Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf7d4f9d-c55b-3d32-b3b8-a593db740ae5.roa
File: bf7d4f9d-c55b-3d32-b3b8-a593db740ae5.roa (raw, json)
Hash identifier: ulPKalhntZK4XgsiG5/ZCvgGzk+O8xNH6J1/fgUzg0Y=
Subject key identifier: 71:57:8F:81:AF:03:35:5E:1E:8F:F1:DA:B5:FA:5D:FC:F7:04:64:A5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D55198A32DE7338F0F8F50580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf7d4f9d-c55b-3d32-b3b8-a593db740ae5.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 67.210.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:19:8a:32:de:73:38:f0:f8:f5:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=6184279c-5958-454d-9278-032841a7f17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:96:d2:fa:ca:5a:11:c3:dd:8b:ac:d4:b2:
fc:a2:1e:6a:5a:95:7e:dc:73:25:c6:7d:42:d2:d3:
75:b9:7e:00:93:b2:aa:ea:db:18:e5:a9:42:1e:f0:
a9:6d:fd:83:31:5e:8d:15:80:01:da:ae:6e:dd:c6:
a4:65:8c:6f:60:04:ac:dc:35:ff:d0:c7:f7:4f:9e:
dd:4a:a3:a2:7d:e4:c6:d8:e9:44:29:27:b5:96:74:
a3:c7:2c:8f:db:79:66:49:db:a4:05:02:e1:3b:bb:
1f:1e:41:83:fb:4e:ec:b5:b4:d9:80:99:6b:8f:c8:
fe:18:f7:20:10:e3:34:fe:8d:36:43:45:3a:ee:41:
57:59:7e:34:48:ca:07:c0:e4:3e:83:6a:26:ea:59:
b3:74:56:06:af:2f:da:b6:e6:b9:23:51:e2:f9:36:
2f:15:0f:00:4f:21:be:0c:2e:a7:82:cc:a7:c3:9a:
b5:d3:9a:e5:24:7d:9b:cf:98:c3:a6:6d:3a:42:c3:
c3:7e:2c:1c:41:1d:24:aa:1b:f8:0d:63:3e:8e:fa:
1c:0a:b1:15:78:0b:71:08:5f:fa:7d:50:f0:06:10:
e0:ed:cc:85:63:46:2c:d7:b2:cf:69:bc:ac:01:58:
f5:34:22:61:c9:52:e3:4f:cc:0b:73:d9:4a:95:7d:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:57:8F:81:AF:03:35:5E:1E:8F:F1:DA:B5:FA:5D:FC:F7:04:64:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf7d4f9d-c55b-3d32-b3b8-a593db740ae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.210.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:7b:36:93:55:77:05:07:c4:8b:b7:06:3e:c1:d8:08:09:0a:
4c:48:6c:57:3a:b4:63:e9:50:c5:c7:08:9f:a4:e4:12:0e:bc:
20:4b:d1:1e:e7:f5:7e:69:8a:be:a3:67:d5:3b:24:1b:c2:fc:
16:49:8c:2e:df:52:1e:46:f1:1c:1b:33:67:0f:8e:a3:49:76:
58:66:a7:47:69:76:c9:4b:c9:9b:26:78:f6:40:dc:ad:d1:3f:
36:7d:d0:2a:c3:93:c5:72:09:f2:00:13:6c:f4:b3:8c:b6:2a:
f4:59:ea:5d:56:83:75:32:5e:4f:55:c2:78:e7:d6:06:8c:b2:
07:49:4d:05:f8:94:c1:f1:c1:03:b6:e8:0d:10:47:d6:76:b3:
ab:5f:09:ca:cc:83:cf:27:2c:06:ae:5f:7d:d3:9f:9a:b5:50:
c8:29:36:ba:ad:99:be:54:4f:cc:8e:1e:a4:e9:92:d8:43:3a:
4f:3e:11:97:17:bc:7b:89:be:ca:40:b2:f3:3c:fc:08:79:21:
37:e8:5b:76:8e:31:00:fa:6c:5c:ae:23:de:80:b8:75:07:cf:
07:08:31:14:63:a9:f1:77:6f:69:76:62:60:ca:fa:dd:84:4b:
65:31:0c:de:82:df:b1:06:b8:4e:55:b4:f3:d4:70:04:46:bb:
8e:7c:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:51 2025 by rpki-client