Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d92beb71-a889-34b0-bd7f-9c47a2d72b7c.roa
File: d92beb71-a889-34b0-bd7f-9c47a2d72b7c.roa (raw, json)
Hash identifier: llvZmhI4lEt5Rf/Hm5miNuRuoV6c7i/hCxqxI8973Ko=
Subject key identifier: 7E:78:D0:76:29:19:05:21:25:C4:62:C6:3E:C4:63:3C:78:9A:45:26
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB440FE424F40532B09322F70
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d92beb71-a889-34b0-bd7f-9c47a2d72b7c.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.102.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:40:fe:42:4f:40:53:2b:09:32:2f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=1c816d8c-d8ae-43d5-8538-d6afaf1f8722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:75:41:a2:a5:bd:cf:c9:c0:01:a1:3b:f7:
11:09:d5:15:75:c3:62:ec:55:36:ea:36:ad:c6:3b:
ca:c0:9c:cf:06:b4:98:c3:a1:dd:8a:1b:4c:a3:ed:
4a:15:87:4a:50:76:e3:2a:44:45:9c:b8:fc:67:71:
d0:57:20:9a:a9:7f:d4:d0:f4:10:a6:a9:66:2b:dd:
7d:40:b2:f6:b3:15:14:df:f3:f3:a4:ee:bf:e2:e3:
5f:9d:cd:de:d2:52:5f:6c:d5:0c:f3:1a:f9:ce:1c:
8e:ef:61:4e:ab:5b:a7:6a:f2:80:32:38:3e:be:1a:
55:5f:d5:3f:6e:c3:b2:2d:83:02:1b:17:ec:5b:df:
a1:54:cc:c7:41:95:d4:dd:c8:e5:69:20:bb:38:4a:
8e:6f:9b:07:91:cb:6d:f1:45:b1:31:ec:dc:63:09:
91:c0:cd:57:b8:37:4a:39:6c:e4:4e:e6:c2:c4:16:
78:56:aa:09:4a:ed:6f:ef:7a:3e:71:ee:f2:ae:df:
25:d7:83:bd:a6:e4:80:df:f4:46:1c:48:8f:6a:df:
32:46:30:36:ca:87:7e:c5:b4:5d:8a:b4:e6:ec:4f:
c6:2a:9d:bb:d1:57:1b:42:1a:95:e2:d7:08:2e:03:
42:61:1f:c9:e7:4e:32:af:ec:86:4b:5e:0f:94:f0:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:78:D0:76:29:19:05:21:25:C4:62:C6:3E:C4:63:3C:78:9A:45:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d92beb71-a889-34b0-bd7f-9c47a2d72b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.102.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:0b:96:14:0e:cf:0d:34:34:10:38:c5:06:83:56:00:e9:28:
07:f5:68:f2:71:4e:cf:ba:d4:8f:0c:26:02:04:f3:81:56:3b:
b5:84:39:5c:32:54:46:16:00:fb:66:73:d6:d9:9a:c8:d4:d3:
1b:e2:ab:69:4e:de:2e:89:af:34:e2:bc:c5:28:18:64:4a:30:
42:7f:75:ae:ee:52:d5:5e:98:d4:66:7d:59:72:a6:f9:92:ac:
af:87:d5:75:15:55:da:18:9e:84:38:bc:14:41:e1:67:af:94:
e6:11:51:39:75:df:c9:eb:7a:d0:4c:6c:56:ec:82:e7:65:f9:
8c:63:79:3a:5c:09:24:f9:0f:f7:51:28:1b:f6:19:e7:30:11:
43:36:85:28:32:ea:59:9a:bb:3b:ec:36:55:b1:de:39:11:47:
2f:be:17:9e:8c:b7:ac:f8:12:17:2e:fc:fb:81:b1:d7:d5:cb:
8c:ed:fc:4d:9d:0b:8b:93:32:5c:a0:4a:ba:0a:62:ce:ea:a9:
ed:07:b8:a6:8e:6d:07:df:c2:6c:9d:d7:d8:3c:17:d4:e1:5a:
f3:f2:f9:59:df:38:d9:a8:5a:ed:e3:33:e7:f2:f2:f5:9a:cc:
d8:64:7b:6b:2e:eb:13:45:b0:d3:f0:33:66:7e:56:1d:fc:7f:
ef:2f:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:49:56 2025 by rpki-client