Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10bb1b01-e6bc-363d-8fa7-8f6d009e5aeb.roa
File: 10bb1b01-e6bc-363d-8fa7-8f6d009e5aeb.roa (raw, json)
Hash identifier: VWxQeymH60+pRGv3MY9An1Q6Bmn6Vwg8sGloPqP/dvw=
Subject key identifier: EE:F2:1C:5D:A2:A5:37:7B:6A:BB:45:04:A8:96:D2:83:FE:0A:F3:91
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847FB1A2B0A0031F85866CACC00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10bb1b01-e6bc-363d-8fa7-8f6d009e5aeb.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 7029
IP address blocks: 173.188.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2b:0a:00:31:f8:58:66:ca:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=cbd37d10-63ba-42c1-9b63-4fcf220bdddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:c3:88:f9:9c:13:49:5b:5c:a3:7f:9b:e2:
52:cc:12:c6:14:de:6d:ad:94:32:57:f1:18:c6:88:
42:4c:de:bf:25:f4:e4:94:f7:82:21:c4:e6:e3:23:
eb:b0:a7:12:6e:a9:87:8c:3f:88:46:b6:4e:ef:f5:
67:89:95:89:d2:89:69:45:38:ab:cb:fa:fa:a0:f2:
97:cd:bf:fa:49:13:cb:9d:2d:79:84:52:29:ee:43:
f6:a7:17:6a:72:1c:1e:2b:73:32:94:46:45:ff:fa:
29:e6:f2:b2:76:25:21:21:21:27:54:08:f4:7a:be:
c6:4d:a8:b3:c8:be:18:d0:1d:5a:60:f6:7b:ec:0c:
e4:6f:98:e2:cf:57:f2:2f:67:e3:98:3f:cc:6f:3a:
5a:ad:ca:47:80:77:68:dc:ad:d4:32:e8:88:f8:a7:
ba:94:93:55:a3:90:c4:53:cc:51:61:7d:86:f9:97:
d3:8d:15:76:d6:ba:56:d3:ad:c7:d3:8d:fb:d7:a8:
ba:bb:60:bb:b3:b7:05:91:e5:bb:ee:67:a9:9c:97:
c7:82:18:f9:f1:91:c2:eb:9e:95:81:19:94:98:8b:
8c:04:e8:0d:3c:d4:74:2f:11:bd:6f:ee:7f:df:56:
67:10:83:93:d6:f7:36:a9:e8:3b:59:88:11:8c:da:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F2:1C:5D:A2:A5:37:7B:6A:BB:45:04:A8:96:D2:83:FE:0A:F3:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10bb1b01-e6bc-363d-8fa7-8f6d009e5aeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.188.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:6e:52:5d:d4:08:ff:77:12:0e:f1:9a:61:4f:8a:a1:b8:95:
38:48:15:ca:78:81:3e:85:68:cf:08:e3:fd:d7:6f:78:69:b0:
0d:99:e7:01:bc:a8:c8:b9:48:fd:d3:31:f1:10:ab:ce:01:07:
6a:4b:a2:62:29:5e:18:20:a6:08:8d:9d:81:e0:3e:39:9d:9b:
a3:28:12:94:cf:b3:a0:08:43:94:0b:97:8a:c6:c8:91:51:3b:
2e:6f:e4:80:e2:63:15:44:18:5c:10:9c:88:7e:97:b9:36:5e:
5f:06:83:27:46:d4:23:8d:38:88:eb:7c:e8:e3:f4:a0:bc:f0:
be:d7:e6:72:64:a9:a4:50:f8:e0:93:ae:c4:a6:30:35:07:d2:
0c:a5:c0:f2:c3:71:30:15:cc:ab:09:3b:61:bf:e3:a3:5c:b3:
ec:58:16:de:09:9e:d2:f5:b9:c5:13:1f:57:fb:c4:a3:77:7d:
7a:a6:0d:4c:ca:93:a8:c9:63:e2:95:c7:d7:c9:d1:8b:6b:fe:
f4:f7:0b:67:29:af:ca:68:8c:dd:85:f0:50:43:23:5f:8b:89:
83:f6:9a:d2:52:11:bd:dc:25:61:56:ce:5e:c7:ab:51:b2:42:
3e:09:a6:9b:f9:05:24:09:ae:62:c9:cc:34:a9:3b:66:c1:15:
1f:d8:43:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7GisKADH4WGbKzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
Y2JkMzdkMTAtNjNiYS00MmMxLTliNjMtNGZjZjIyMGJkZGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod7DiPmcE0lbXKN/m+JSzBLGFN5trZQyV/EY
xohCTN6/JfTklPeCIcTm4yPrsKcSbqmHjD+IRrZO7/VniZWJ0olpRTiry/r6oPKX
zb/6SRPLnS15hFIp7kP2pxdqchweK3MylEZF//op5vKydiUhISEnVAj0er7GTaiz
yL4Y0B1aYPZ77Azkb5jiz1fyL2fjmD/MbzparcpHgHdo3K3UMuiI+Ke6lJNVo5DE
U8xRYX2G+ZfTjRV21rpW063H043716i6u2C7s7cFkeW77mepnJfHghj58ZHC656V
gRmUmIuMBOgNPNR0LxG9b+5/31ZnEIOT1vc2qeg7WYgRjNrFUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7yHF2ipTd7artFBKiW0oP+CvORMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTBiYjFiMDEtZTZiYy0z
NjNkLThmYTctOGY2ZDAwOWU1YWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArby1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZuUl3UCP93Eg7xmmFPiqG4lThIFcp4gT6FaM8I4/3Xb3hpsA2Z5wG8
qMi5SP3TMfEQq84BB2pLomIpXhggpgiNnYHgPjmdm6MoEpTPs6AIQ5QLl4rGyJFR
Oy5v5IDiYxVEGFwQnIh+l7k2Xl8GgydG1CONOIjrfOjj9KC88L7X5nJkqaRQ+OCT
rsSmMDUH0gylwPLDcTAVzKsJO2G/46Ncs+xYFt4JntL1ucUTH1f7xKN3fXqmDUzK
k6jJY+KVx9fJ0Ytr/vT3C2cpr8pojN2F8FBDI1+LiYP2mtJSEb3cJWFWzl7Hq1Gy
Qj4Jppv5BSQJrmLJzDSpO2bBFR/YQ5Q=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:04:24 2025 by rpki-client