Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa
File: c77f3968-1e5e-334f-96fa-e76652c76e3c.roa (raw, json)
Hash identifier: WZU0uyFgwepFWAEif5jidwbY4QLB6pPlEaitvvH17Jg=
Subject key identifier: DB:91:7B:5A:4B:D0:90:75:DF:94:27:01:12:55:22:B6:F8:82:86:7F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858494C440029DB3C89DB241C2180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa
Signing time: Mon 24 Mar 2025 20:32:16 +0000
ROA not before: Mon 24 Mar 2025 20:32:16 +0000
ROA not after: Sun 22 Jun 2025 20:32:16 +0000
asID: 7029
IP address blocks: 71.28.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:44:00:29:db:3c:89:db:24:1c:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 24 20:32:16 2025 GMT
Not After : Jun 22 20:32:16 2025 GMT
Subject: CN=68c0bc16-de90-4414-9e72-55ce0e97497c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:b9:79:4a:48:d9:69:98:12:85:7d:f5:1b:
07:dd:76:4f:8f:d9:e2:f3:49:2b:af:86:7e:f0:2f:
46:e3:55:48:53:e9:39:39:65:0e:57:3f:e3:30:65:
9a:74:58:89:ec:52:0d:b3:82:a3:9c:f4:14:1e:bc:
8a:03:50:2a:85:b6:0c:c1:8d:23:20:67:fc:38:52:
9d:4e:b5:0c:13:d6:48:37:3f:27:ac:87:ef:eb:7f:
72:40:df:0a:d7:a4:6c:23:c1:05:ae:07:a5:54:54:
ac:84:b3:0d:32:2c:07:9c:25:34:03:5e:98:9a:a2:
b0:c7:ff:86:49:e8:2b:61:3d:f3:85:b3:14:bb:5e:
08:fa:69:e6:75:bd:9c:ff:d4:2d:55:ca:ea:82:e2:
bf:e2:5a:4d:18:05:63:50:10:de:8c:20:85:20:43:
a2:e7:98:d1:73:cd:7b:8a:2d:06:9c:9e:35:63:0c:
a4:d9:24:60:0e:0b:3a:3f:bd:8b:0f:76:19:07:e0:
c9:40:99:ba:f6:d9:dd:ad:c9:9f:32:06:64:c4:17:
53:74:23:a5:41:78:ff:f5:7f:25:71:ab:7a:47:00:
93:29:d6:a3:d0:8b:f4:08:f3:7a:53:68:52:12:35:
dd:1d:47:64:17:8e:c2:14:48:d1:48:75:d6:56:98:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:91:7B:5A:4B:D0:90:75:DF:94:27:01:12:55:22:B6:F8:82:86:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:b1:67:8e:21:ef:b2:ad:d9:40:ff:29:c6:07:e8:98:70:43:
b8:ec:b6:ab:ca:7d:bf:24:6e:0f:77:65:90:df:fa:08:a8:f1:
3c:f7:ec:d4:b8:8d:de:44:c2:eb:02:df:00:43:b6:9b:81:68:
8f:e9:7e:d3:0f:58:8d:32:e3:a8:ab:14:46:e2:d9:94:94:37:
2a:c8:ed:21:75:d4:1f:48:fa:6a:69:66:e5:bb:28:d8:8a:97:
ab:d0:db:9e:b5:c6:15:a0:8f:e4:c3:bb:e5:ba:7e:1d:b0:3d:
35:a0:27:c8:5d:9c:d4:21:df:11:02:bd:a3:1d:49:c8:60:74:
63:c0:79:12:04:c3:8f:1b:67:88:ec:30:bf:ce:17:8c:d2:2d:
16:89:c6:e6:59:ab:71:9b:9c:94:e7:8d:f3:1e:d9:46:5b:55:
df:fd:32:53:46:4e:c9:48:36:65:e0:17:cb:fa:b4:f8:02:26:
91:4c:45:57:e7:2d:93:1f:80:1d:70:bb:ac:6d:70:a5:e7:61:
bc:aa:c2:1b:9e:23:c5:ac:28:46:dc:90:9a:6e:b7:da:0e:19:
f7:a1:a1:47:b9:01:a6:d0:ca:5f:00:52:9a:54:af:d8:69:31:
93:c5:09:52:94:78:c9:e4:80:12:56:dd:cf:74:90:9b:f7:88:
05:23:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:54 2025 by rpki-client