Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a49ccce8-8e32-369d-ae46-ea63ed45cf71.roa
File: a49ccce8-8e32-369d-ae46-ea63ed45cf71.roa (raw, json)
Hash identifier: D7CwVgLhkUUVAN3GtzmBupVMB3jGAn9K+FvUvL0dY4o=
Subject key identifier: 09:79:4D:04:9D:E5:C3:A0:55:73:37:A0:50:81:CB:8E:26:C7:7E:D0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661AE33E0AB8CB78AFF7EB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a49ccce8-8e32-369d-ae46-ea63ed45cf71.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 75.89.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1a:e3:3e:0a:b8:cb:78:af:f7:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=08040b92-72d3-4978-a977-339378f108ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:fb:20:20:30:24:08:1f:55:84:18:8a:ce:
0c:98:49:e5:23:7e:ff:34:01:33:76:9b:a7:04:21:
7f:e8:14:d8:1a:d8:f2:5e:3d:e4:9d:f2:80:f6:f4:
d1:3d:1f:3c:97:d1:18:4c:0f:38:71:ea:2f:e9:da:
c4:1b:6a:13:e4:cf:e8:52:1f:e4:de:f6:51:60:31:
3d:a0:d1:6c:ea:15:08:8f:fe:bf:9e:ff:0b:ec:be:
91:b2:c3:50:ed:93:0a:f3:1d:75:b4:47:c7:8c:6f:
9b:9a:ec:61:3d:04:e2:35:08:a8:dc:c3:5c:02:7f:
58:52:7e:26:80:49:3a:e1:77:15:0e:98:01:56:7b:
34:a3:89:19:d4:7c:ae:35:4a:26:d1:19:0b:50:11:
b1:8f:9e:3c:b0:9b:bd:91:50:4e:99:4b:b7:e4:7a:
d3:63:26:c4:16:83:d5:4f:bc:8d:4e:bc:0c:fc:43:
aa:f5:cb:57:a6:8e:97:43:22:e6:4b:b7:c8:8e:5e:
3c:f8:99:b4:6f:d3:11:ca:01:c1:b1:30:b2:ba:0e:
3d:04:5b:43:23:e5:ef:77:1a:f8:a9:da:53:58:43:
40:ca:27:41:5a:f6:8d:49:d4:71:bb:9b:ff:99:42:
e7:b2:1e:1c:c8:ee:92:3a:c8:20:cc:c0:5a:64:32:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:79:4D:04:9D:E5:C3:A0:55:73:37:A0:50:81:CB:8E:26:C7:7E:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a49ccce8-8e32-369d-ae46-ea63ed45cf71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:e9:98:96:ca:17:34:fd:c8:77:c3:5c:7b:d3:15:4d:6c:86:
e2:54:ca:f1:b3:40:1f:8f:c2:a9:7b:81:73:49:c6:7a:d9:a9:
72:9e:01:e8:ad:c1:c5:b4:20:64:b2:aa:f3:d8:09:80:41:b0:
e1:c3:d3:b1:0a:49:6f:57:bd:3f:2b:6e:66:a0:57:5a:bd:ec:
24:a3:14:ed:f2:6f:3f:56:83:8e:84:0e:33:f6:35:83:1c:c3:
2c:94:b9:06:ef:9b:09:32:b5:1c:2d:1f:3b:e6:27:6c:5d:0f:
3a:79:f9:5a:8f:34:3a:eb:5e:54:14:9f:94:b1:3c:41:e4:32:
85:69:f3:24:2a:c8:6d:d3:b9:89:22:3e:88:3f:16:6e:19:2c:
80:f8:e1:79:fe:c9:00:d8:c8:98:c9:b7:08:fb:ac:a4:6f:82:
cc:4f:34:f0:66:55:51:a9:66:41:45:fd:6a:b2:2a:a5:74:41:
12:08:b2:02:05:0b:07:a6:ad:af:3f:18:d1:dc:e6:14:0c:1f:
6c:cf:1c:ad:44:35:d2:b3:d2:52:04:71:27:49:58:ee:2e:67:
77:56:f5:26:e4:dc:9e:ea:c7:66:f3:9d:de:64:70:f7:40:57:
15:1c:bb:d6:12:f4:1b:67:7c:69:d5:1e:02:5b:fb:cd:2b:ee:
44:31:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:23 2025 by rpki-client