Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69c8df2a-7dbb-307b-b36e-752aaf62b6fa.roa
File: 69c8df2a-7dbb-307b-b36e-752aaf62b6fa.roa (raw, json)
Hash identifier: EN/D4mVXxEf9+uwVp1mgY9j3Nn5Ta3t0HzI2D6ZEVAg=
Subject key identifier: 35:8F:72:4A:62:29:0A:77:DC:5A:AE:5E:D6:A2:4F:E2:7B:AD:04:05
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551A760C74F90AEAD7016D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69c8df2a-7dbb-307b-b36e-752aaf62b6fa.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 27338
IP address blocks: 72.242.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1a:76:0c:74:f9:0a:ea:d7:01:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=a24ffcdf-4e34-40a0-914b-1bfd427e8cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:74:db:a7:0a:3c:74:17:c2:17:27:7f:1b:
b9:dd:71:54:6b:39:85:53:58:4f:80:ce:9c:8c:7b:
a4:a9:51:b5:0c:64:fd:28:99:13:25:a2:b6:7d:1b:
ca:d2:bb:b6:5a:f0:20:41:a9:48:3f:28:d9:98:b0:
d9:9f:94:0a:62:e6:12:81:08:15:99:73:58:dc:ac:
23:03:a4:13:5c:fa:73:eb:16:12:2b:75:dc:36:39:
5c:4c:54:f5:75:24:c2:e7:0a:27:f3:d6:28:52:a8:
aa:9a:c2:75:94:92:7d:4d:a7:63:78:5a:b0:40:cf:
36:f6:f9:49:6b:d7:6c:5c:82:0e:d5:16:60:9d:48:
8b:88:a1:59:f2:27:98:b0:01:ae:2f:cc:58:aa:74:
4c:49:8f:9b:f5:0f:77:36:0b:c4:e8:4d:b0:7b:ef:
a6:2f:3f:e6:c4:f7:d3:93:6b:75:ef:78:8a:cd:11:
d8:bd:06:6a:65:b0:53:b3:d6:ad:23:40:a2:88:ea:
1f:30:4e:3d:4f:0e:1e:48:26:1c:5c:30:dd:50:25:
10:b0:ab:ca:be:34:6c:4d:74:40:e7:96:7e:9b:04:
41:c9:27:a0:77:e9:6b:23:e3:49:b0:f5:36:9d:f8:
c3:ce:3d:af:8b:a5:2e:a4:7b:aa:ca:aa:5d:90:b6:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8F:72:4A:62:29:0A:77:DC:5A:AE:5E:D6:A2:4F:E2:7B:AD:04:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69c8df2a-7dbb-307b-b36e-752aaf62b6fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.242.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:db:23:33:59:99:d0:ce:99:14:be:8a:62:9e:5f:99:4d:b0:
65:f8:f2:c5:9f:81:54:5b:2d:69:ad:3c:20:a1:3d:88:20:6a:
34:5a:32:c2:3d:34:0e:b5:f4:ba:5d:9e:e5:c0:bb:8e:ef:23:
c5:01:c8:08:8e:94:c4:36:8f:ae:e6:3c:b7:f2:5a:8b:6a:f3:
30:3e:2d:5e:3e:3c:37:b6:f4:09:e4:da:57:49:10:3d:d3:63:
ed:2a:27:32:1d:86:48:f4:d6:0c:d0:9b:b1:06:5e:67:3f:2b:
8e:54:09:f2:0e:2e:c3:21:88:61:eb:79:70:ae:61:39:e7:9e:
2d:97:a0:5b:28:f3:46:b9:8c:f6:96:60:74:54:a9:71:31:9b:
6b:10:ba:7e:cc:93:c1:58:33:92:3d:3a:79:7d:78:50:19:75:
32:b1:ee:01:07:89:fe:36:08:3e:49:2f:3b:ea:77:5c:15:16:
53:0e:fd:9e:1f:cf:df:1a:13:97:d3:45:9c:dd:c3:ad:28:98:
de:fb:fa:bd:3c:fd:ac:74:dd:76:2b:f8:2e:b0:35:eb:85:84:
63:5a:1f:67:d9:15:b5:e7:5e:19:ca:2f:57:3c:f0:2f:56:ba:
06:56:e1:db:93:1e:20:39:53:ad:c9:f8:0d:37:07:2e:97:86:
7b:33:cb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:02 2025 by rpki-client