Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d11e458-a40f-3b6c-b4bb-82cefc749c76.roa
File: 4d11e458-a40f-3b6c-b4bb-82cefc749c76.roa (raw, json)
Hash identifier: LwWqj10vVqCXH1GPlstk3TnwC09Th6m+UAX4SJmSCzQ=
Subject key identifier: A2:58:77:CF:F6:89:0A:77:A9:28:6E:0C:47:0B:5E:A1:06:67:6A:92
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D5518FE410A091C1DC3FBE380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d11e458-a40f-3b6c-b4bb-82cefc749c76.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 29877
IP address blocks: 66.163.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:18:fe:41:0a:09:1c:1d:c3:fb:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=8710168a-61b5-45b3-8b69-d130f936fdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:bb:40:55:82:55:db:4f:fe:b0:f1:5f:d1:
85:62:37:1d:c5:57:a2:b0:89:39:b7:c8:06:6d:c7:
87:8f:3b:5a:6e:fe:b5:fe:cd:d1:9d:b9:b5:41:3d:
5f:0a:12:5e:9d:dc:90:90:c7:f1:3b:f9:c8:f8:8f:
91:34:01:2e:1e:d7:64:d8:5e:85:1a:f8:0f:ab:a2:
6b:e6:48:82:3f:a9:9e:da:30:a9:50:1c:9e:1a:4b:
bb:8e:db:ac:63:25:9b:88:a0:32:66:c4:3b:8c:13:
ba:b3:10:73:49:5d:21:56:9d:67:4c:d3:58:b3:73:
91:60:dc:e5:7f:67:55:4e:0d:46:f2:ce:3d:89:ca:
fc:72:98:08:62:74:3a:fa:6f:9f:b2:6f:68:b1:7d:
8f:85:d0:ec:9f:f0:89:94:22:e1:93:40:a5:78:1b:
0c:17:1b:f7:17:29:8e:18:c0:24:b7:3f:f6:46:a6:
f1:6a:d0:89:8c:a3:01:9e:86:15:34:ea:2a:e7:ab:
ae:9b:9b:7d:1f:c4:31:e2:a0:f4:17:15:f9:97:0e:
af:49:59:22:23:b7:5b:fe:1e:c5:f9:dc:2e:46:e7:
91:2c:2c:63:f2:05:ed:b3:70:98:0a:21:9a:96:c2:
67:d5:15:63:8e:66:4a:85:9e:bb:7b:14:ad:2b:cb:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:77:CF:F6:89:0A:77:A9:28:6E:0C:47:0B:5E:A1:06:67:6A:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4d11e458-a40f-3b6c-b4bb-82cefc749c76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.163.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:47:b4:62:36:73:6a:47:a8:f3:23:c4:1a:9c:8c:b2:72:17:
02:b5:40:b0:c8:a3:90:63:88:d5:80:99:63:fc:9b:6f:75:18:
52:d9:66:66:0a:75:9b:c1:86:53:a6:1e:cb:5e:fd:2c:32:07:
3e:4b:49:00:f4:73:73:97:a7:e1:2a:c8:73:3e:a8:eb:17:e8:
ca:e2:9d:2d:e9:6e:67:ae:4c:af:f0:bc:20:3e:bc:b1:09:ba:
d7:05:42:2a:4e:02:7b:1b:15:3d:30:99:32:86:fb:75:6a:5d:
f3:ff:94:bb:77:8e:07:16:3e:d1:01:40:e2:e5:e6:f7:03:92:
10:c3:e2:71:da:9f:c4:48:f5:b3:d5:fc:b2:80:49:e2:f3:d8:
7e:11:3e:c5:29:98:e9:21:2d:a6:ff:5d:6d:c6:be:73:1e:67:
82:7d:72:d7:3a:7b:8f:ad:e8:c0:0c:dd:e6:9e:ac:43:d1:3d:
69:57:39:de:16:c9:41:a3:a7:d7:7c:04:86:e0:0b:f0:97:83:
b0:ec:02:1b:89:d2:47:2c:b8:66:5e:58:ab:68:aa:ec:90:d9:
ae:85:d8:9f:32:b7:e3:a4:59:3e:62:d2:0b:22:12:8f:a9:6e:
d8:68:be:c3:42:b9:50:8e:75:29:75:97:0b:cc:49:38:40:21:
9d:6d:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:58 2025 by rpki-client