Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/901d7eb5-4588-34c0-a15d-3c7e68cd52d6.roa
File: 901d7eb5-4588-34c0-a15d-3c7e68cd52d6.roa (raw, json)
Hash identifier: kT+2YkPS32COPXXjlWEwUdp5Uy/5mW9bq6vpvMZwV84=
Subject key identifier: 7C:B6:19:6D:F4:CF:C5:24:38:D9:B2:95:2A:02:CA:97:23:D1:D6:AE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285841266E27B04DD5D85EACA84F40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/901d7eb5-4588-34c0-a15d-3c7e68cd52d6.roa
Signing time: Tue 07 Mar 2023 12:00:00 +0000
ROA not before: Tue 07 Mar 2023 12:00:00 +0000
ROA not after: Wed 28 Feb 2029 05:00:00 +0000
asID: 7029
IP address blocks: 66.248.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:26:6e:27:b0:4d:d5:d8:5e:ac:a8:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 7 12:00:00 2023 GMT
Not After : Feb 28 05:00:00 2029 GMT
Subject: CN=e4e197ba-9001-4f3f-92f3-34c1638e02e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:f9:93:fe:45:8a:86:ff:83:79:2d:29:87:
12:44:2e:cd:2d:d3:03:72:f4:d2:ef:65:f3:a1:cf:
16:f3:4a:61:38:a8:e3:b2:a8:4e:12:41:b5:a4:e9:
80:90:7c:46:31:70:d3:94:80:a7:3b:38:6f:65:4a:
c7:8b:b1:7a:e5:30:34:7b:aa:2e:44:ba:77:b7:bc:
a6:dd:15:18:52:94:45:85:2f:76:ff:2e:3e:21:8d:
5f:33:f2:1c:ce:b7:36:7d:f3:00:ad:07:e7:e8:80:
55:a9:a4:bc:a2:c2:52:fb:0d:e7:12:7f:19:01:aa:
c7:fd:c0:16:8c:71:c4:00:df:b1:02:b5:33:8f:fd:
30:eb:f4:73:0d:34:c9:83:f0:47:a9:91:b5:0a:52:
af:9d:e9:18:38:3c:ad:96:ae:90:be:75:bb:ee:a8:
02:9f:29:11:6f:2f:d2:6a:6b:33:1c:97:9f:9c:0c:
ae:73:eb:13:75:f1:b8:da:5e:df:99:63:6c:0e:86:
cf:44:70:d6:f6:e0:1b:28:f2:cd:95:04:0e:73:c5:
0f:41:c2:b2:1e:42:8c:fb:27:e8:a6:7e:d2:cb:e0:
7b:54:cb:8d:6c:8c:04:01:e5:d5:92:6f:bd:4a:b4:
5d:c3:ef:ec:95:56:f6:35:1a:1a:4d:c3:94:b8:5d:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B6:19:6D:F4:CF:C5:24:38:D9:B2:95:2A:02:CA:97:23:D1:D6:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/901d7eb5-4588-34c0-a15d-3c7e68cd52d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.248.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:bc:b1:77:13:6b:44:6a:4b:7b:fb:2f:41:1d:e2:ca:59:cb:
33:9a:af:53:ba:10:49:9d:99:9d:5c:5c:4b:a2:18:5a:50:d9:
b0:67:ee:9c:7c:69:7c:68:15:bb:5a:e8:01:99:a8:c7:7a:87:
d4:df:32:39:8f:9a:9d:29:f4:62:7f:28:64:e0:b6:23:3b:4f:
8e:4c:a1:3c:40:cc:48:90:b3:c3:72:35:f8:b6:b3:26:54:a1:
f5:95:7e:28:3d:18:ef:1e:ce:8a:ee:0a:10:dd:e0:43:ab:73:
dc:27:bc:5b:c1:3f:59:a0:a0:6a:5d:55:82:b5:20:59:92:f0:
60:05:b5:fe:5c:6d:a7:23:ab:e3:54:b2:d9:93:a6:ee:52:26:
7f:34:52:78:8a:ac:8e:21:98:a2:43:23:a8:fa:23:e2:4a:41:
f3:bf:df:5c:de:e5:6c:9f:f4:76:8e:38:1e:77:ff:fc:3c:fe:
8a:81:73:fd:0a:11:c1:f8:90:fa:68:b9:84:f0:19:9d:60:c1:
8c:e3:bf:73:42:f8:5c:14:4a:64:ee:d5:fd:39:92:19:44:21:
30:c5:eb:35:26:d4:75:ed:f4:60:8f:33:c2:ea:b5:ba:0d:37:
fa:8c:b3:c3:50:3e:74:2c:20:d7:43:8f:3b:82:de:1e:10:84:
12:b4:f0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:00:52 2025 by rpki-client