Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fe07105-824b-3e84-a543-459484dc17d7.roa
File: 2fe07105-824b-3e84-a543-459484dc17d7.roa (raw, json)
Hash identifier: AG+3kyXfm8Jwmp0tFvZjlAQhdGaA609SHOlEBJkh39g=
Subject key identifier: E2:33:F7:A4:04:89:3E:B3:C0:28:91:06:26:D8:3B:ED:A0:DF:39:96
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584800AFC919267A1310016EB680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fe07105-824b-3e84-a543-459484dc17d7.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 7029
IP address blocks: 75.91.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c9:19:26:7a:13:10:01:6e:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=bb964f4e-8fe0-409a-bb6a-d156cf54a936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c5:d8:55:14:00:4d:d9:59:ed:1a:00:ef:c7:
d5:11:23:a0:ad:ec:9a:ab:e9:43:5d:ce:7c:76:36:
e9:34:78:79:79:59:b7:27:20:57:3f:30:30:39:78:
1f:9c:fa:f5:1a:6d:27:b7:42:19:95:69:70:91:b4:
a0:f4:43:61:fe:64:df:fd:1b:4c:51:9d:aa:cb:82:
10:a1:65:13:67:8b:2e:33:64:a1:a8:57:cd:cd:b7:
9c:f5:7e:55:26:f4:da:25:83:0e:fa:88:c2:e7:18:
32:01:9b:6d:93:fd:12:66:80:26:3c:d6:0e:59:3d:
b1:92:73:f6:c5:d5:53:b4:33:df:3f:28:d8:c3:f6:
40:02:39:87:0a:ca:12:47:40:24:28:5c:c0:b8:c4:
47:cd:45:28:91:85:0a:19:33:d8:3b:c6:01:5f:69:
a2:93:34:2d:7e:d8:9d:86:62:6f:f1:b0:3f:35:9d:
36:29:26:93:ac:98:d6:73:a3:10:ff:b7:48:e3:a1:
c1:29:2f:12:df:a4:a9:02:ce:ba:a0:cb:00:ca:06:
9d:a0:e0:6a:9a:74:84:f6:64:52:2d:3d:ad:2e:81:
d3:58:b7:d9:9e:47:3c:7f:7c:07:7c:3d:f3:a1:ef:
0c:3e:13:20:ed:67:c3:50:6b:27:36:ad:9c:a9:96:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:33:F7:A4:04:89:3E:B3:C0:28:91:06:26:D8:3B:ED:A0:DF:39:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fe07105-824b-3e84-a543-459484dc17d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.91.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:37:a0:0e:a0:46:01:7a:22:c3:73:66:29:dc:ab:b8:bb:ae:
81:51:d2:42:c7:57:b9:56:3f:f8:a6:27:39:f6:6f:16:d3:c8:
b0:13:3f:11:8c:5c:38:28:82:76:5d:66:82:49:0a:6f:a3:71:
e7:1c:34:73:a0:10:0a:cb:83:fc:ce:a8:75:fa:93:79:e0:e1:
20:8c:48:db:a1:76:c8:c2:58:b1:c2:29:6c:6c:62:b7:c8:52:
e1:1a:9e:14:49:50:3e:c4:e6:ad:5e:40:eb:31:c7:2e:2f:e9:
d6:8b:5a:0d:39:d0:8d:86:66:3c:f1:a2:6b:33:97:ec:f7:bd:
07:0e:4e:8a:b9:c8:d0:b9:10:54:16:56:79:b8:c7:e6:a7:c5:
58:a1:04:09:5c:88:9c:16:12:80:7f:e1:3d:cd:ee:82:fe:a9:
9b:fc:95:43:90:73:33:98:22:25:64:32:d3:20:3b:85:8c:39:
4f:ac:14:2b:d0:89:fc:7f:7b:69:75:e1:3c:60:69:06:87:d7:
0c:71:bb:bb:bd:3e:cd:0c:7e:ee:ae:6b:7d:97:ab:68:7a:5a:
16:bc:df:0d:f2:36:5c:bd:da:d9:b9:e6:51:f2:fe:76:6c:79:
dd:7d:75:4d:db:0e:29:16:4f:ef:d0:c5:ab:97:d7:b2:3a:6a:
de:2c:18:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr8kZJnoTEAFutoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
YmI5NjRmNGUtOGZlMC00MDlhLWJiNmEtZDE1NmNmNTRhOTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cXYVRQATdlZ7RoA78fVESOgreyaq+lDXc58
djbpNHh5eVm3JyBXPzAwOXgfnPr1Gm0nt0IZlWlwkbSg9ENh/mTf/RtMUZ2qy4IQ
oWUTZ4suM2ShqFfNzbec9X5VJvTaJYMO+ojC5xgyAZttk/0SZoAmPNYOWT2xknP2
xdVTtDPfPyjYw/ZAAjmHCsoSR0AkKFzAuMRHzUUokYUKGTPYO8YBX2mikzQtftid
hmJv8bA/NZ02KSaTrJjWc6MQ/7dI46HBKS8S36SpAs66oMsAygadoOBqmnSE9mRS
LT2tLoHTWLfZnkc8f3wHfD3zoe8MPhMg7WfDUGsnNq2cqZYfHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOIz96QEiT6zwCiRBibYO+2g3zmWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmZlMDcxMDUtODI0Yi0z
ZTg0LWE1NDMtNDU5NDg0ZGMxN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1soMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAo3oA6gRgF6IsNzZincq7i7roFR0kLHV7lWP/imJzn2bxbTyLATPxGM
XDgognZdZoJJCm+jceccNHOgEArLg/zOqHX6k3ng4SCMSNuhdsjCWLHCKWxsYrfI
UuEanhRJUD7E5q1eQOsxxy4v6daLWg050I2GZjzxomszl+z3vQcOToq5yNC5EFQW
Vnm4x+anxVihBAlciJwWEoB/4T3N7oL+qZv8lUOQczOYIiVkMtMgO4WMOU+sFCvQ
ifx/e2l14TxgaQaH1wxxu7u9Ps0Mfu6ua32Xq2h6Wha83w3yNly92tm55lHy/nZs
ed19dU3bDikWT+/QxauX17I6at4sGFw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:38:49 2025 by rpki-client