Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca4d5bf2-f3f9-3f16-8970-d34797f4876b.roa
File: ca4d5bf2-f3f9-3f16-8970-d34797f4876b.roa (raw, json)
Hash identifier: ZDM+Z16JFL1Mg+REJf0myiLe5kIiL3Krh7D5VeWnJE8=
Subject key identifier: 42:E1:48:32:CA:22:51:1A:E5:FB:1B:05:B9:93:39:4B:2B:91:7F:5D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551AB5A9B360B324F7DEB6C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca4d5bf2-f3f9-3f16-8970-d34797f4876b.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 32833
IP address blocks: 72.248.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1a:b5:a9:b3:60:b3:24:f7:de:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=ccde4ccd-5d73-4c2f-b04c-971e7a1343bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:60:c7:4e:60:1a:5b:83:fd:5f:a3:2a:d5:
aa:2f:d8:6d:a5:a6:28:01:fa:9d:ec:f8:e9:a6:29:
60:9f:c4:66:67:5f:8c:90:bd:0f:50:2a:5d:c1:97:
48:5c:54:0f:df:73:7f:8e:f1:55:93:1b:bb:2f:30:
38:c7:4b:d9:e1:16:82:dd:83:39:d2:ad:9e:67:b3:
28:27:ee:c5:e0:7f:7e:ba:89:2c:3d:3e:5f:78:72:
4b:3c:97:c3:08:65:d6:fa:ec:e5:63:11:ee:80:e3:
ea:6b:2e:51:07:60:75:cf:30:09:d6:0b:52:ef:c2:
c7:51:9c:55:a7:47:0a:22:c8:fd:96:28:a7:df:aa:
50:7e:19:71:29:54:77:82:9c:ca:4e:fc:66:be:3e:
50:eb:df:b4:af:fe:b7:81:d2:d3:be:ab:75:8b:78:
cd:0f:c7:13:16:ed:5a:14:b5:67:d0:38:8f:8d:9e:
0d:d6:d0:1d:ba:26:a0:93:53:2c:ca:a6:db:ba:01:
a3:20:23:7b:f3:48:2f:51:34:5c:04:35:8e:a0:00:
5f:bd:88:63:a0:6b:04:57:11:8a:bf:1e:61:ff:9e:
74:9b:8d:37:45:73:44:e1:84:bb:3b:7f:6b:eb:a8:
02:1e:0b:f4:53:20:1f:9d:39:af:79:0a:08:eb:59:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E1:48:32:CA:22:51:1A:E5:FB:1B:05:B9:93:39:4B:2B:91:7F:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca4d5bf2-f3f9-3f16-8970-d34797f4876b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.248.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:51:6e:85:2f:3a:7d:22:b5:7c:47:01:82:86:4d:62:68:05:
2d:e3:8c:fd:f7:ca:19:54:76:55:24:4f:c8:ab:b5:7a:e9:27:
9b:ee:5e:87:3c:be:13:60:d7:e6:21:58:f1:01:83:7b:a4:33:
89:07:f1:85:c6:4b:7f:89:ca:60:21:91:44:42:78:40:90:ca:
68:5d:8c:22:74:73:c9:c9:63:e7:33:1a:fe:d0:ef:56:21:c1:
d6:a1:b8:ee:35:14:11:b8:88:99:0f:10:52:22:01:03:e7:1e:
ae:1e:0b:12:cc:3f:19:1d:61:28:72:7c:81:ae:f3:77:54:1f:
c2:37:9d:a1:6e:d4:3c:0d:48:81:7a:bc:08:3f:2d:f5:79:15:
74:ca:9f:bb:67:2d:9d:aa:12:8e:f3:20:ff:54:08:57:a9:42:
97:69:24:e4:e6:cb:d1:57:5a:88:95:d6:6a:2a:43:ee:83:9d:
37:40:35:2b:87:db:30:08:34:d2:5f:05:47:09:c1:91:2d:9d:
ec:3c:cd:ff:ca:15:06:c0:ac:81:0d:05:69:79:6e:01:0e:f7:
e5:c9:ce:1c:40:03:30:f9:73:40:28:3f:36:56:6f:60:da:57:
d7:57:f4:c5:27:70:f7:7b:92:90:54:76:25:59:21:66:24:ca:
f4:3a:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:46:16 2025 by rpki-client