Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46de5fd3-cb59-312c-9d5e-bfe7e889ff61.roa
File: 46de5fd3-cb59-312c-9d5e-bfe7e889ff61.roa (raw, json)
Hash identifier: NzOEYe+U8GK1kZw6YVjWhrRSa5MFT46U+vWQYIxBq7Y=
Subject key identifier: 82:35:3E:BA:B6:0C:A5:E5:A8:66:95:41:68:34:54:70:3B:BB:0A:C9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D1AFDA845EE71156A2B1C0C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46de5fd3-cb59-312c-9d5e-bfe7e889ff61.roa
Signing time: Wed 02 Mar 2022 05:00:00 +0000
ROA not before: Wed 02 Mar 2022 05:00:00 +0000
ROA not after: Wed 23 Feb 2028 05:00:00 +0000
asID: 7029
IP address blocks: 40.138.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:1a:fd:a8:45:ee:71:15:6a:2b:1c:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 2 05:00:00 2022 GMT
Not After : Feb 23 05:00:00 2028 GMT
Subject: CN=7ca0d37a-fd6d-4018-9012-70a579b1d383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:2d:d7:83:99:a4:16:23:a7:8a:87:30:58:
02:98:e7:8a:6a:ef:d5:9a:0e:28:5a:09:c9:50:0a:
76:42:c7:1a:86:08:7a:c7:3a:4f:dd:84:f3:e2:89:
b4:50:b0:a5:78:93:7e:c6:07:a8:12:9f:74:78:11:
5c:29:21:83:ed:72:f9:bf:4b:e6:d6:f5:40:fe:09:
eb:0a:86:ed:e5:a3:92:d3:40:86:4a:c5:12:a3:92:
36:2a:16:00:bb:8f:6a:27:0d:2e:4b:89:c7:7f:b4:
94:0f:31:4b:1f:d1:f6:7e:cd:f3:33:a3:f7:2c:3c:
d3:5c:60:00:d2:6d:2f:67:4b:cc:d1:15:05:1f:9d:
e5:7d:ba:ab:14:8a:26:64:db:16:dc:b0:ca:39:b2:
be:24:94:94:50:54:a0:81:40:d2:be:bf:af:a1:f6:
2c:57:6c:d1:d3:89:00:89:0e:26:11:89:3d:4c:e4:
28:77:08:1f:c4:45:22:97:b6:1e:95:c2:83:b6:0a:
86:c9:79:84:b0:1d:2b:45:ed:ec:a8:a9:66:af:10:
f5:a5:95:fe:67:74:a5:16:ae:b8:b4:4e:b6:21:ee:
b6:d8:cd:dc:dc:19:f4:f6:9c:85:6d:f9:ee:49:66:
06:b7:6e:91:21:c6:a1:7c:5b:73:fd:b7:b8:5b:ab:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:35:3E:BA:B6:0C:A5:E5:A8:66:95:41:68:34:54:70:3B:BB:0A:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46de5fd3-cb59-312c-9d5e-bfe7e889ff61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.138.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:e8:1c:63:fe:69:6d:18:a3:8b:d6:fc:61:59:d8:f9:97:77:
85:18:8d:7e:6d:44:c7:8f:8d:2d:fe:43:5e:b1:8d:2b:97:3c:
5a:cb:9b:31:48:4c:92:24:44:0f:9e:b4:f0:e4:6a:2c:df:2d:
e5:4b:9f:88:cd:92:dc:39:52:ba:9a:17:3e:1a:13:e3:c6:a2:
c8:77:a3:e7:07:50:74:5c:ed:5f:83:4f:3a:dd:4d:13:fb:32:
08:39:b1:a2:0a:d1:1e:f2:85:88:f4:bd:eb:fd:83:25:10:52:
46:35:cd:09:a7:c9:8f:3a:51:5d:37:64:19:75:67:78:cd:a5:
24:25:6a:70:a7:0b:db:88:70:f8:65:19:c0:7d:19:a7:e0:f1:
04:d4:98:bf:71:c8:e4:df:bb:eb:52:fd:5b:e7:71:f2:cf:f3:
98:3a:8a:54:7d:54:9d:d9:95:f4:46:d9:82:1f:2f:bf:b4:84:
d9:c2:d8:9d:b1:76:1b:cf:7b:2b:aa:e9:f5:12:34:bc:cd:ca:
e9:ea:0a:e9:ca:62:ce:36:f7:63:c3:31:cf:69:08:27:d6:d1:
98:43:b1:15:d7:07:fb:9c:55:6f:11:47:34:ed:0b:1f:21:15:
98:07:d1:02:5e:cd:36:0e:ed:d2:51:e7:c7:31:04:23:4d:e6:
96:fc:19:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:12 2025 by rpki-client