Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73a827d3-702c-3659-b4f7-c1d3ac48445e.roa
File: 73a827d3-702c-3659-b4f7-c1d3ac48445e.roa (raw, json)
Hash identifier: dfBou4qEl0iSidnVP9IFQ5l8+4afFmNj2tQ5wLxuNBM=
Subject key identifier: 7A:59:BF:3A:F8:6C:5C:39:03:2E:32:14:54:41:95:3D:07:CF:24:CB
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858488AE011536A45BD4E925D8B40
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73a827d3-702c-3659-b4f7-c1d3ac48445e.roa
Signing time: Tue 14 Jan 2025 13:59:54 +0000
ROA not before: Tue 14 Jan 2025 13:59:54 +0000
ROA not after: Mon 14 Apr 2025 12:59:54 +0000
asID: 21949
IP address blocks: 50.21.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:11:53:6a:45:bd:4e:92:5d:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Jan 14 13:59:54 2025 GMT
Not After : Apr 14 12:59:54 2025 GMT
Subject: CN=72604065-f2d3-49c8-8285-e713026e9a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:bf:fd:8f:0a:4a:1d:98:e8:7a:96:84:fa:
75:38:fb:bb:ec:4f:27:7c:84:9d:eb:20:23:3a:f2:
17:c1:e4:e9:e0:e7:1d:27:fe:db:d0:96:89:67:7e:
36:27:3c:51:58:ec:d8:df:1e:eb:7b:67:02:a1:dc:
ed:ac:d6:a3:5d:32:08:b1:93:09:cf:f7:6d:4b:79:
84:1e:f9:1c:f2:82:0b:14:28:bc:c5:c6:59:01:76:
f3:10:15:ac:63:dc:11:17:a7:5b:bb:09:70:66:5d:
75:3a:ba:28:fd:54:7d:9c:23:de:ad:2f:1d:3f:7f:
a4:f9:89:c5:55:2b:18:12:ad:05:9d:97:c4:ec:cc:
5a:c1:0e:94:d0:a1:57:79:18:36:bb:6d:2f:06:92:
6a:25:05:9c:0d:51:60:cd:0c:5c:00:de:50:31:5e:
a3:cb:d7:7d:28:26:cd:05:00:a9:c3:2b:4f:4c:24:
b1:6e:0a:d7:92:f5:fb:10:cb:00:eb:33:89:4e:b3:
43:04:da:93:0c:9b:64:1c:c7:2f:1e:7d:c4:6d:d3:
11:1e:50:52:b2:dd:c6:2b:e7:03:a7:34:4c:04:65:
8a:71:e0:ce:74:20:99:3e:bd:7d:e0:bd:0c:23:10:
4e:66:f5:1a:c7:ae:2f:66:65:e1:4d:07:e0:f0:a6:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:59:BF:3A:F8:6C:5C:39:03:2E:32:14:54:41:95:3D:07:CF:24:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73a827d3-702c-3659-b4f7-c1d3ac48445e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
50.21.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:8d:09:97:5d:3a:93:90:f2:0c:dc:e9:16:61:3d:48:3c:d4:
ed:5f:03:18:71:87:0e:91:08:82:98:39:09:97:66:bd:ee:c5:
45:5d:7f:c7:bd:29:88:97:12:11:f1:ea:6f:1c:2d:77:92:9f:
7f:79:df:d9:84:4d:54:e1:13:e6:b4:72:8f:c0:3d:ce:50:8c:
4e:a5:0f:96:a2:94:a5:74:a5:30:05:60:c8:af:5c:c5:a3:90:
fa:6e:1e:e2:fa:e2:7a:38:e2:f0:de:c9:cd:41:ec:32:d1:40:
5e:c3:a7:09:ec:d2:77:55:c2:39:26:b2:a8:78:59:b2:68:ab:
6d:2c:99:b9:ee:6a:af:89:11:dc:d5:c7:b4:02:94:65:0e:72:
ab:77:42:e2:7e:69:71:bb:ba:bc:b0:ee:ef:32:88:74:e6:b9:
05:04:06:15:60:9a:5f:11:1a:5f:fa:d6:21:5f:10:cc:b4:cf:
9d:94:15:ff:41:4e:f5:7a:13:c6:93:02:93:bc:2a:94:98:00:
61:58:39:5a:c7:8d:11:d2:b8:cd:ca:e6:34:58:85:1f:f2:e6:
a0:ca:bb:56:98:3e:89:32:29:3d:80:a8:ad:75:4a:33:a7:0c:
7b:db:9b:fb:ce:22:bd:32:a0:9c:64:73:d9:7d:89:a2:25:9c:
3c:7a:a2:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4BFTakW9TpJdi0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI1MDExNDEzNTk1NFoXDTI1MDQxNDEyNTk1NFowLzEtMCsGA1UEAxMk
NzI2MDQwNjUtZjJkMy00OWM4LTgyODUtZTcxMzAyNmU5YTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK2//Y8KSh2Y6HqWhPp1OPu77E8nfISd6yAj
OvIXweTp4OcdJ/7b0JaJZ342JzxRWOzY3x7re2cCodztrNajXTIIsZMJz/dtS3mE
Hvkc8oILFCi8xcZZAXbzEBWsY9wRF6dbuwlwZl11Oroo/VR9nCPerS8dP3+k+YnF
VSsYEq0FnZfE7MxawQ6U0KFXeRg2u20vBpJqJQWcDVFgzQxcAN5QMV6jy9d9KCbN
BQCpwytPTCSxbgrXkvX7EMsA6zOJTrNDBNqTDJtkHMcvHn3EbdMRHlBSst3GK+cD
pzRMBGWKceDOdCCZPr194L0MIxBOZvUax64vZmXhTQfg8Ka7swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpZvzr4bFw5Ay4yFFRBlT0HzyTLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNzNhODI3ZDMtNzAyYy0z
NjU5LWI0ZjctYzFkM2FjNDg0NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMhUQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACaNCZddOpOQ8gzc6RZhPUg81O1fAxhxhw6RCIKYOQmXZr3uxUVdf8e9
KYiXEhHx6m8cLXeSn39539mETVThE+a0co/APc5QjE6lD5ailKV0pTAFYMivXMWj
kPpuHuL64no44vDeyc1B7DLRQF7Dpwns0ndVwjkmsqh4WbJoq20smbnuaq+JEdzV
x7QClGUOcqt3QuJ+aXG7uryw7u8yiHTmuQUEBhVgml8RGl/61iFfEMy0z52UFf9B
TvV6E8aTApO8KpSYAGFYOVrHjRHSuM3K5jRYhR/y5qDKu1aYPokyKT2AqK11SjOn
DHvbm/vOIr0yoJxkc9l9iaIlnDx6ouY=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:54 2025 by rpki-client