Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e675c4ca-8211-3121-aaa0-804928dcb562.roa
File: e675c4ca-8211-3121-aaa0-804928dcb562.roa (raw, json)
Hash identifier: 4s6Xb9VqTz6qqPPQ8WwT4b65XJ0iHPZLYWt0nLireQE=
Subject key identifier: F2:85:A3:17:62:5B:20:C6:0A:DF:AB:84:B1:57:AF:F2:24:42:BE:D1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB44101335309DF8CA4E18400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e675c4ca-8211-3121-aaa0-804928dcb562.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 40.134.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:41:01:33:53:09:df:8c:a4:e1:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=ca9336e0-2d1f-4de0-b2ff-2090e4f166a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:7b:c5:1e:74:e0:2f:9e:26:ce:f7:70:b3:
fb:1c:4d:b1:99:d8:f8:a9:e6:d2:60:40:0f:f6:cf:
86:50:75:ad:d3:14:4e:59:a1:a0:ee:8b:60:3d:bb:
e9:32:49:bb:a0:59:34:6f:46:dc:d8:4b:ba:42:2b:
32:06:14:05:54:be:d8:a0:88:d0:e8:c0:d9:37:79:
ab:2d:c6:cb:07:ac:ea:2b:21:19:50:c2:33:fc:93:
00:ac:4f:32:f3:4a:b0:b9:fc:ba:1c:fe:2e:08:88:
a2:4a:30:e1:13:d2:08:2d:85:9c:c7:b4:7e:da:5a:
e2:d8:64:55:4a:38:db:81:c0:b3:e2:ee:01:dd:3c:
dd:02:7d:09:58:a1:17:39:d3:1d:e5:7c:fc:58:44:
e9:7a:b8:56:5b:52:6d:36:fe:77:ef:3e:53:e2:a5:
15:3c:82:17:16:14:57:dd:a9:c0:0a:1f:b9:ac:7f:
56:00:f7:d0:a7:c6:14:17:f7:ce:7b:f3:73:fa:8a:
11:e6:a8:84:5e:b9:4f:31:13:d2:be:83:3f:b1:d7:
1b:9e:5b:54:7d:e7:e5:99:c4:b2:43:49:5e:96:ea:
4c:b2:d7:1a:db:80:99:72:d0:ec:38:d9:e2:d8:65:
60:60:99:5e:31:96:42:fd:48:96:77:ea:fc:77:b7:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:85:A3:17:62:5B:20:C6:0A:DF:AB:84:B1:57:AF:F2:24:42:BE:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e675c4ca-8211-3121-aaa0-804928dcb562.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.134.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:6b:d7:6c:a1:53:62:c6:7f:8e:07:bf:eb:8b:48:c1:92:92:
14:98:e9:b7:3f:ab:11:35:f4:3d:76:de:2d:7a:d9:88:44:43:
33:22:7e:9a:7e:32:02:53:cf:14:33:16:bb:0b:78:2d:5e:85:
94:15:c0:13:8b:9d:5b:29:70:11:d9:10:1e:cf:c2:36:d2:06:
32:68:d3:b9:07:65:25:1c:59:d3:26:8d:fe:23:11:46:67:6d:
6c:fa:a7:67:24:98:cd:34:f0:11:ca:d1:3c:41:77:9e:07:36:
cd:cf:c2:84:57:6a:ac:91:8f:04:26:bb:01:4d:63:14:9e:61:
6d:a9:78:c1:97:cc:4d:15:77:ca:11:26:6b:98:55:2f:43:55:
60:1e:31:20:9c:fd:e3:01:55:fb:14:98:63:77:64:60:88:28:
bb:35:28:88:cb:0e:58:c5:7d:c9:54:74:fb:11:fd:af:c5:7c:
84:04:96:f2:33:77:f5:44:84:e1:0f:d4:8d:34:af:4b:aa:66:
bd:7f:63:1d:ad:0f:29:d4:96:97:88:cb:61:81:da:1b:c6:11:
a8:2c:7b:ce:56:48:67:0a:d6:25:cb:60:6e:bf:82:d8:a1:68:
75:95:9f:88:d2:a7:81:cb:79:0b:d7:15:3e:fc:8f:c8:58:a4:
df:0e:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:41 2025 by rpki-client