Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b4285e2-5176-3c04-b992-09d40867a955.roa
File: 8b4285e2-5176-3c04-b992-09d40867a955.roa (raw, json)
Hash identifier: JwfYX/hk3/CD+mY7ZQvcpcgOHsGKq1aUIcV3BTlIsJc=
Subject key identifier: 0F:C4:D9:56:EB:AD:3D:F1:D6:BD:7C:8A:CB:E1:52:FE:18:BB:25:0F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FAF1EDF51EEBBA89F850180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b4285e2-5176-3c04-b992-09d40867a955.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.111.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:af:1e:df:51:ee:bb:a8:9f:85:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=18011c4b-b56a-4369-89a1-e98604b66e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:19:7e:54:bc:33:12:5b:f1:c8:6d:2e:6a:
8c:a9:0f:88:77:d0:e3:aa:3d:ea:00:7f:c8:ff:ab:
31:cf:72:e2:1b:ef:99:6b:1a:01:a3:5e:f2:a6:24:
19:57:e9:54:59:e4:60:47:a8:65:75:39:c3:50:81:
2b:5b:65:21:7e:93:fd:70:73:28:cf:a3:3a:67:35:
60:3d:6e:cc:73:a6:53:da:a5:75:66:b8:45:26:36:
a5:2f:63:29:e1:34:43:b6:fd:27:14:78:0d:87:1a:
7d:6d:ab:09:83:d1:d8:41:c8:70:ad:fe:e3:f5:cf:
b2:50:0d:68:8d:d6:48:ca:67:b4:9d:fe:5c:ba:20:
e4:66:88:f1:e4:44:d2:24:cb:0d:36:ad:cb:ac:05:
3a:8b:45:68:f5:1f:8f:b9:ec:b2:dd:95:cd:44:85:
a3:a5:15:36:c5:58:e1:9e:21:71:6f:74:39:c2:d1:
0c:c2:53:79:d8:1b:2e:16:f2:e2:ec:26:55:dc:d6:
b3:96:51:39:ad:f8:2d:30:73:f8:df:c5:9d:4a:02:
26:5e:43:d4:91:32:61:28:06:55:0c:92:32:b0:87:
ed:be:d3:0f:fe:99:8e:80:01:ca:bd:68:99:e6:08:
79:4d:d0:52:95:21:db:3e:76:c5:b9:8e:b7:2e:ee:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C4:D9:56:EB:AD:3D:F1:D6:BD:7C:8A:CB:E1:52:FE:18:BB:25:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b4285e2-5176-3c04-b992-09d40867a955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.111.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:82:8e:2a:6a:f9:ef:24:75:ac:eb:e4:8e:16:24:5b:a6:d2:
ea:be:50:1e:30:8b:34:3a:61:97:13:39:a3:28:72:ea:48:49:
af:b8:ed:19:32:53:34:f1:5a:7f:72:6f:5e:2c:5b:45:21:02:
8a:1b:9c:91:1c:77:db:ee:7d:96:0f:8d:9b:27:05:20:fa:54:
cb:ef:84:1b:4e:2b:a0:61:83:2f:e4:a4:93:47:e1:0e:89:a1:
4e:f3:13:e9:6e:8d:3e:a6:94:89:77:53:24:ec:00:6b:ff:15:
a3:49:1d:01:b3:83:ba:b0:7e:36:57:bc:44:59:67:a2:65:f5:
30:2b:ff:89:1b:81:9d:a8:2d:da:78:bf:ac:9d:19:e3:97:aa:
de:c8:92:a8:ea:56:17:31:e9:97:cb:0d:08:ce:04:e1:fd:58:
9a:58:91:ca:e6:69:4e:ff:83:9d:98:d8:aa:ee:c6:3a:72:29:
29:b7:a1:4b:2d:2c:0d:22:77:ec:c6:ac:e0:0d:43:9b:e2:56:
f8:09:78:07:b5:e6:29:10:3d:89:cc:11:23:bd:01:49:17:f8:
09:91:6c:a5:af:4f:a6:a5:5a:a4:86:b1:95:e2:a8:89:7a:9a:
c3:c9:4b:65:c5:1b:4e:19:91:8d:e3:ad:4d:6c:8b:20:c5:0e:
1f:ce:37:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:48 2025 by rpki-client