Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4342e88-3544-3dd6-9689-506530c01c07.roa
File: d4342e88-3544-3dd6-9689-506530c01c07.roa (raw, json)
Hash identifier: 0cnN0r/Zfg+/ZEEiPH3m00dj0Y+dhKEY5f8OjRWhw64=
Subject key identifier: E6:2D:2B:A2:CC:AC:1A:3F:16:B4:C1:16:F0:32:56:EA:8B:E0:EA:00
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB440E72F07E7C5ECA6937EF0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4342e88-3544-3dd6-9689-506530c01c07.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.189.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:40:e7:2f:07:e7:c5:ec:a6:93:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=adc75f69-fdd0-436a-8e3a-748bd5cb2b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:1a:68:33:ff:8b:8f:f3:b3:c7:83:ed:f8:
b9:47:5a:f0:b8:0f:92:8c:a8:cd:64:45:cd:07:94:
2f:b6:d1:ce:6f:46:0b:da:ec:22:cd:2a:60:ff:0f:
21:9a:14:38:03:78:6f:4f:ff:98:84:99:59:a3:39:
5d:48:cc:c5:96:7b:b8:61:61:8e:79:c6:4d:eb:47:
b0:01:49:ac:ea:aa:07:84:63:d4:1d:b4:30:44:a9:
e2:ea:10:2b:98:a0:23:95:24:71:52:c4:f5:04:0a:
5e:1b:8d:b0:ab:ae:4e:65:fd:86:f6:35:1a:cb:1b:
f5:c4:c6:b4:1d:27:fa:81:77:7b:13:dc:f9:95:05:
44:10:ec:14:bb:ff:da:57:94:bd:65:59:c2:71:78:
11:3f:fe:c4:19:9d:f8:0b:63:04:a0:0a:9d:11:37:
f0:b2:60:a4:2b:01:13:1f:6d:c7:7e:70:8b:76:b0:
88:f1:10:ef:d3:48:c7:e2:7c:1a:28:44:ae:32:8b:
02:6f:2d:25:8d:6d:32:33:86:ef:0b:22:4a:cc:83:
6a:f5:c4:54:6f:a2:b3:5b:e4:ed:b4:51:00:43:eb:
45:8c:8d:a1:9c:cd:ca:b9:5b:6f:c2:cb:34:08:e2:
fc:9b:59:cc:cb:15:aa:48:f8:a5:2f:06:2c:85:50:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:2B:A2:CC:AC:1A:3F:16:B4:C1:16:F0:32:56:EA:8B:E0:EA:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4342e88-3544-3dd6-9689-506530c01c07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:2c:0f:b6:61:61:ea:cc:27:45:9d:a1:91:f9:f8:10:03:b8:
f2:a9:44:2f:ab:95:46:6a:79:06:aa:ae:f7:3d:a5:b7:89:b1:
e2:01:67:63:45:03:2d:e1:3c:89:b0:d6:55:bc:e6:73:eb:16:
26:20:73:19:31:3c:65:88:4b:97:85:c9:26:d4:84:41:b3:06:
1b:88:d0:d4:c6:dd:30:19:53:5e:7b:a2:9f:93:9b:dc:f6:2c:
40:11:a4:6d:f4:8a:82:61:bf:22:94:b9:b0:92:ed:e4:9c:ac:
6e:06:12:ba:aa:42:00:30:90:04:dd:58:0c:71:a8:48:ca:c0:
6d:f5:27:f7:82:42:13:59:0f:87:fe:df:12:bc:03:a5:59:a3:
e0:85:1c:de:d5:6e:ad:b0:f5:d0:c1:ad:54:5a:21:9d:53:35:
be:45:a0:8b:15:b0:5a:a1:2d:ed:44:8d:5b:b6:f7:5b:63:e2:
f9:0a:1f:eb:85:d2:af:1b:98:d3:72:68:72:f0:aa:68:21:59:
42:54:df:e4:ec:99:5a:76:89:90:84:0e:fb:50:77:8a:1c:fc:
28:91:1e:0a:95:57:7d:34:fe:4b:b4:83:99:bc:15:29:09:4b:
66:73:2b:67:f6:e3:cc:1b:ce:14:d5:36:88:31:d7:3e:c7:46:
ed:44:e0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:36 2025 by rpki-client