Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd2a8200-18b0-325e-a6fb-136aff595d7c.roa
File: dd2a8200-18b0-325e-a6fb-136aff595d7c.roa (raw, json)
Hash identifier: /FKSc8YozekA55toF1JfSFFx+DTWd3cvwAjC6va06yg=
Subject key identifier: 8E:B5:95:39:53:4C:46:EE:3E:8C:EF:1A:4B:D5:79:35:FA:E9:B9:C8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66183335CB9CFAAD2B55EC78
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd2a8200-18b0-325e-a6fb-136aff595d7c.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.28.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:18:33:35:cb:9c:fa:ad:2b:55:ec:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=4c4a7942-c8dc-4d67-b368-d3d29d687142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:06:c2:b2:e9:e5:70:2b:b0:79:64:72:f8:
8a:46:07:8b:5c:a6:7a:56:e3:f9:96:57:e6:c9:48:
fc:cb:a5:15:1b:6c:43:db:2c:05:e9:af:eb:19:74:
2e:de:5f:dd:01:c2:12:20:61:30:7d:e8:88:73:83:
02:17:49:b3:20:69:fe:35:70:b5:0d:73:c5:9f:7d:
b5:95:81:6a:63:91:67:90:3c:de:a3:e6:69:0b:0e:
91:35:c1:0b:b2:2b:75:64:b5:fc:4d:de:8b:ff:5a:
d0:b1:6b:12:e3:98:39:23:05:e6:34:3c:12:10:f5:
30:3b:f5:de:c5:38:bd:27:2f:a9:44:5f:35:db:35:
ea:f2:d7:56:01:40:be:ab:bc:c7:dc:ac:e5:31:ac:
5b:27:df:e5:04:13:ca:50:c6:1d:24:fe:c7:02:3f:
93:b7:94:43:86:4d:86:d5:61:ff:60:96:66:de:41:
2d:98:09:b3:4c:6a:29:f4:22:47:1f:b0:26:01:2a:
67:81:21:eb:42:1f:4f:b1:b6:a7:5a:ab:63:68:9a:
33:dd:57:53:ab:87:1d:6d:2e:ea:42:5a:10:64:3e:
3e:9d:90:74:1b:33:16:c8:87:77:59:83:34:6e:87:
5b:53:fd:a0:9b:66:e3:fd:c1:11:9a:0b:0e:30:2e:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B5:95:39:53:4C:46:EE:3E:8C:EF:1A:4B:D5:79:35:FA:E9:B9:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd2a8200-18b0-325e-a6fb-136aff595d7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:d2:e9:fb:d2:7c:dc:6c:64:ee:38:c6:86:20:f7:d3:c2:a5:
e0:cb:96:85:a6:ac:fb:a6:52:7d:f1:79:2a:0b:7e:a0:6f:5f:
29:b6:2a:6e:0e:09:fb:34:9a:18:e1:45:a7:db:33:dc:b2:ff:
b9:04:60:bf:83:a9:7d:a5:68:4e:67:32:80:9b:e0:c3:ff:52:
de:e1:75:b0:82:83:32:8b:17:34:58:b1:45:2f:be:49:85:d3:
6b:ae:76:5a:dd:09:c7:0d:bc:c1:06:03:7f:a2:2f:50:30:c2:
38:90:3d:40:96:93:45:50:31:7e:74:42:68:41:16:cd:45:db:
13:ca:d0:e7:6e:d8:3c:44:ec:59:ff:c7:7d:15:c7:f0:01:41:
ee:57:b6:14:08:7f:5d:f8:d7:d7:da:3d:39:d8:9b:b5:fc:27:
85:85:7a:cf:bd:ab:c7:2a:47:72:b6:e9:0b:8d:f7:da:e8:25:
7b:5f:da:0b:da:4e:2b:2f:de:72:2f:6f:06:aa:37:bf:6d:07:
df:a3:9f:2f:45:c8:29:5b:bb:99:08:12:ad:55:68:0d:4c:c9:
96:72:f1:dd:b0:57:72:dd:bf:2e:3e:4b:c1:4c:8d:15:5d:12:
61:d5:92:57:5a:b7:eb:1e:eb:c0:8d:58:7c:ad:39:1d:41:38:
65:e9:d1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:47 2025 by rpki-client