Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cce1967-a5c4-3dd4-96b6-7b5cdb7a0875.roa
File: 9cce1967-a5c4-3dd4-96b6-7b5cdb7a0875.roa (raw, json)
Hash identifier: STxZN32/X7ivx/HS0TL07hBMiEym7GSEb7rM771/rgQ=
Subject key identifier: 36:B5:55:21:F8:CD:00:1A:0B:41:AE:FF:35:74:19:0C:A3:67:8C:20
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D662034F9102DCE3AEE10B100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cce1967-a5c4-3dd4-96b6-7b5cdb7a0875.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.189.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:20:34:f9:10:2d:ce:3a:ee:10:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=46ba323c-efeb-4697-a4e3-29ab571f1c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:a8:ea:29:58:52:e0:9c:6b:f4:e4:0d:3f:
47:9d:f6:f9:98:69:89:81:72:c4:fb:2d:37:21:ba:
84:08:f6:2a:4e:8b:68:b5:6c:60:a5:e8:87:2b:61:
e6:12:b9:6e:3b:6d:28:bb:f4:eb:4d:e1:35:57:42:
b4:c9:c3:d8:98:c5:97:fc:31:97:79:ec:a1:e8:5e:
6a:eb:9f:29:26:12:0b:7f:13:60:26:62:55:eb:0e:
e7:58:8c:5d:01:6b:f9:cb:b4:3c:3f:61:00:5e:82:
ed:ec:2a:b0:fc:6f:20:db:3b:f2:53:5c:97:d4:89:
fd:19:bc:14:be:f2:30:93:d8:45:18:7f:fe:cf:a0:
46:7f:12:18:dd:f0:ac:0d:c6:55:9b:34:f9:6a:71:
27:ff:6e:82:74:6a:bc:b4:8f:8b:63:4b:6a:55:82:
aa:2a:e6:d2:9f:16:e1:8f:1f:de:41:0e:f5:32:ba:
8f:e9:0c:d0:b4:bb:98:73:24:19:2d:e4:ea:4f:67:
28:01:47:bc:69:59:74:6b:ac:ba:9e:0a:54:81:4d:
d0:5f:a1:46:d7:61:30:76:2c:de:f4:00:b9:f0:5e:
57:d7:f6:2b:da:4a:70:fd:db:75:77:a0:2a:88:98:
10:60:cf:c1:29:34:2e:d2:9e:8e:ad:b2:d2:ad:98:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B5:55:21:F8:CD:00:1A:0B:41:AE:FF:35:74:19:0C:A3:67:8C:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cce1967-a5c4-3dd4-96b6-7b5cdb7a0875.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:4f:dc:e8:cf:e1:c3:0e:f5:3b:87:40:a9:05:41:b7:7c:5e:
7f:32:09:14:f2:c3:63:12:bd:88:c4:5f:4c:e4:c4:3d:67:e1:
16:1b:97:4d:a3:29:ce:6b:86:cc:43:cf:2e:ed:c6:69:49:6a:
05:a8:4c:9d:05:e5:2f:64:fd:e4:29:20:22:95:d6:51:21:b3:
99:5e:12:b5:89:cf:d5:b6:af:ab:79:5b:cb:64:27:39:86:96:
e0:4b:c2:91:a7:18:4f:dd:31:3f:a7:a7:cc:1e:d1:80:aa:f5:
c4:1a:01:f6:94:30:45:7e:d6:b7:7a:5a:e3:31:98:9e:9f:f3:
3a:a6:df:ac:cc:99:24:56:2c:52:3d:e9:58:36:0d:51:b0:ba:
b2:52:d6:ac:ee:9d:ad:21:ea:65:67:c4:8d:39:f5:00:3d:5c:
dc:d5:2a:d3:28:36:d6:9f:63:60:39:eb:82:7c:93:b1:b5:00:
32:76:53:98:35:55:48:75:30:3c:ff:63:24:11:43:d4:0e:be:
50:60:28:da:b1:8d:e5:45:d7:98:49:34:f8:25:35:d1:2b:d9:
08:22:54:d4:cc:ba:5f:1b:4c:8a:0e:40:db:f9:f8:de:02:52:
fc:e2:c7:b8:3e:df:54:0f:5d:93:6a:36:34:83:14:5f:c2:d9:
e5:31:51:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:07 2025 by rpki-client