Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ff0677-7530-39e6-8571-560a7390d8ab.roa
File: 44ff0677-7530-39e6-8571-560a7390d8ab.roa (raw, json)
Hash identifier: /Ud1xl7+kZl/cop9YVZu88GRFsrjdnqqmvGbs4O7bss=
Subject key identifier: 5F:94:98:37:DF:8A:AF:9B:2F:35:93:64:B1:63:61:0E:EB:DD:DA:B6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F5FDE960C33332000834B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ff0677-7530-39e6-8571-560a7390d8ab.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 204.33.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:5f:de:96:0c:33:33:20:00:83:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=2473c5fb-bde4-4f0f-bb43-5ba01b41afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:20:52:8c:d4:9c:b3:1a:d3:b1:ff:cd:53:
a4:14:ae:73:95:34:09:07:78:29:65:4e:b2:e4:58:
7b:a3:72:2c:d2:23:5e:fe:f3:ee:a6:cc:24:66:dd:
a4:dd:ef:23:88:4c:f7:87:03:2d:99:64:fc:ce:72:
c3:27:71:20:15:1a:23:fd:df:b8:97:be:57:b9:3a:
f7:7a:6f:10:ea:78:13:c4:3b:a6:8f:48:b4:55:b0:
26:cc:e6:d4:ad:2a:51:56:b0:8a:99:dc:b4:94:9d:
0f:5d:6e:1b:e4:74:ec:0b:82:c3:d3:c1:93:f6:44:
d0:6d:fd:80:d6:37:8e:5a:34:b7:27:41:af:09:75:
56:7c:4c:90:64:2d:a2:d8:d9:6c:e5:76:19:07:de:
a5:99:ee:fb:1a:60:b4:95:22:8f:d5:43:a3:04:38:
da:ea:35:50:e3:99:14:de:35:10:5f:68:c3:5e:91:
25:20:dd:99:8f:2e:7e:1f:72:60:6a:0e:7f:f2:a1:
bc:53:6e:04:cd:cd:c7:94:80:85:fd:ac:7a:79:14:
de:32:6c:0c:8b:dd:9c:cc:f1:b8:ea:6c:e8:3f:9a:
b6:23:a5:e1:19:55:bb:6c:b9:be:03:84:5f:28:9a:
e6:8c:7d:51:f9:e8:01:56:4d:4e:a2:0c:0d:c6:c3:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:98:37:DF:8A:AF:9B:2F:35:93:64:B1:63:61:0E:EB:DD:DA:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ff0677-7530-39e6-8571-560a7390d8ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.33.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:de:5e:09:fe:9e:9c:78:4b:9a:bb:30:e8:04:02:10:bc:05:
7e:6d:1d:0c:b0:12:53:e5:de:4a:f7:60:7f:2c:a9:0a:1f:74:
0d:0e:14:b1:39:03:f7:cc:1f:7e:33:86:75:11:6c:51:77:6a:
e7:28:a7:f3:b0:87:91:af:5b:a9:06:f6:2e:8c:d1:4f:47:5e:
97:06:e9:04:aa:f1:4f:25:a1:93:cd:fd:30:c7:48:de:24:63:
78:a7:7d:2d:bb:11:92:29:07:74:b0:1d:48:ee:43:6e:f1:ed:
23:58:f7:35:14:fc:86:05:a1:ba:be:ff:5e:b7:77:80:da:8a:
f2:f5:56:04:cb:e6:29:b1:6c:c6:bb:18:11:b0:a6:f6:3b:94:
a6:30:ea:36:58:c0:63:a4:4c:b9:33:7c:c0:82:ba:89:58:d7:
7a:63:e8:9c:5a:32:04:52:4c:dc:c2:73:bb:65:09:be:2a:cb:
48:52:e1:63:b9:4f:5c:21:64:8c:2d:86:ab:02:58:6a:8c:d2:
05:e3:61:d3:51:fc:cc:87:1e:a3:6a:d7:9d:c3:4a:0e:b4:5f:
4e:b2:80:03:81:f3:af:7e:b4:ee:93:42:31:07:7a:70:51:00:
3b:b0:43:85:60:4c:30:89:29:9e:eb:f3:aa:0e:ba:d2:cb:86:
48:97:01:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:13 2025 by rpki-client