Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/480cc45a-0f83-320d-9037-0d99caca9cbd.roa
File: 480cc45a-0f83-320d-9037-0d99caca9cbd.roa (raw, json)
Hash identifier: Po24oNinznM+jwz2VdYD8lgBi6swKcGziRj9gib7naI=
Subject key identifier: 31:6C:2E:CE:3B:DC:F6:82:CD:99:9F:CD:06:19:EB:30:5B:61:F9:15
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA149FBE1C7733EE646E32840
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/480cc45a-0f83-320d-9037-0d99caca9cbd.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:1e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:49:fb:e1:c7:73:3e:e6:46:e3:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=45ef6f0b-e25a-4687-bd44-ffeab2204726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:82:2b:47:d7:32:b7:cc:e2:7d:05:e1:93:
7d:dd:ec:45:de:e2:32:95:01:e0:4c:d4:b7:52:0c:
7d:a6:01:f3:1d:50:d7:cb:9a:93:ad:1c:52:71:a5:
a6:a7:1d:88:96:30:7b:dc:92:80:0e:d4:7c:11:c6:
35:69:85:25:bd:16:b0:8e:03:13:b4:87:e1:72:14:
d8:7e:a5:72:8d:b3:3b:2a:4b:dc:86:db:ad:00:1a:
7e:e2:c0:be:71:99:65:d4:fb:39:5e:fa:d9:8f:06:
8e:7a:47:b9:89:8c:d1:ec:c3:1c:dd:8d:29:d3:61:
f0:a7:5f:d5:47:be:31:2c:0e:9a:82:41:76:71:4a:
18:9a:87:82:dc:19:0a:5b:f2:0b:7a:95:48:ec:71:
1e:01:cf:20:ec:d9:20:35:d3:93:c7:ea:22:7e:c7:
df:87:2f:14:f2:cc:db:54:ee:fe:7e:17:1d:60:e0:
ec:fc:6e:33:de:4b:60:3f:4f:17:6e:5a:b2:7b:9b:
fc:c6:38:8e:f1:44:46:96:2e:7b:bc:5c:ab:5a:35:
69:21:bc:f7:81:28:3e:bc:28:1f:86:55:14:df:6c:
cb:d2:71:0d:37:a2:95:07:91:23:3e:23:1b:15:5d:
0c:be:27:84:ea:23:73:14:20:8a:45:15:70:41:cf:
fe:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6C:2E:CE:3B:DC:F6:82:CD:99:9F:CD:06:19:EB:30:5B:61:F9:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/480cc45a-0f83-320d-9037-0d99caca9cbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:1e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:cf:48:8f:e7:59:58:ac:c9:01:06:3a:0f:1d:db:6b:0a:ef:
d3:18:b1:5d:78:7d:08:05:6b:4c:e6:b2:ac:d3:f2:b2:c1:45:
6f:41:f5:84:d5:a3:06:c1:da:73:19:f3:57:c7:29:f2:bf:22:
63:1f:aa:84:06:ee:b3:98:d8:2d:ad:2e:12:bb:49:2a:a0:e1:
f9:66:f4:e1:68:5d:e9:b7:06:ed:71:72:bd:64:29:49:49:c8:
f8:79:1c:00:c0:72:85:6b:ec:5e:1a:79:ae:f9:b4:79:45:4a:
d2:24:67:62:db:f5:88:35:f7:7b:b9:d8:78:25:82:5c:78:fb:
86:47:26:78:a7:31:60:3e:4e:d6:14:0e:b5:05:1e:7c:41:0a:
b5:71:af:a9:5b:e2:3c:dd:52:18:f5:df:eb:bc:43:f4:ec:7d:
57:91:b3:d0:04:1f:a2:26:16:da:9e:22:6f:e7:29:ad:1c:61:
ec:f6:4c:4e:e8:10:4d:f1:d0:82:76:34:bc:d7:ef:1c:11:a6:
59:4d:dc:5d:cd:cd:29:b8:15:6d:87:8c:0b:1a:bd:cc:f7:95:
b3:42:a2:54:bc:2c:7c:c1:98:da:48:d9:86:f9:a2:14:56:63:
a2:5c:1b:33:fe:b4:b3:12:0f:b2:60:05:c4:d7:5c:99:62:ac:
48:fb:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:14 2025 by rpki-client