Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5758f88-77a9-31d4-b26d-3eda90755f66.roa
File: f5758f88-77a9-31d4-b26d-3eda90755f66.roa (raw, json)
Hash identifier: vF67nTvupSTgk83+BloXk1knscZymu86g0GzLcF+SQ8=
Subject key identifier: D2:8E:3F:6E:C7:AF:75:A7:1D:74:94:E6:7A:9F:F6:D7:14:D6:12:06
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA14A34C3B60268F43132AB00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5758f88-77a9-31d4-b26d-3eda90755f66.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:4a:34:c3:b6:02:68:f4:31:32:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=bc373cad-794e-484b-aacf-a91523c8f9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:75:b3:61:9d:df:ea:15:ba:ad:ed:9e:5e:
c3:2a:12:04:44:79:dd:5d:d5:e6:34:98:04:49:aa:
c4:9c:b0:81:e6:76:c0:c3:f9:ef:85:75:a3:7b:56:
90:22:8a:c6:22:8f:d5:6b:c5:de:c8:b7:24:59:11:
8b:e2:ff:77:cd:41:c6:22:c5:59:e4:f0:73:4b:d4:
d4:25:3c:6b:41:85:db:7a:d5:13:bb:d6:47:de:ca:
e2:2e:72:b3:4f:46:72:9f:b8:d4:39:45:37:ff:00:
76:45:64:57:ad:35:45:e3:06:1a:d4:98:0a:8c:6e:
0b:39:1c:ce:da:24:0a:f6:38:35:05:15:96:59:7e:
94:f9:54:c3:ec:49:ae:c2:86:bc:f2:9f:89:77:39:
3a:76:78:a4:e4:9a:16:d2:70:c4:9f:22:b2:41:4e:
aa:bd:c8:78:48:1e:30:17:30:80:b1:af:93:e8:98:
be:99:25:46:27:c4:d9:97:d5:aa:fd:cc:06:28:e6:
0c:41:52:a2:6e:aa:5a:c5:95:b4:1f:38:f1:15:93:
2b:6a:bd:ac:83:b3:7d:b0:fd:ca:49:85:6a:79:17:
ec:91:a0:1c:6a:51:37:8d:27:f2:be:15:2b:3d:7e:
17:ab:54:53:19:50:1e:fd:b7:cf:8a:57:91:a2:0e:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:3F:6E:C7:AF:75:A7:1D:74:94:E6:7A:9F:F6:D7:14:D6:12:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5758f88-77a9-31d4-b26d-3eda90755f66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:cc:7a:31:40:fd:cb:61:48:c6:88:e3:38:98:99:51:33:25:
b0:a2:83:0b:80:8b:9a:03:01:a2:04:d9:a3:a0:33:f0:7d:40:
bb:1d:67:7c:9d:e2:f4:62:aa:40:b7:70:b8:25:6c:e0:4a:e5:
51:88:93:28:53:2a:d1:25:cc:1f:5c:84:47:c1:ba:76:00:b7:
f1:d3:4f:57:f8:7d:2b:b4:13:4a:48:20:12:f9:36:60:50:76:
c2:80:7e:d8:dd:89:cf:f8:97:3a:3c:92:ac:28:f1:4f:c6:be:
99:a6:bf:3b:bf:8b:b9:b4:07:7c:8d:38:9b:a1:bc:8d:1a:c0:
d5:56:ba:52:f4:04:5f:b4:9e:04:db:a0:76:43:0c:88:74:93:
69:13:e3:e6:f8:ba:27:c6:25:6e:d0:5d:d7:41:a3:63:bc:ba:
69:bf:8c:2d:de:c5:27:cd:c2:36:b2:02:dd:f7:3c:1d:61:98:
4b:54:e9:b9:3f:54:4b:59:fa:66:b6:f2:6f:41:1e:b9:7a:d2:
66:0b:27:80:5b:7e:3b:e8:ca:3c:f1:3c:23:73:9c:13:0c:24:
9b:4e:8b:49:42:25:47:11:f9:99:57:9c:3a:e2:ab:14:b3:d9:
c7:b4:62:7b:a2:35:d2:02:bc:b5:68:b0:3b:42:e1:fc:03:19:
34:d4:f3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:05 2025 by rpki-client