Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af5f3442-38cf-3449-aba7-4f290c772741.roa
File: af5f3442-38cf-3449-aba7-4f290c772741.roa (raw, json)
Hash identifier: J5Q4lagM8S03zHunV4Ir0LFHhDMivajRMASYnL422fI=
Subject key identifier: 3E:50:3B:B0:D0:04:2E:54:53:7C:68:D1:95:30:7A:A7:D2:61:71:16
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66192BDE0D9B6E538D3C4E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af5f3442-38cf-3449-aba7-4f290c772741.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.31.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:19:2b:de:0d:9b:6e:53:8d:3c:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=032097bf-e597-4413-8b65-04ece8e505ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bc:ef:23:20:1c:01:9a:97:df:04:fd:88:ff:
b3:8a:34:c5:27:5c:d0:75:4e:e4:79:c2:58:bd:2b:
3c:3e:9c:64:eb:21:04:16:92:e8:b5:17:e3:95:4d:
5b:23:83:aa:4c:f5:ba:f9:4e:1b:96:c6:59:48:9c:
fb:0e:17:19:56:41:58:c1:af:12:a2:89:b6:46:fa:
ab:00:6e:c0:0a:d5:bc:7a:78:ea:19:ea:f3:71:9f:
4b:2e:db:8a:eb:f6:2a:d3:48:cb:c9:de:ad:f4:a8:
59:7e:74:ae:05:32:8a:f6:a7:60:ac:4c:71:95:c0:
01:b7:1a:6e:95:01:23:ea:ef:b1:bb:6c:11:85:d8:
db:f2:ba:bf:b8:d9:a9:06:e9:9f:60:bb:5e:a8:10:
29:cc:92:07:af:5f:90:e9:fd:d0:dc:19:cf:f1:64:
e9:65:b5:9c:b3:1d:b9:8d:69:cf:6b:aa:95:6e:94:
3b:fe:b7:f8:4f:88:1c:c1:ee:89:6c:7c:53:7d:eb:
77:88:0d:cd:e7:79:c5:cf:c0:11:d5:2b:8f:3d:12:
86:77:5e:08:6b:c3:be:82:7a:52:6d:e6:c9:50:42:
0c:52:0e:7c:6f:18:ef:8c:99:8a:4c:41:f2:9d:3f:
eb:e9:bb:75:9f:bc:9f:f8:75:34:71:4c:22:fd:f5:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:50:3B:B0:D0:04:2E:54:53:7C:68:D1:95:30:7A:A7:D2:61:71:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af5f3442-38cf-3449-aba7-4f290c772741.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:70:16:82:43:d8:2a:bd:29:a5:a1:54:a5:6f:2d:fb:6f:c6:
27:fd:ae:3c:bf:97:11:c5:6a:63:a7:53:0f:2c:78:8c:77:08:
67:68:65:d4:35:6b:a5:b5:9b:c1:1a:4b:d2:7e:37:90:4b:38:
47:0d:2a:ac:08:a4:26:f3:d2:11:75:b9:b3:7e:b2:d8:e9:dd:
ab:a3:04:bb:41:7b:69:6a:f7:f1:2d:d0:46:e2:8c:20:9c:22:
41:d1:b4:4b:43:c0:79:dc:b3:92:ef:f8:1b:17:3b:63:bf:be:
9c:2f:ae:fc:b4:2f:d5:97:73:d5:38:3e:5b:1c:cd:9a:60:b0:
af:6d:31:50:b0:09:87:9d:a0:a7:7f:1a:e8:ae:c3:9c:fa:d6:
f8:79:f4:e3:cc:5e:e9:f9:e7:08:0e:f7:5f:6c:f9:30:c5:0e:
d4:2b:08:5e:46:e2:83:92:bd:fd:79:c9:ef:48:20:fc:5c:1d:
68:4a:21:d6:18:09:06:a0:b9:3a:0f:6f:93:d3:9b:26:5c:af:
d5:94:d0:e6:ea:04:e8:3d:fd:26:a1:27:0e:68:b5:a3:d0:25:
8c:6c:f3:1f:12:02:f9:77:2f:cf:32:7c:0a:48:d3:d0:2b:36:
53:31:fc:0e:ec:3f:b5:68:38:b2:83:61:d8:8c:dc:1c:2b:bf:
fc:92:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:33 2025 by rpki-client