Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e8bdcec-d49d-397b-928b-20981b82dcd1.roa
File: 1e8bdcec-d49d-397b-928b-20981b82dcd1.roa (raw, json)
Hash identifier: Q6VYxZQ8r7cAI+0rf+2IO2PD103DO4fP7WLAf0Qi8sE=
Subject key identifier: 76:CE:8D:AB:5C:44:97:B4:B4:E8:18:86:39:02:6E:35:49:22:41:DE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A390CD98219F7B7551300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e8bdcec-d49d-397b-928b-20981b82dcd1.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 75.89.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:39:0c:d9:82:19:f7:b7:55:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=33059a98-eb53-4d5b-92b7-cd3f529db3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:89:cc:db:57:a6:93:a9:c7:78:b2:36:8d:0e:
cc:08:3e:d5:37:74:59:3b:ed:67:99:5e:11:f0:a9:
8a:60:be:30:2d:2d:ac:8b:13:47:04:a7:25:f5:1e:
8e:d5:eb:f6:2f:a0:7b:17:27:2e:27:af:aa:a5:60:
c3:c8:bf:fd:ec:39:56:88:b6:8c:e8:37:24:51:30:
72:ad:da:6f:98:23:00:45:6b:d1:97:12:94:e0:46:
52:53:2f:1a:87:01:4d:9e:b0:f6:38:71:08:37:3b:
b7:2b:c9:63:b1:bd:fd:3e:f7:79:bf:91:c3:21:df:
74:84:0d:93:c8:78:4e:34:1a:81:53:36:1d:c0:5b:
90:b7:32:9c:e3:4c:29:42:8d:68:13:ce:7f:e3:63:
8b:72:8e:b2:c4:8d:5e:f9:fb:85:45:38:dc:0e:6b:
b7:72:89:da:9e:dd:70:e0:3b:f4:8e:88:46:a0:ac:
33:ac:a0:36:8f:71:66:f8:d8:cb:5d:dc:dc:ad:fa:
9a:50:f0:69:74:b1:73:b8:88:13:71:87:c0:06:6d:
91:87:be:8d:d8:c0:b2:d7:4a:7d:d8:61:09:05:8f:
b0:ac:ee:7d:8a:d4:db:2b:89:36:20:6e:44:ed:40:
ec:e5:a8:00:e0:91:d9:f7:c3:2e:07:f1:ec:ca:93:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CE:8D:AB:5C:44:97:B4:B4:E8:18:86:39:02:6E:35:49:22:41:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e8bdcec-d49d-397b-928b-20981b82dcd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:12:a7:db:f6:61:68:a0:af:ac:2f:4d:38:e9:0d:c4:73:bc:
f7:e6:d6:d0:b5:90:32:48:7e:f5:6e:ed:54:90:29:28:db:e2:
21:d6:8d:60:62:66:fd:3a:94:db:c5:d7:a2:ad:60:14:5b:ce:
bc:42:30:ba:40:90:2c:7e:a1:20:46:9f:36:2c:49:7b:c1:97:
e4:88:ff:cc:bb:53:93:75:f8:fb:20:88:24:e0:89:3c:32:83:
78:c1:94:d3:29:5a:fd:e0:01:69:fa:e2:ab:28:4e:ca:f6:1f:
f7:56:fd:55:5c:be:f4:4a:e5:19:76:c9:0a:94:f1:11:d2:99:
e1:61:06:10:23:8e:14:97:bd:2f:0e:c1:69:c0:d3:02:5b:63:
3b:aa:e0:ab:4a:90:a3:ae:63:56:34:85:08:6d:1e:d3:97:d9:
82:56:10:97:db:8d:a9:8f:b8:9d:3e:e7:3b:12:0a:f8:d5:40:
b5:57:49:65:86:54:36:c6:0c:ef:3a:d3:e4:b3:50:22:6e:5e:
62:90:70:54:4d:a3:f2:da:72:ae:e2:cc:f5:4d:d4:f1:a2:88:
5a:36:08:54:7d:16:a4:90:9c:ea:bd:bf:13:6a:0b:34:0a:2e:
22:ca:36:ac:09:96:1c:89:98:6d:ee:68:db:61:32:02:f6:06:
d7:72:3d:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijkM2YIZ97dVEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk
MzMwNTlhOTgtZWI1My00ZDViLTkyYjctY2QzZjUyOWRiM2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiInM21emk6nHeLI2jQ7MCD7VN3RZO+1nmV4R
8KmKYL4wLS2sixNHBKcl9R6O1ev2L6B7FycuJ6+qpWDDyL/97DlWiLaM6DckUTBy
rdpvmCMARWvRlxKU4EZSUy8ahwFNnrD2OHEINzu3K8ljsb39Pvd5v5HDId90hA2T
yHhONBqBUzYdwFuQtzKc40wpQo1oE85/42OLco6yxI1e+fuFRTjcDmu3conant1w
4Dv0johGoKwzrKA2j3Fm+NjLXdzcrfqaUPBpdLFzuIgTcYfABm2Rh76N2MCy10p9
2GEJBY+wrO59itTbK4k2IG5E7UDs5agA4JHZ98MuB/HsypORVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbOjatcRJe0tOgYhjkCbjVJIkHeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWU4YmRjZWMtZDQ5ZC0z
OTdiLTkyOGItMjA5ODFiODJkY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1mcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8Sp9v2YWigr6wvTTjpDcRzvPfm1tC1kDJIfvVu7VSQKSjb4iHWjWBi
Zv06lNvF16KtYBRbzrxCMLpAkCx+oSBGnzYsSXvBl+SI/8y7U5N1+PsgiCTgiTwy
g3jBlNMpWv3gAWn64qsoTsr2H/dW/VVcvvRK5Rl2yQqU8RHSmeFhBhAjjhSXvS8O
wWnA0wJbYzuq4KtKkKOuY1Y0hQhtHtOX2YJWEJfbjamPuJ0+5zsSCvjVQLVXSWWG
VDbGDO860+SzUCJuXmKQcFRNo/Lacq7izPVN1PGiiFo2CFR9FqSQnOq9vxNqCzQK
LiLKNqwJlhyJmG3uaNthMgL2BtdyPXY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:18:59 2025 by rpki-client