Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4442642a-c6d8-3dbc-bb77-0496204680a8.roa
File: 4442642a-c6d8-3dbc-bb77-0496204680a8.roa (raw, json)
Hash identifier: C/Nl3UZVGjYelcINc31K/rXEySagi1emEOOgRdb3MuY=
Subject key identifier: F2:AF:58:E9:2A:BE:EA:3D:9D:01:11:59:D1:DA:BC:80:1D:8E:61:C4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551AB5D1492500A690C35A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4442642a-c6d8-3dbc-bb77-0496204680a8.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 72.242.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1a:b5:d1:49:25:00:a6:90:c3:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=6ea43657-6c9f-4870-89ab-b8a25ba7cc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:5c:1d:57:dc:c9:3f:25:8e:80:e7:bc:cf:
b3:ee:49:14:aa:b0:95:b5:6a:09:ce:c3:10:ce:f6:
5e:7b:f4:0f:35:09:85:e2:28:ac:18:1a:87:11:b3:
1a:1b:cf:26:af:97:25:21:f1:f3:ae:4b:01:cb:a7:
8b:2c:90:2f:3d:59:68:c5:b7:bc:bf:e3:53:be:ad:
ef:0a:73:22:09:d7:79:21:c1:10:ee:77:64:e5:9d:
73:b0:ea:38:99:7b:80:95:2e:70:03:ed:a3:57:01:
de:4d:24:d7:1a:3c:91:1e:5c:5e:ba:6e:72:3a:9c:
9f:36:19:09:b3:58:cb:62:05:1c:0a:a3:0d:07:41:
a1:76:44:2e:d1:3b:da:c4:f7:61:52:32:09:49:83:
eb:a1:32:c3:03:fb:13:2c:7a:23:98:2f:79:39:00:
37:d4:8a:18:65:5b:75:da:c0:22:6a:c7:14:3b:1a:
0f:fb:47:48:9f:a1:00:b7:ed:d1:ae:6d:be:64:44:
fe:20:6c:e9:4a:8c:43:3b:d1:5b:02:e4:dc:d8:a8:
75:27:34:85:1d:d4:74:f0:1c:20:fb:cd:c7:07:41:
9e:7e:45:61:09:0f:af:b2:a6:02:88:71:e8:11:2b:
ad:74:0a:cc:f1:10:d4:48:96:9f:3b:23:4d:9c:4a:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AF:58:E9:2A:BE:EA:3D:9D:01:11:59:D1:DA:BC:80:1D:8E:61:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4442642a-c6d8-3dbc-bb77-0496204680a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.242.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:84:62:25:89:d9:fd:71:c4:e1:67:ea:ef:0e:a7:1f:e1:46:
c1:13:01:b9:d5:ba:ed:e7:3b:f7:8d:29:02:b3:08:16:e1:cf:
95:ca:ce:01:9d:fd:b0:31:15:96:29:60:77:3b:b5:1c:a7:14:
fb:8a:2f:32:58:45:3e:9f:64:d7:74:60:63:7f:c0:49:04:7a:
4c:c2:6a:32:1c:5e:a3:ac:3a:a3:ab:8e:bf:5a:b3:e8:2d:46:
28:ce:cf:e7:9f:4d:55:49:22:67:07:36:c9:3a:fb:8b:9b:8c:
bb:1e:d2:7a:6d:28:18:ef:4c:a1:a8:91:33:b2:72:bf:55:0c:
73:3f:ed:ff:83:fe:fd:28:bb:db:6c:cf:63:c2:cd:fa:aa:95:
ab:57:f5:21:fb:5b:bd:0c:d2:e9:24:6e:0b:1b:1e:27:49:9c:
a0:6e:c4:7f:6e:47:3b:a9:80:d7:ba:5d:88:1a:70:df:59:c4:
3b:d3:6d:00:27:ad:c0:e3:96:e9:e7:8d:f1:a1:66:82:f3:47:
b0:9e:40:83:07:83:65:6c:a3:73:a2:20:e3:b5:6d:34:5c:fe:
b3:83:79:6c:2a:36:e9:81:25:cd:4c:b5:91:81:19:f9:a4:86:
1a:2a:95:bb:2b:02:3b:67:e5:9a:2d:a2:a2:ae:dc:fb:5f:9b:
ec:15:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:54 2025 by rpki-client