:83:bd:79:ec:ef:e8:db:19:58:c8:c3:28:f3:58:
3a:c5:4f:f1:79:18:59:ab:3d:9d:30:5a:a7:65:b0:
cf:c1:9d:3c:76:58:cd:f4:73:e2:94:2b:7a:78:86:
aa:c1:8f:41:41:f6:a8:ea:5a:72:a6:d7:84:6d:51:
fb:dc:76:a1:19:25:3a:83:8e:5d:69:1d:87:20:ff:
c7:4d:30:62:90:72:3e:28:0e:aa:b4:59:ac:a1:f4:
7a:b9:14:04:5f:a4:ff:84:14:5a:7b:79:74:4d:98:
11:7b:02:6f:eb:b3:29:58:7f:c0:eb:ce:e4:1e:da:
79:5c:98:9a:29:f8:5f:20:88:79:e2:10:7e:e7:e6:
39:5b:11:33:e8:82:03:78:96:95:50:1f:ab:7c:4f:
aa:12:03:f2:91:ff:59:c2:97:9f:fe:e5:27:c0:e1:
03:8d:95:ae:10:ff:0c:a1:4c:08:98:79:13:34:00:
c7:15:9c:c8:7e:7c:75:a0:bf:cf:1e:30:df:78:5a:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:8F:C6:1C:B8:F2:61:78:83:4A:64:A5:A7:AA:46:23:0D:B5:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41b4b4b2-bc67-3df8-b661-ee6868e396db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:54:1c:29:ca:f1:de:52:ad:7b:a3:17:38:bf:8a:50:88:2b:
81:a9:b6:36:9d:a8:60:5b:3c:74:9a:19:a0:dc:81:cc:9b:1e:
da:c9:ca:2a:23:fa:dc:91:d8:b5:73:ef:9a:6f:77:1c:36:d5:
00:82:80:36:2d:e0:b4:10:f5:14:86:61:bc:a3:2b:7a:cf:c4:
92:8f:47:b8:fd:01:c7:a7:99:bf:5e:b9:94:f0:36:cf:11:6f:
f8:f8:66:3e:a1:60:e4:34:4f:4d:96:41:7e:dc:ac:35:0e:37:
4e:f6:28:b9:90:5c:5a:ab:45:d7:0b:01:c7:0e:20:18:01:4f:
bb:64:59:df:3a:0d:57:80:06:2f:81:63:97:2e:c1:33:59:4d:
31:53:23:17:a8:a8:57:26:9f:75:d0:0e:0f:5c:b0:7e:3c:48:
4c:5e:a0:23:36:7b:10:21:9f:cf:4a:31:10:61:86:6c:d6:7e:
3f:4d:b7:52:8a:b7:15:16:57:7f:1b:c1:e3:80:f4:a4:f3:9e:
03:de:fc:b2:d8:00:b4:6c:52:c6:f9:c9:21:ca:48:b1:37:c7:
cb:3c:c5:dd:04:8e:ee:d6:c8:a4:04:e0:77:d4:e5:72:15:38:
5f:25:0c:d2:06:18:75:3f:35:e4:f8:17:14:35:58:dd:6e:38:
75:f1:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:34 2025 by rpki-client