Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc85f052-9f49-38e6-93a7-3cb555d8d793.roa
File: cc85f052-9f49-38e6-93a7-3cb555d8d793.roa (raw, json)
Hash identifier: Q84qMA7nz2cRsq14CoUANwgAzQrtbjVkeR5V0I1mliI=
Subject key identifier: 8A:69:AF:47:86:1F:4C:49:7A:32:9E:60:71:96:F4:1A:66:BD:B9:D0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB441010AAD3056A533C84980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc85f052-9f49-38e6-93a7-3cb555d8d793.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.102.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:41:01:0a:ad:30:56:a5:33:c8:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=9458081d-d99f-4b90-8a96-4ce51d8e5391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f9:7b:f6:e9:30:36:11:21:76:2e:8f:92:72:
cd:e1:00:9d:18:cf:03:06:b4:06:62:01:4d:e7:3c:
e9:65:2f:f8:d5:49:db:95:39:83:31:7a:27:66:fc:
bd:6b:2e:84:72:e8:aa:77:68:d5:d1:45:d0:d5:ee:
38:14:86:3e:f3:e8:13:c5:4a:c2:60:eb:76:15:b0:
a9:ed:6b:3f:41:75:75:c0:c1:a8:31:fa:f7:1b:de:
b3:40:ee:e4:17:2b:69:1e:20:ce:78:fc:27:52:9d:
30:f8:0a:9b:d6:11:fd:99:55:50:e1:13:46:dd:11:
38:fa:48:34:8f:d8:2e:44:ec:09:0d:4c:8a:5f:59:
94:55:0a:b3:9d:06:28:c7:17:48:57:78:ad:a6:f2:
bd:78:54:6c:e3:3c:94:df:6f:4a:c2:0e:f7:b7:58:
e6:33:40:cc:19:8a:fa:ff:91:c5:f5:64:03:3e:fe:
0f:0c:55:f4:c5:65:9d:e0:a1:6b:98:ac:e1:1b:f4:
f1:69:1f:01:68:cc:2e:e4:ec:57:51:11:6f:dd:d1:
8a:4b:be:77:1f:15:7a:45:e4:62:72:9e:db:68:d8:
9f:03:81:25:f9:20:92:bf:55:7b:c3:54:91:ff:96:
83:8a:d2:63:8c:58:f1:de:37:c2:a3:78:bc:9f:c2:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:69:AF:47:86:1F:4C:49:7A:32:9E:60:71:96:F4:1A:66:BD:B9:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc85f052-9f49-38e6-93a7-3cb555d8d793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.102.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:0d:9b:00:83:07:63:b5:a2:ed:45:1f:6d:f0:5d:78:6d:14:
b0:e7:b3:16:19:92:d8:35:f3:77:e6:38:65:b0:af:c0:94:a3:
32:2f:94:df:03:04:09:8e:9e:bf:32:51:f4:48:ae:de:c2:98:
f2:77:e7:b6:bc:c9:81:31:fd:c1:b2:f6:ce:12:5b:94:5b:04:
6d:2f:e3:b0:f7:6e:1c:71:9b:a3:31:dc:52:07:e5:63:2f:96:
68:6f:3b:1d:ce:94:b3:89:28:33:03:a2:c4:5d:02:f6:0e:41:
54:52:56:24:df:f1:05:97:76:ec:6c:ba:93:5c:b9:f4:7d:39:
e0:18:b9:26:1b:fc:b7:bc:23:05:b5:bf:a0:91:f4:43:72:7a:
55:14:2d:c7:76:74:38:95:75:e7:4c:81:47:3c:18:ed:2f:9e:
0e:77:81:24:e3:5f:20:3d:0b:47:87:36:86:9a:30:d5:bc:ad:
e4:c2:8a:a9:2b:19:d7:91:db:a5:3f:08:e6:40:db:57:75:d8:
5a:93:78:1c:1b:57:70:44:72:1a:62:88:0b:a9:0c:7f:40:a2:
d8:99:86:51:00:b9:18:f0:72:1b:29:54:14:8a:c2:9d:83:ca:
f4:58:95:3b:d8:d1:e6:01:d6:b6:ba:2e:1a:7e:83:26:95:66:
b1:b9:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:33 2025 by rpki-client