Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8813de52-3a19-3802-b4ad-e6323a753a60.roa
File: 8813de52-3a19-3802-b4ad-e6323a753a60.roa (raw, json)
Hash identifier: 3x+Qcoi/oRuxsqPccWqMEJGvThClItEKNXgpk+iOWRM=
Subject key identifier: 8B:A1:5B:1E:B5:A6:1F:5D:15:4B:46:35:A8:BE:13:1D:20:D8:58:8C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FAC04FF3D3D2DB9B43B1460
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8813de52-3a19-3802-b4ad-e6323a753a60.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.33.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ac:04:ff:3d:3d:2d:b9:b4:3b:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=50994669-1feb-4820-8aeb-e8586ac8cd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a0:9c:3d:89:36:c7:35:ca:fd:cb:22:3b:61:
84:7c:6e:a1:2d:3f:4d:b9:f7:b1:2f:bb:b7:3d:ac:
9d:b7:6d:58:1c:5d:78:5e:99:84:a1:bc:d1:f6:2a:
dd:82:ba:17:8c:1e:53:7d:7e:42:57:b7:13:ea:90:
3f:40:07:11:f9:74:cb:66:69:c4:25:58:1d:e9:4d:
cf:26:d6:3d:de:e3:48:8b:61:f3:2d:bb:92:6d:b4:
c1:5b:98:25:ff:54:06:dd:28:01:63:a1:0e:e2:f8:
e3:99:d3:ed:bf:63:fd:04:12:2a:c6:65:68:5b:42:
45:59:9b:1d:9d:e1:6a:6c:2b:e5:ae:9b:57:13:65:
bc:81:c2:b0:b5:53:09:32:b0:3e:57:0c:c3:c8:79:
18:a0:07:3e:84:5e:c7:f8:f9:f7:f5:fe:9f:37:20:
87:bb:33:23:04:75:f7:7e:e7:4c:fb:7b:24:8e:44:
0c:0b:47:51:77:72:5c:e1:ee:30:50:8c:e1:30:b4:
63:07:1b:af:95:db:3a:6b:10:ae:02:ed:a2:f1:0d:
2d:e6:c1:c5:38:03:9c:36:44:81:c4:ea:1e:6d:4e:
5e:00:63:45:ac:97:92:5d:56:ff:41:71:25:24:de:
2c:a7:97:ab:6b:6d:57:38:4d:6c:6e:98:45:3d:4e:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A1:5B:1E:B5:A6:1F:5D:15:4B:46:35:A8:BE:13:1D:20:D8:58:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8813de52-3a19-3802-b4ad-e6323a753a60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.33.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:44:6b:f7:94:34:d4:7a:b5:e1:7c:56:7e:7f:cc:f8:63:8c:
2c:2f:c1:99:f8:6e:ac:6e:e2:ab:11:12:71:8c:b9:3f:ed:fe:
7e:19:11:e3:32:9e:6b:fd:42:c3:7b:90:c9:56:29:9a:64:2c:
8e:70:59:df:95:70:dc:97:6f:4e:19:44:f1:bf:4a:a1:88:9f:
f4:8f:54:d4:62:18:8a:29:36:28:ca:35:8a:4c:e0:c4:d9:6b:
b1:8b:77:8e:2c:95:23:cc:e6:99:70:ea:e2:0e:f8:8e:2d:31:
42:c2:ac:4c:b2:a3:e6:fa:71:c6:1a:91:07:23:8b:ef:40:00:
d2:76:5c:60:7a:7e:fa:b0:cc:a4:d5:d2:65:e0:8d:be:fb:b3:
aa:db:f2:61:65:81:79:75:22:30:3a:f0:8f:e4:21:20:a4:d6:
02:ae:59:e0:e9:8e:5e:4a:5c:cd:27:f2:10:17:d4:19:e6:78:
5a:3a:ec:71:0c:8f:4e:9f:43:b4:1d:9a:c6:a6:33:9f:4b:ff:
9a:72:d7:05:e7:78:5f:24:a8:16:1b:3b:4b:49:5c:23:69:3b:
aa:d6:b6:8b:67:cb:8c:86:3d:a1:bb:62:9d:a1:53:fd:8d:6d:
4b:b6:b6:f8:24:b8:85:ed:ce:21:3c:85:4a:61:b5:46:16:99:
64:80:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:16 2025 by rpki-client