Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/988e270d-5828-3bf5-9a1e-f98758da9ed5.roa
File: 988e270d-5828-3bf5-9a1e-f98758da9ed5.roa (raw, json)
Hash identifier: X5tHJaeJd1gFKh45U/W2/5Oy9CuZ8KLEH+4Qs7HTW6U=
Subject key identifier: 9D:FB:22:6A:BC:E0:D0:A6:F0:8C:04:62:C7:3C:E6:AF:E4:A8:3C:0F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FBFD163E3173365A7BD6AE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/988e270d-5828-3bf5-9a1e-f98758da9ed5.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 394183
IP address blocks: 64.199.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:bf:d1:63:e3:17:33:65:a7:bd:6a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=1e3edc19-7c4a-4437-bc67-2580520b2041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:c0:9e:4b:8b:df:e3:dd:3a:99:7a:6e:8e:
65:cb:cf:be:e8:4b:b0:fd:03:6f:00:d6:46:c7:9f:
3a:20:c6:2e:4d:7b:65:a8:35:60:5f:fb:0e:2b:bd:
ed:6d:f0:0c:e3:99:5c:e7:f4:5c:11:51:f8:fe:35:
37:3e:1f:18:52:4e:57:ce:23:a6:dc:3f:06:c8:2d:
b8:33:da:fd:d1:79:af:a5:4a:09:ac:46:e1:31:2b:
58:db:bc:e1:3e:87:07:90:9f:78:69:09:ec:34:f1:
c2:08:f4:71:91:3e:76:d3:c5:c4:67:50:fa:83:5d:
7c:d1:16:9a:a7:00:b4:f4:2e:13:07:63:72:76:8f:
20:95:66:04:aa:52:b3:12:d9:2c:14:6a:cc:1b:55:
66:7a:e6:30:72:69:db:cf:db:0a:bd:0d:7c:75:45:
75:db:ec:b5:e6:ea:f8:57:a7:03:17:51:89:28:b2:
c0:51:c3:a3:32:4e:37:b0:8f:aa:19:5c:86:27:40:
ae:13:63:4b:9f:94:59:09:31:dd:d2:c8:e1:e7:16:
6c:a5:a4:f3:88:0d:9c:be:89:c6:e2:7b:8a:ac:b3:
55:73:bd:cc:4b:e9:ec:70:77:da:3e:fc:64:5e:9e:
6f:e3:5c:4c:36:21:1c:9f:68:01:a2:96:cc:25:ac:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FB:22:6A:BC:E0:D0:A6:F0:8C:04:62:C7:3C:E6:AF:E4:A8:3C:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/988e270d-5828-3bf5-9a1e-f98758da9ed5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.199.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:13:aa:f6:5d:95:c2:dc:1e:f4:ff:50:a5:e3:5a:66:c5:d4:
e3:a8:9a:70:72:92:d9:f5:6d:33:12:ea:14:da:66:7f:c7:7f:
1f:fe:e6:5a:5f:e9:c4:da:bc:37:07:b3:ef:96:20:08:68:e3:
8e:a9:fa:e1:d9:a9:6f:2b:56:95:81:d2:9f:3b:21:f4:a3:57:
a8:0c:9b:8b:93:a7:f8:29:b0:3c:75:f9:dc:58:43:4e:2c:49:
d3:de:2c:29:8f:93:e5:3c:d2:6f:b5:de:c4:59:44:47:d0:99:
2e:ec:a3:9d:fe:ae:58:50:f2:38:6a:21:f3:50:81:d2:46:9e:
70:55:4c:1f:5a:85:c0:38:a5:73:9b:63:c9:5a:58:dc:02:47:
c8:9d:c8:39:c7:5f:34:ee:98:a9:27:2a:d1:4f:23:70:61:c1:
03:79:78:dd:c1:37:82:40:4e:76:35:25:a4:19:6f:3c:ed:ea:
fa:c6:3c:96:a8:3f:e4:52:0d:d5:14:93:e6:e3:74:61:a9:38:
52:94:ae:d1:8c:e3:16:17:eb:98:91:b1:85:4a:f5:49:a8:3b:
2a:33:51:e6:61:9b:96:b4:70:2d:05:9c:74:7a:a0:39:55:6e:
6a:c8:f7:f4:36:ff:df:c9:fc:e1:cd:c3:25:8e:9e:90:1c:75:
96:67:d0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:48 2025 by rpki-client