Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7571b12d-7a83-322f-8ca1-6589d08a935a.roa
File: 7571b12d-7a83-322f-8ca1-6589d08a935a.roa (raw, json)
Hash identifier: TwPa8T1ow4icCBSh90j4Fr1gThxHFcnRmvFIAuePOWA=
Subject key identifier: E7:FB:7A:26:F7:5D:55:54:77:F0:1C:CB:FE:E3:D9:98:F9:CA:30:D7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA149EEDA40E1144531C26100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7571b12d-7a83-322f-8ca1-6589d08a935a.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:25::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:49:ee:da:40:e1:14:45:31:c2:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=41eca7a2-2f1f-4097-bf82-687438afb870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:e3:85:5a:da:68:79:e3:94:d6:0d:e3:c6:
d0:48:9e:5b:12:bd:45:b1:9c:03:d7:0d:46:b8:a2:
d9:c5:f4:a3:e1:1e:15:d9:8d:34:2f:48:9c:8b:f8:
51:82:24:c8:6d:af:ea:ce:e7:f1:e0:c2:e4:34:c4:
ce:aa:a1:bd:66:52:32:29:62:17:71:30:15:9c:a7:
cb:c4:23:b9:5f:d6:4a:0c:33:de:02:e7:aa:69:09:
5f:74:de:51:a6:cf:fc:8d:7c:62:22:54:8a:5b:8a:
8e:7d:64:00:09:b1:a4:43:bb:15:79:e5:46:01:3c:
f6:d3:60:40:93:be:85:56:07:51:66:48:2f:aa:e9:
28:1e:c1:c7:44:bc:54:2b:01:68:b5:b7:a5:e4:56:
7f:0b:d2:60:86:a7:35:fb:1e:ae:ca:0d:74:7b:a9:
60:bc:82:c2:2e:68:1b:d8:cf:2b:b9:23:11:02:cb:
8d:0a:cc:32:b7:75:b5:3f:e6:6c:63:d2:b0:0d:02:
83:8e:23:f1:65:ff:66:f0:3e:6a:16:39:a0:78:37:
77:8e:ce:4d:20:a0:44:a6:96:cb:0b:fc:f8:a1:e3:
54:6c:7b:fd:4b:fa:e3:be:01:a0:2d:6e:68:03:6d:
32:e0:e8:56:78:3f:87:01:7a:26:b1:22:99:6c:c6:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FB:7A:26:F7:5D:55:54:77:F0:1C:CB:FE:E3:D9:98:F9:CA:30:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7571b12d-7a83-322f-8ca1-6589d08a935a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:25::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:66:1a:71:7b:8b:54:52:ff:b7:b7:f1:8b:42:78:43:87:40:
35:d6:46:21:94:93:11:21:e8:e0:84:fc:59:2c:d6:3a:3d:dc:
7d:9d:3e:85:92:a4:ca:f0:8c:9b:3c:c1:18:2a:91:c8:00:81:
a5:55:15:65:c3:e7:f1:dc:4b:64:9f:62:54:32:85:62:f3:f4:
09:1c:38:0a:85:8f:bc:34:39:33:fb:8a:b9:e4:b4:22:ff:5a:
5f:e9:ff:11:3e:a6:ab:50:a8:84:d8:1f:fe:5c:c1:47:53:d5:
9f:34:a0:63:76:d8:ac:9b:b1:ac:bd:9b:5f:5e:a5:3b:d3:31:
b0:a4:64:0d:d9:14:dd:f7:ec:14:0f:8c:90:ee:eb:d1:0e:40:
5e:0f:ba:8c:89:ce:ac:a7:d6:a4:41:72:79:7c:f1:0f:3c:fe:
41:5e:36:c8:3f:b1:37:b5:59:40:22:39:c8:9d:72:93:c3:f2:
cf:c5:d3:03:e3:55:9d:d4:10:fe:9c:9a:84:88:2f:8e:58:d0:
16:ed:a1:57:10:a5:42:df:af:09:03:ee:23:00:9d:8c:0e:4d:
1e:3c:3c:35:47:4d:b9:fd:5a:5b:95:33:f5:34:70:09:c0:c2:
da:0c:68:5c:bc:7e:db:c9:99:69:07:06:a9:bb:44:19:20:3f:
b3:59:95:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD2hSe7aQOEURTHCYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDQxOTA0MDAwMFoXDTI4MDQxMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDFlY2E3YTItMmYxZi00MDk3LWJmODItNjg3NDM4YWZiODcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLbjhVraaHnjlNYN48bQSJ5bEr1FsZwD1w1G
uKLZxfSj4R4V2Y00L0ici/hRgiTIba/qzufx4MLkNMTOqqG9ZlIyKWIXcTAVnKfL
xCO5X9ZKDDPeAueqaQlfdN5Rps/8jXxiIlSKW4qOfWQACbGkQ7sVeeVGATz202BA
k76FVgdRZkgvqukoHsHHRLxUKwFotbel5FZ/C9Jghqc1+x6uyg10e6lgvILCLmgb
2M8ruSMRAsuNCswyt3W1P+ZsY9KwDQKDjiPxZf9m8D5qFjmgeDd3js5NIKBEppbL
C/z4oeNUbHv9S/rjvgGgLW5oA20y4OhWeD+HAXomsSKZbMbSyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOf7eib3XVVUd/Acy/7j2Zj5yjDXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU3MWIxMmQtN2E4My0z
MjJmLThjYTEtNjU4OWQwOGE5MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGJmGnF7i1RS/7e38YtCeEOHQDXWRiGUkxEh6OCE/Fks1jo93H2d
PoWSpMrwjJs8wRgqkcgAgaVVFWXD5/HcS2SfYlQyhWLz9AkcOAqFj7w0OTP7irnk
tCL/Wl/p/xE+pqtQqITYH/5cwUdT1Z80oGN22Kybsay9m19epTvTMbCkZA3ZFN33
7BQPjJDu69EOQF4PuoyJzqyn1qRBcnl88Q88/kFeNsg/sTe1WUAiOcidcpPD8s/F
0wPjVZ3UEP6cmoSIL45Y0BbtoVcQpULfrwkD7iMAnYwOTR48PDVHTbn9WluVM/U0
cAnAwtoMaFy8ftvJmWkHBqm7RBkgP7NZlcE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:59 2025 by rpki-client