Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23231050-d521-3e83-8335-ec0c523eb1fa.roa
File: 23231050-d521-3e83-8335-ec0c523eb1fa.roa (raw, json)
Hash identifier: xU16mGQJKyQWPcfA9jMGFLOF7lC1R8c14ORhPcGqKP0=
Subject key identifier: B3:65:98:2C:A0:D2:30:0A:1E:DA:08:B7:D4:94:83:E1:86:FC:80:86
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155349723C9B12E764C8780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23231050-d521-3e83-8335-ec0c523eb1fa.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 166.102.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:34:97:23:c9:b1:2e:76:4c:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=38cafadd-bf51-487a-ab3d-29caf62d89d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:71:dd:6e:bf:87:f8:c8:fb:a3:9f:fd:f0:
a9:b3:03:ef:95:7f:8b:56:11:19:9b:4c:e3:70:6e:
87:da:62:0d:39:ec:41:de:f1:52:df:45:d3:d4:c5:
c3:db:1b:be:99:10:ab:cd:0f:de:c9:d1:36:c4:93:
22:66:26:18:af:27:17:2c:89:75:f8:e9:2d:b8:ac:
2c:ca:6a:d7:23:6e:f6:de:3d:6d:8e:d2:6f:e9:cc:
ba:09:a7:69:bf:e3:a2:17:06:5e:bf:9b:07:2a:03:
2c:e4:75:de:bb:41:a7:4b:9f:e9:59:6d:7c:9f:d9:
7f:ba:39:4a:97:70:15:f0:2d:73:87:16:60:9f:b6:
e2:b2:17:c7:a4:2c:74:84:ad:f3:f0:68:69:3d:9e:
ab:a2:50:7e:18:cc:ba:d3:41:5e:52:b2:fc:21:b2:
4b:b0:19:15:ca:58:68:fb:9a:62:4e:02:f9:92:68:
a7:81:24:d5:fc:b0:64:cd:42:7c:88:53:d7:fc:21:
fd:3e:e0:cc:67:27:83:c9:5c:16:07:fd:69:dd:30:
6d:a4:85:4c:24:3a:01:33:b2:9f:53:e6:e3:b5:67:
49:cd:fa:43:63:55:80:1c:cf:22:0f:bb:c5:51:18:
e6:a8:d8:47:47:24:b9:2c:66:c6:e6:c8:86:61:37:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:65:98:2C:A0:D2:30:0A:1E:DA:08:B7:D4:94:83:E1:86:FC:80:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23231050-d521-3e83-8335-ec0c523eb1fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
166.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:ce:44:2a:73:6c:83:34:8b:f6:db:7d:20:c5:08:76:b3:59:
e8:fd:f1:e9:a7:f3:bd:8d:0e:96:11:66:22:9b:8d:b2:7f:fb:
50:1d:6f:a2:9b:17:e0:f4:46:10:06:c8:86:4f:2e:93:d2:7d:
6b:3b:6f:16:2f:20:a1:bc:08:ef:a5:47:99:2d:f7:df:e3:e7:
68:00:81:34:43:9e:08:bb:25:9c:bf:e9:bb:0a:46:5c:64:4c:
66:96:ad:0f:78:d3:b9:49:4e:9a:c1:70:33:67:38:83:c6:d8:
bd:35:b8:18:20:89:f1:6e:48:57:e7:2a:d0:b1:e8:3e:c6:7e:
1b:2e:63:e3:ba:cc:32:1f:9a:45:89:16:81:56:61:e5:23:b7:
ac:62:9a:9d:59:ec:94:72:51:35:5f:fb:7d:ef:74:6b:ea:9a:
9d:14:2f:e5:26:dd:82:d0:ec:ee:05:47:05:e2:42:7a:79:e3:
d2:fe:ca:ef:13:39:af:23:56:da:59:3b:d6:0f:9a:b7:61:7e:
a7:88:f5:5e:a9:ba:20:e9:0a:23:3b:b9:a3:69:f9:4c:73:85:
da:6d:0c:43:af:d1:90:4f:2f:c7:1a:df:35:2f:51:70:c0:6f:
0c:73:a9:bf:67:25:e4:fa:c9:9b:0b:c5:54:92:75:f6:5d:4e:
4e:32:aa:34
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVTSXI8mxLnZMh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
MzhjYWZhZGQtYmY1MS00ODdhLWFiM2QtMjljYWY2MmQ4OWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv5x3W6/h/jI+6Of/fCpswPvlX+LVhEZm0zj
cG6H2mINOexB3vFS30XT1MXD2xu+mRCrzQ/eydE2xJMiZiYYrycXLIl1+OktuKws
ymrXI2723j1tjtJv6cy6Cadpv+OiFwZev5sHKgMs5HXeu0GnS5/pWW18n9l/ujlK
l3AV8C1zhxZgn7bishfHpCx0hK3z8GhpPZ6rolB+GMy600FeUrL8IbJLsBkVylho
+5piTgL5kmingSTV/LBkzUJ8iFPX/CH9PuDMZyeDyVwWB/1p3TBtpIVMJDoBM7Kf
U+bjtWdJzfpDY1WAHM8iD7vFURjmqNhHRyS5LGbG5siGYTcaLQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLNlmCyg0jAKHtoIt9SUg+GG/ICGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjMyMzEwNTAtZDUyMS0z
ZTgzLTgzMzUtZWMwYzUyM2ViMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApmYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATs5EKnNsgzSL9tt9IMUIdrNZ6P3x6afzvY0OlhFmIpuNsn/7UB1vopsX
4PRGEAbIhk8uk9J9aztvFi8gobwI76VHmS333+PnaACBNEOeCLslnL/puwpGXGRM
ZpatD3jTuUlOmsFwM2c4g8bYvTW4GCCJ8W5IV+cq0LHoPsZ+Gy5j47rMMh+aRYkW
gVZh5SO3rGKanVnslHJRNV/7fe90a+qanRQv5SbdgtDs7gVHBeJCennj0v7K7xM5
ryNW2lk71g+at2F+p4j1Xqm6IOkKIzu5o2n5THOF2m0MQ6/RkE8vxxrfNS9RcMBv
DHOpv2cl5PrJmwvFVJJ19l1OTjKqNA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:20 2025 by rpki-client