Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aee75453-f13a-3aba-912f-f1ee8f1f82c8.roa
File: aee75453-f13a-3aba-912f-f1ee8f1f82c8.roa (raw, json)
Hash identifier: 8bdXMqHGonasIZJ+vcWEflZvjZKFqEHjfTfitVyHFj4=
Subject key identifier: 33:C0:41:76:DD:32:0F:A2:6F:5A:BB:50:48:65:27:19:FD:38:F7:85
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FAEFAC2E3B0390DA15B7F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aee75453-f13a-3aba-912f-f1ee8f1f82c8.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.92.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ae:fa:c2:e3:b0:39:0d:a1:5b:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=e2c700eb-092e-46f7-b0be-ef6e65d654de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:98:a3:02:a9:cc:92:3d:c2:8d:0f:6c:11:50:
11:d1:62:2c:ad:b5:74:25:95:3e:ab:20:b3:cd:0b:
3b:ce:aa:64:b8:ac:55:db:e3:26:66:f3:22:dc:8e:
c4:eb:e9:06:f5:7c:51:35:fa:ba:1f:86:20:d5:80:
25:d6:d2:cf:84:37:d0:b7:92:cb:17:d6:b4:fa:3f:
90:d6:a7:02:47:62:21:49:a1:0d:05:dd:79:ff:f8:
00:e2:66:c1:41:05:0a:42:4d:25:9d:3e:f3:cc:d9:
31:85:e3:bb:f0:2f:ca:a4:e5:22:9a:03:0a:1c:e8:
1a:ec:c3:f5:fa:9e:bc:48:2f:86:83:37:23:6c:47:
d8:bc:13:6b:79:7a:22:49:bd:0d:28:7e:e0:45:b8:
a4:67:47:37:d5:f6:e0:ed:e3:04:92:c8:7f:93:09:
30:91:0a:0b:d0:94:d0:24:b2:a5:1b:f7:b3:64:79:
b7:35:66:26:5c:27:85:89:47:60:7d:73:51:d2:c0:
e1:1f:9c:6c:e0:a1:94:de:78:98:ae:90:84:fb:f0:
81:c3:e5:88:86:29:1b:c9:26:5b:fa:3d:68:84:c2:
5f:1b:5d:3a:37:cb:db:60:0f:39:ff:43:75:81:5e:
67:cd:94:2c:0a:0a:ec:a4:0c:79:32:25:dd:64:1c:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:41:76:DD:32:0F:A2:6F:5A:BB:50:48:65:27:19:FD:38:F7:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aee75453-f13a-3aba-912f-f1ee8f1f82c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.92.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:10:06:06:a8:2c:54:7c:d7:79:28:d6:fa:d4:18:fc:0f:ed:
e5:77:01:03:95:83:2e:d9:89:d8:7b:46:40:67:b4:79:53:ca:
ba:97:bf:2f:13:51:c0:06:88:df:ac:67:e7:b9:65:ea:6b:d2:
71:8d:8c:89:bc:c4:87:30:ab:eb:f4:08:1a:9a:89:ab:91:e6:
78:d2:1c:e2:02:6b:60:c7:3c:90:70:e7:e2:5c:57:b1:b1:6a:
78:0b:67:93:55:3d:94:f3:11:e1:c5:bd:82:63:b1:49:ab:39:
2a:81:a1:34:fe:2b:38:9f:52:ad:be:e0:9f:60:f6:b7:52:6d:
f5:5b:ad:4b:07:c0:fc:1e:dc:1b:80:0b:27:83:e3:8b:32:0e:
57:6f:48:c6:9a:96:6b:20:77:3d:db:b7:13:3a:7d:5f:84:e1:
5b:ec:d0:aa:5a:93:74:5c:a5:4c:bd:b7:05:b2:89:ad:f5:24:
d2:6a:be:94:e7:41:27:0c:83:6c:a7:4f:4f:dc:64:37:80:4e:
3f:f2:36:2f:ef:2a:47:bb:9f:3f:94:82:7c:05:c5:3b:ec:39:
13:78:26:0e:91:3e:09:74:3c:e9:ee:eb:e5:de:94:81:da:d8:
a1:3a:6e:63:6f:d9:87:a2:21:08:75:52:39:e3:f2:a6:80:dd:
0a:32:60:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:21 2025 by rpki-client