Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bafb351a-48bf-3d9a-99f9-4f731b6f356f.roa
File: bafb351a-48bf-3d9a-99f9-4f731b6f356f.roa (raw, json)
Hash identifier: mpiWb+4glRhaVCD8U89jicKRw3/UY2ITzeUKw5N3o3Q=
Subject key identifier: 97:65:3A:93:03:97:0E:58:DE:B6:68:4C:09:D6:0F:93:7A:5E:CB:BE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FC2AD0D9310FDBC03733B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bafb351a-48bf-3d9a-99f9-4f731b6f356f.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 27338
IP address blocks: 66.0.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:c2:ad:0d:93:10:fd:bc:03:73:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=3de9234b-884d-4a72-8ba0-517aabff962b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:28:b9:9c:c1:3e:16:d7:1e:29:c0:be:12:
e8:47:60:e8:d1:d5:67:2e:e8:64:a9:dd:91:3c:8c:
3f:94:05:df:2e:3d:78:1b:c8:39:b4:ef:93:a6:44:
ec:85:c6:c2:03:23:20:7e:da:dc:b5:92:fa:4c:02:
bb:54:27:f1:50:b2:5c:2f:b0:51:1c:ea:00:96:b6:
c0:9c:bc:48:56:cb:9c:11:6e:01:d2:bf:e3:b0:4a:
13:49:30:82:48:e4:4a:bc:34:32:ca:96:80:1d:61:
40:6d:09:be:62:94:f5:74:af:52:40:66:0e:6d:70:
64:78:8f:bc:a3:60:19:ae:f7:2d:1b:92:e6:9f:d5:
91:fa:34:bd:7d:fb:6d:5d:dc:60:d0:21:65:40:f6:
94:46:14:71:d5:e3:7e:71:a8:86:e6:1d:57:2c:85:
bc:02:fc:a8:d2:db:2d:e6:ac:86:d0:d8:4a:dd:09:
8e:e9:62:54:63:e1:f5:d7:21:9c:e7:71:98:3e:20:
d7:70:f6:3a:30:df:5e:c3:80:f7:18:90:80:75:68:
3b:9b:ef:2e:18:89:b2:b7:ee:41:de:f0:cc:7b:c8:
47:36:1c:a4:65:76:13:17:3b:ec:ec:e4:50:2f:6f:
8f:41:ef:b1:7f:7b:2e:48:08:18:f6:a4:62:25:b6:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:65:3A:93:03:97:0E:58:DE:B6:68:4C:09:D6:0F:93:7A:5E:CB:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bafb351a-48bf-3d9a-99f9-4f731b6f356f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.0.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:08:d8:0d:37:2d:92:e1:81:b8:f6:fd:be:a7:e3:ef:2d:f4:
55:0f:08:d2:0f:e2:e8:f5:61:f5:56:65:16:9b:3d:6c:0f:fa:
bf:8f:32:a2:4b:3f:26:83:22:0e:a8:71:79:58:ff:6d:b6:27:
28:72:80:69:8b:d6:c7:9d:14:1c:44:34:1c:8a:88:1c:40:04:
07:41:49:1c:79:d1:15:de:ed:cb:5e:4f:23:d8:68:38:a0:82:
c0:37:c3:86:e9:71:42:19:be:0c:a9:56:69:46:b8:9c:5c:e5:
eb:e3:c9:2a:29:92:7b:1b:8a:70:7c:20:b2:99:d4:7d:93:54:
a3:ce:91:7b:d4:e1:ed:c8:6e:34:6b:f2:f1:a3:5f:47:a6:26:
9c:cd:ea:1c:34:02:53:72:45:07:bf:8b:32:c4:59:e6:52:d9:
2a:ec:7b:0b:84:35:c1:be:14:60:76:81:73:6b:92:12:c8:b9:
5f:aa:4f:66:54:8c:0c:ee:9b:21:c1:79:c7:0a:42:6b:b2:04:
e4:88:5c:08:d9:da:8f:d5:6c:0e:9f:f9:ae:ac:10:6b:b6:b8:
af:a4:ed:f5:e7:dd:73:c6:c3:20:53:20:bc:6a:90:ec:8b:06:
7e:ed:21:2e:e4:a9:98:35:03:95:0a:b1:38:22:78:e4:a6:3a:
cb:19:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:33 2025 by rpki-client