Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b254ddee-40c8-37dd-94db-cdf5b167dacc.roa
File: b254ddee-40c8-37dd-94db-cdf5b167dacc.roa (raw, json)
Hash identifier: kcvHqqSi/bJKnyKX3qVt3It5fWcnazinTyz+KdRUlOc=
Subject key identifier: 94:15:6B:9E:77:F0:11:19:DF:FF:CE:24:5F:1C:BD:AC:F2:7C:69:3B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FC5BB7EDEF185FC23182100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b254ddee-40c8-37dd-94db-cdf5b167dacc.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 26914
IP address blocks: 66.32.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:c5:bb:7e:de:f1:85:fc:23:18:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=90e95d2f-8df2-4128-ab31-6ed6227453b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:89:b8:02:26:b3:c0:96:c6:16:b6:2f:ee:
a7:0e:f8:80:07:d6:2e:77:1c:7b:1e:7f:07:d9:10:
eb:20:b8:32:af:29:a0:3d:dd:ea:1c:1a:e2:6a:f5:
3e:a8:c8:36:31:ef:a1:57:9d:3e:f5:de:41:63:21:
2b:1a:b9:bc:0a:98:80:58:55:f6:d3:1a:dc:99:1f:
70:a4:8b:53:78:00:10:b0:54:2f:46:c2:c6:da:57:
5f:fc:4a:25:a1:4a:bd:93:c0:5e:43:0b:19:03:02:
bc:c3:da:eb:05:06:46:bf:ad:15:40:7a:d3:9e:09:
df:eb:1f:ee:84:f7:c1:80:44:97:80:4c:88:eb:0d:
70:18:7f:81:a6:8b:33:9f:6f:4c:ca:bc:62:d3:17:
32:16:60:39:b8:28:e0:b9:5d:27:21:0a:70:88:6f:
ad:39:9c:c3:86:6c:25:d0:8a:60:c6:d0:7e:5b:f3:
a2:d7:ff:4b:6d:ac:1f:c0:5b:af:aa:76:8d:fd:aa:
3c:1f:e2:ed:b6:a7:3e:9e:fe:94:44:3a:25:c5:33:
ce:ca:98:95:d7:4f:c7:b2:0b:a8:08:94:05:13:ee:
9f:87:ac:4e:3d:73:0b:3c:c5:59:76:67:dc:0e:25:
97:2d:bd:81:13:3d:f8:b6:d2:70:3c:2b:33:51:55:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:15:6B:9E:77:F0:11:19:DF:FF:CE:24:5F:1C:BD:AC:F2:7C:69:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b254ddee-40c8-37dd-94db-cdf5b167dacc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.32.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:2e:7f:c1:fa:16:87:a2:30:40:a3:84:35:db:e9:32:ad:46:
05:63:ed:98:43:0a:e7:09:27:bf:d4:60:ef:ab:1c:01:f4:11:
74:ea:6d:bd:61:91:5e:38:df:5c:de:5f:a7:66:ac:16:de:51:
c6:f7:53:c1:1a:55:59:88:d4:09:5b:4b:03:50:cc:c3:fd:bc:
4e:0c:2a:71:fd:d6:63:55:8c:e6:02:3b:06:cb:bf:72:9f:b3:
33:c2:9f:f0:e6:32:7f:02:6e:bb:36:de:a9:7e:c5:ba:bb:1c:
78:15:c1:90:3c:3d:e2:c5:d4:dd:a4:a0:71:e0:37:f9:d7:88:
cf:06:62:94:06:97:10:31:07:0d:1c:b8:5a:34:28:d3:7b:a7:
3e:cf:ab:41:6c:03:a0:ce:37:06:64:c7:36:26:10:58:35:d2:
e4:76:df:72:78:01:44:0a:b2:8e:65:b2:90:fb:db:a3:a0:97:
27:57:5c:3c:37:60:47:ef:80:b9:09:35:78:26:ee:96:8d:ee:
32:47:d0:66:cb:a7:67:92:9f:e7:02:67:af:f5:cf:88:d5:47:
fa:a5:69:1e:9a:91:77:5a:82:f5:96:5e:3d:8e:4c:20:21:c1:
bb:62:e0:43:89:4c:0c:7a:09:c5:82:cb:f0:a9:8a:1e:0b:86:
af:a9:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:58 2025 by rpki-client