Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03553546-6243-34d9-8a02-d58e1b7c7b0e.roa
File: 03553546-6243-34d9-8a02-d58e1b7c7b0e.roa (raw, json)
Hash identifier: Dxv+El7IXTwF0A3dXPxXuyonj58QqWGMLcjy1qZDOac=
Subject key identifier: 11:D6:04:19:61:AB:96:60:CC:A4:BD:47:CD:76:0F:D5:A8:9A:87:D0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154FB74B15D73F966B51040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03553546-6243-34d9-8a02-d58e1b7c7b0e.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 71.28.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:fb:74:b1:5d:73:f9:66:b5:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=bc97fd91-ed1b-42ad-9683-36980fcce133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:4d:a0:3c:91:1c:09:0c:77:a6:09:dc:17:
f0:9a:93:f6:ca:ad:3a:ae:dc:83:14:b1:c4:ce:c9:
8e:2e:7d:4a:24:da:2c:92:78:f3:09:9d:2d:74:c7:
d5:a3:a4:d6:a3:3b:25:a7:11:07:53:b7:9b:d4:6a:
60:06:86:3e:92:83:ab:36:31:d4:23:cc:13:cc:23:
c0:f5:b9:b0:a8:89:c2:ef:5f:f0:a5:bc:67:3a:46:
e0:3c:ae:07:e7:16:ac:a2:4b:d3:cd:e5:e5:1f:34:
45:8f:e7:b3:fa:4d:f8:65:8b:70:cb:32:76:ab:ec:
57:ed:f7:ec:70:3b:37:0a:62:c0:de:8d:26:d5:1f:
ec:e6:80:e7:b8:9a:e6:3d:4f:52:77:24:ea:b1:65:
36:94:df:18:8d:be:dc:92:65:7e:83:68:3a:57:85:
38:8e:2f:ff:17:a8:4c:61:94:0a:02:5c:11:10:0f:
65:79:7e:c6:c8:53:b3:b2:f0:92:ed:89:86:8b:95:
c0:22:27:1b:64:1b:27:ba:31:e8:1c:1f:d3:03:fd:
6a:56:08:99:a5:08:5e:38:f8:5e:ee:88:dd:ee:c6:
82:8a:5f:df:77:3b:64:23:90:3d:4a:77:d9:0d:cd:
cf:38:df:2a:1e:d3:ee:f7:b7:2c:e8:76:40:1a:b0:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:04:19:61:AB:96:60:CC:A4:BD:47:CD:76:0F:D5:A8:9A:87:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03553546-6243-34d9-8a02-d58e1b7c7b0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:00:df:a9:cb:1e:6d:43:6a:eb:b3:b4:c1:1b:83:e7:da:c0:
80:5c:13:6b:59:99:8b:9a:83:14:a9:6a:47:6d:b5:ef:71:69:
6d:48:66:87:13:34:75:54:fc:59:4a:dd:ce:44:0a:4d:b1:5f:
d3:c3:0f:bf:c5:75:22:18:05:14:53:71:de:08:85:7c:8b:51:
7d:07:95:68:cd:80:4b:50:d5:a5:a4:7e:15:dd:c5:77:33:44:
f8:6b:3f:84:60:00:7e:6e:5b:22:7e:87:84:63:a2:ad:ea:8e:
c3:e4:77:17:d5:a0:9e:ff:53:5f:aa:c7:e8:c1:2d:e9:ef:4d:
31:8c:a8:34:7a:a0:9f:67:be:97:61:46:70:58:0e:a1:6c:ee:
1a:df:36:47:bf:68:b9:a6:cb:8e:be:d5:fa:80:19:5b:64:26:
f8:07:fe:bc:d3:9b:24:f4:56:44:07:a9:04:c6:5e:34:b6:c1:
51:b6:3c:6f:00:29:ac:fb:1e:e7:73:6d:05:b0:40:8c:28:48:
98:4c:dd:83:ae:e5:10:60:a7:d8:1a:ac:ba:5c:ee:0a:0b:85:
e5:1a:ee:67:fd:d9:d1:58:43:e4:b9:aa:91:33:f4:b5:bb:ad:
bd:e0:96:32:53:2c:e2:a7:79:4f:ba:7d:a4:3e:f7:f0:51:c3:
5c:6f:18:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPt0sV1z+Wa1EEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
YmM5N2ZkOTEtZWQxYi00MmFkLTk2ODMtMzY5ODBmY2NlMTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirVNoDyRHAkMd6YJ3BfwmpP2yq06rtyDFLHE
zsmOLn1KJNosknjzCZ0tdMfVo6TWozslpxEHU7eb1GpgBoY+koOrNjHUI8wTzCPA
9bmwqInC71/wpbxnOkbgPK4H5xasokvTzeXlHzRFj+ez+k34ZYtwyzJ2q+xX7ffs
cDs3CmLA3o0m1R/s5oDnuJrmPU9SdyTqsWU2lN8Yjb7ckmV+g2g6V4U4ji//F6hM
YZQKAlwREA9leX7GyFOzsvCS7YmGi5XAIicbZBsnujHoHB/TA/1qVgiZpQheOPhe
7ojd7saCil/fdztkI5A9SnfZDc3PON8qHtPu97cs6HZAGrC6jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHWBBlhq5ZgzKS9R812D9WomofQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDM1NTM1NDYtNjI0My0z
NGQ5LThhMDItZDU4ZTFiN2M3YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxwgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUA36nLHm1DauuztMEbg+fawIBcE2tZmYuagxSpakdtte9xaW1IZocT
NHVU/FlK3c5ECk2xX9PDD7/FdSIYBRRTcd4IhXyLUX0HlWjNgEtQ1aWkfhXdxXcz
RPhrP4RgAH5uWyJ+h4Rjoq3qjsPkdxfVoJ7/U1+qx+jBLenvTTGMqDR6oJ9nvpdh
RnBYDqFs7hrfNke/aLmmy46+1fqAGVtkJvgH/rzTmyT0VkQHqQTGXjS2wVG2PG8A
Kaz7HudzbQWwQIwoSJhM3YOu5RBgp9garLpc7goLheUa7mf92dFYQ+S5qpEz9LW7
rb3gljJTLOKneU+6faQ+9/BRw1xvGOY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:22 2025 by rpki-client