Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa
File: 1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa (raw, json)
Hash identifier: ZGI+L6JuBOHa5b0HTtxD6MXcVuN/VbYtj6dhClCs9f4=
Subject key identifier: CE:30:72:6C:77:FB:45:70:72:78:BB:AE:77:FD:10:26:E5:98:9F:93
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847FB1A2CC454CC6DF5100A4B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 7029
IP address blocks: 75.91.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2c:c4:54:cc:6d:f5:10:0a:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=7549b5e9-dc6d-4667-bd5c-2139ab62cee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4f:5e:3a:b9:ce:f2:d4:30:44:24:d5:97:44:
0a:52:98:ee:55:0a:fc:e0:70:83:ca:a6:15:d9:44:
f3:6a:41:45:0e:6d:3c:a9:33:63:f6:4e:5a:81:41:
29:0c:6f:6f:6a:a7:84:c9:6a:a8:73:8e:d0:48:40:
2b:da:d1:ca:6a:a9:24:37:53:68:7f:ba:bf:f1:00:
65:10:2f:b5:6e:70:a9:05:ee:75:2f:e1:88:7d:19:
ea:2a:7c:11:b0:00:90:23:74:6b:58:cb:50:89:61:
c7:9b:e6:bc:f3:41:25:4e:f0:ed:8f:df:c7:8e:3d:
ec:2d:67:c0:7b:ba:77:2d:44:5d:a3:bb:4d:df:de:
f9:da:c6:00:fb:67:de:49:98:b6:ee:84:c7:af:b6:
06:3c:83:24:64:91:ce:c7:1b:a0:71:4d:c1:9f:0a:
55:32:92:92:1d:1e:46:c3:f3:21:f6:c4:96:8a:b0:
74:14:6e:82:6e:67:70:85:10:c2:d7:62:01:02:34:
71:6f:ed:ba:f7:96:04:bb:93:db:e3:a4:1d:89:d6:
22:87:36:4d:97:99:eb:4b:1b:41:17:b0:35:94:5d:
c1:15:f5:7a:0d:de:f5:df:99:0b:c0:54:83:4e:8a:
dc:2e:9f:ee:66:07:42:7f:4a:a6:d4:97:bf:e6:4f:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:30:72:6C:77:FB:45:70:72:78:BB:AE:77:FD:10:26:E5:98:9F:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.91.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:01:d5:38:e7:f5:da:a8:cb:66:3d:d8:86:56:af:28:bf:d6:
60:bb:1e:82:bf:6c:31:8f:2e:97:aa:23:c6:8c:f5:78:20:7c:
d6:a8:7f:00:5a:ef:9f:04:d1:43:87:9c:5d:c8:da:45:70:ab:
b3:26:26:43:84:c6:08:94:40:2e:0f:69:2c:ef:52:b8:cb:87:
3b:61:e5:84:84:59:60:a4:5c:e3:5b:c2:79:9e:fd:d0:85:a1:
25:f9:ee:f8:ff:7f:7c:5c:fd:08:34:e1:15:58:03:74:56:6e:
0d:63:57:7b:3e:98:ba:4b:a1:5c:84:ec:31:ba:23:94:a7:fa:
5f:6f:b6:3a:7b:9e:fe:b5:09:a8:9c:eb:2e:8d:23:c3:5d:b6:
32:9e:29:14:58:22:0e:85:5c:37:49:85:d6:fa:b9:74:45:09:
30:9a:c7:76:2b:b7:2f:9e:ef:a4:01:89:60:fc:40:c6:cb:59:
4f:27:d5:85:b6:ca:e5:fe:37:24:c8:d7:13:19:55:ba:f2:ed:
79:20:7f:2c:19:4e:c1:19:f7:fc:f6:a5:63:4c:46:c4:7b:e0:
ce:f5:1e:80:13:9f:1c:fa:2f:14:39:23:cc:81:a4:69:9b:ad:
8c:c2:49:53:cb:22:17:d5:48:71:b8:c1:e3:e7:b0:46:29:45:
53:d4:c6:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7GizEVMxt9RAKSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
NzU0OWI1ZTktZGM2ZC00NjY3LWJkNWMtMjEzOWFiNjJjZWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU9eOrnO8tQwRCTVl0QKUpjuVQr84HCDyqYV
2UTzakFFDm08qTNj9k5agUEpDG9vaqeEyWqoc47QSEAr2tHKaqkkN1Nof7q/8QBl
EC+1bnCpBe51L+GIfRnqKnwRsACQI3RrWMtQiWHHm+a880ElTvDtj9/Hjj3sLWfA
e7p3LURdo7tN39752sYA+2feSZi27oTHr7YGPIMkZJHOxxugcU3BnwpVMpKSHR5G
w/Mh9sSWirB0FG6CbmdwhRDC12IBAjRxb+2695YEu5Pb46QdidYihzZNl5nrSxtB
F7A1lF3BFfV6Dd7135kLwFSDTorcLp/uZgdCf0qm1Je/5k8NwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4wcmx3+0Vwcni7rnf9ECblmJ+TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA4OGY5MzUtZTVlYy0z
YzBmLWFjMmEtNWYxNmJjZmNiMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1vwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgB1Tjn9dqoy2Y92IZWryi/1mC7HoK/bDGPLpeqI8aM9XggfNaofwBa
758E0UOHnF3I2kVwq7MmJkOExgiUQC4PaSzvUrjLhzth5YSEWWCkXONbwnme/dCF
oSX57vj/f3xc/Qg04RVYA3RWbg1jV3s+mLpLoVyE7DG6I5Sn+l9vtjp7nv61Caic
6y6NI8NdtjKeKRRYIg6FXDdJhdb6uXRFCTCax3Yrty+e76QBiWD8QMbLWU8n1YW2
yuX+NyTI1xMZVbry7XkgfywZTsEZ9/z2pWNMRsR74M71HoATnxz6LxQ5I8yBpGmb
rYzCSVPLIhfVSHG4wePnsEYpRVPUxrk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:00 2025 by rpki-client