Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17cce6f7-9337-3edc-a1b4-9c3479a36078.roa
File: 17cce6f7-9337-3edc-a1b4-9c3479a36078.roa (raw, json)
Hash identifier: 92mTPdkxJmqPHEoht+jRy2pU2XIN1702knRTG+7vlIo=
Subject key identifier: DA:0F:CE:DA:56:AF:E6:19:8E:DC:1B:8B:8E:03:63:01:44:16:C2:C5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848116FB733149CB3DEBCF9DD00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17cce6f7-9337-3edc-a1b4-9c3479a36078.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 67.141.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:b7:33:14:9c:b3:de:bc:f9:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=873391ef-a556-4c22-9c6f-2bf8a32d54bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:d1:ca:f1:4b:a0:2e:9b:c7:ff:25:bf:c5:
55:dd:9c:a8:41:b4:b0:fc:b3:46:9e:a2:ef:8d:ff:
41:9b:a2:ae:11:af:08:c8:c6:d1:c4:67:bb:d2:15:
64:66:c6:a5:21:83:f1:31:14:7e:30:e6:a5:83:ee:
28:95:d2:dd:d1:f6:fc:e2:89:82:fc:9c:3d:f1:b6:
36:fb:ca:3f:b9:e0:fb:1c:ed:c6:ae:64:61:7b:a4:
10:00:ad:ac:68:d2:69:7f:09:a0:b4:aa:be:c8:44:
18:88:fb:b4:79:13:7b:7a:54:bd:78:5a:be:d9:26:
93:9a:9d:4e:ae:9b:9d:c4:b4:e7:00:c0:ff:68:5b:
39:13:33:ec:d7:d8:36:68:9a:08:7c:eb:fa:bb:f0:
ef:00:1d:3f:40:e0:32:64:4e:18:26:8d:0b:f7:24:
93:f9:61:72:48:64:ff:c0:ba:dd:2a:52:c7:e4:39:
2d:0b:18:7b:78:e4:93:fb:c7:59:18:86:11:51:d8:
7c:1b:c9:ef:4b:56:6a:a0:a8:10:a7:20:bc:b4:a2:
10:58:39:8b:82:91:d2:94:d0:8e:cc:d0:b2:5f:c7:
5b:8f:1c:28:19:10:71:7d:f5:c2:2d:8f:79:6b:e0:
64:3f:46:3a:f3:25:18:bd:47:f7:0c:fa:68:0b:38:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0F:CE:DA:56:AF:E6:19:8E:DC:1B:8B:8E:03:63:01:44:16:C2:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17cce6f7-9337-3edc-a1b4-9c3479a36078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.141.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:e4:c9:9b:07:88:50:5a:07:d8:d8:c3:87:ad:97:91:2d:69:
17:12:54:4a:c3:14:2a:8b:4d:ac:5a:43:93:f0:c6:5f:30:d0:
18:88:63:53:d9:03:22:55:a9:78:5f:5b:73:d8:96:06:12:06:
02:06:d7:4c:3a:40:69:5b:08:d5:79:5a:0a:97:39:ac:99:98:
04:3a:25:0d:bc:de:5b:e0:1e:76:fe:bd:4f:ff:35:78:fe:b0:
30:4a:ed:fe:cf:2b:4a:40:ff:75:5d:13:84:cf:8f:cd:61:f6:
5d:40:3f:cc:96:ba:4b:f7:53:e6:1c:22:e1:ac:31:2a:19:14:
ef:f1:00:04:77:df:bb:5e:ab:b0:f9:9f:ee:d3:13:c2:c6:a7:
a6:57:23:51:6c:a6:2e:3d:5e:15:31:97:a5:87:29:47:13:a1:
01:89:bd:32:88:cd:79:e5:0c:4e:c7:22:c8:24:99:6f:16:c5:
f4:2c:4d:da:4a:b7:4f:32:5b:c4:ae:7d:e9:43:67:c7:1f:31:
0e:ad:2f:37:be:7d:92:48:92:26:e4:7d:9a:58:aa:ff:d4:79:
fe:5e:79:96:07:ec:5b:77:91:42:a4:91:dc:f0:a8:4b:66:b5:
1b:01:9b:5b:1f:f6:a6:b0:ac:db:ee:39:f9:ba:e5:d5:f6:d1:
51:f0:eb:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7czFJyz3rz53QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
ODczMzkxZWYtYTU1Ni00YzIyLTljNmYtMmJmOGEzMmQ1NGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaHRyvFLoC6bx/8lv8VV3ZyoQbSw/LNGnqLv
jf9Bm6KuEa8IyMbRxGe70hVkZsalIYPxMRR+MOalg+4oldLd0fb84omC/Jw98bY2
+8o/ueD7HO3GrmRhe6QQAK2saNJpfwmgtKq+yEQYiPu0eRN7elS9eFq+2SaTmp1O
rpudxLTnAMD/aFs5EzPs19g2aJoIfOv6u/DvAB0/QOAyZE4YJo0L9yST+WFySGT/
wLrdKlLH5DktCxh7eOST+8dZGIYRUdh8G8nvS1ZqoKgQpyC8tKIQWDmLgpHSlNCO
zNCyX8dbjxwoGRBxffXCLY95a+BkP0Y68yUYvUf3DPpoCzhjyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNoPztpWr+YZjtwbi44DYwFEFsLFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTdjY2U2ZjctOTMzNy0z
ZWRjLWExYjQtOWMzNDc5YTM2MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ41mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHkyZsHiFBaB9jYw4etl5EtaRcSVErDFCqLTaxaQ5Pwxl8w0BiIY1PZ
AyJVqXhfW3PYlgYSBgIG10w6QGlbCNV5WgqXOayZmAQ6JQ283lvgHnb+vU//NXj+
sDBK7f7PK0pA/3VdE4TPj81h9l1AP8yWukv3U+YcIuGsMSoZFO/xAAR337teq7D5
n+7TE8LGp6ZXI1Fspi49XhUxl6WHKUcToQGJvTKIzXnlDE7HIsgkmW8WxfQsTdpK
t08yW8SufelDZ8cfMQ6tLze+fZJIkibkfZpYqv/Uef5eeZYH7Ft3kUKkkdzwqEtm
tRsBm1sf9qawrNvuOfm65dX20VHw698=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:57:20 2025 by rpki-client