Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3397442c-bfc4-3348-8721-b37de08639bd.roa
File: 3397442c-bfc4-3348-8721-b37de08639bd.roa (raw, json)
Hash identifier: YzGxqjrfHY9J3yRGOCGl4Pa4ZJ9XRXnXnQn3+nqGU9U=
Subject key identifier: 81:21:2C:AB:11:12:28:F6:C8:35:2A:DF:7E:67:1D:66:8C:D6:57:EA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584800AFC83D939372C81CABD9D0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3397442c-bfc4-3348-8721-b37de08639bd.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 7029
IP address blocks: 151.213.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c8:3d:93:93:72:c8:1c:ab:d9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=db09c5c2-6baa-4a9f-bd13-b015eb681491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:43:b1:99:6c:24:f1:40:15:9f:50:0f:5c:
f8:d9:59:be:46:ac:7a:a6:8f:1f:6a:39:ed:3b:bd:
67:c5:8e:21:62:13:e4:ba:f4:77:4c:38:c2:76:8e:
ac:d0:e0:df:3d:98:5b:aa:de:05:de:c4:3d:6e:70:
20:ef:5e:15:4f:e6:e3:ab:81:b9:65:9f:38:fd:d6:
cb:1c:8a:26:b6:f0:16:c9:32:4e:0f:58:e3:49:c8:
6e:b5:93:29:99:ed:07:aa:88:de:89:3e:e9:7d:ad:
b9:38:fd:dd:f9:25:c1:62:58:5f:ab:74:b8:cd:46:
a0:4f:86:6a:37:56:a2:90:cd:de:0f:cc:6b:13:be:
96:20:8e:a3:90:be:80:23:20:c1:4c:d1:41:fd:52:
aa:f6:0c:23:fa:8b:5e:60:7c:e2:21:97:87:7b:1d:
27:85:24:bd:60:fa:9a:22:1f:1d:ce:9a:e6:d7:33:
f1:47:05:9e:65:92:07:e5:42:8c:85:4d:c1:ae:e9:
ba:bb:62:61:7a:b0:aa:68:2b:cc:95:44:f9:6d:8c:
6c:a1:a2:d8:54:7c:35:ea:eb:3d:46:a7:d8:e9:6e:
c5:e4:31:4d:59:16:59:40:4f:eb:17:e3:85:ec:16:
87:af:cf:5b:81:de:20:d0:66:72:0a:51:e6:8d:87:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:2C:AB:11:12:28:F6:C8:35:2A:DF:7E:67:1D:66:8C:D6:57:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3397442c-bfc4-3348-8721-b37de08639bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
151.213.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:94:9d:07:58:c5:c1:5e:50:be:d6:e9:dd:a1:d7:83:32:34:
e6:8f:35:61:cd:aa:1f:de:b2:58:47:ea:03:e2:9d:b7:3f:02:
ff:2b:9e:1a:57:c9:73:aa:d1:04:32:4a:32:5a:c5:e3:d9:45:
4a:7c:b9:d9:d3:f1:6b:dc:af:80:d3:3f:5d:c3:1c:b9:7c:f7:
21:24:f9:6b:54:a8:80:d0:7e:55:fc:0d:6a:8b:f6:7b:9e:a4:
e6:a9:31:13:08:3d:2b:6b:66:83:23:e1:59:72:38:b7:fb:59:
9d:a3:a8:a1:71:91:20:cd:bf:de:02:2c:64:cd:ca:20:8b:1e:
45:45:23:bc:4b:1d:bf:b4:16:2f:a4:cd:d7:46:a7:29:43:bb:
af:24:05:08:f2:8f:61:2c:2b:b8:97:8d:34:b8:b3:6f:23:1b:
69:2d:71:f6:be:67:fd:f2:7c:5a:4c:41:74:dd:c1:c0:b4:90:
92:ce:38:24:77:7b:5c:ea:07:4f:39:e8:16:bd:5d:ab:24:41:
5f:f2:67:d2:56:59:64:0e:e8:d0:ef:52:46:95:91:f2:99:9f:
3c:21:1f:12:9a:e9:40:51:bf:3c:fc:c8:e3:3e:8c:71:26:1b:
8c:ac:5e:ed:87:92:3d:01:70:35:25:45:2a:86:8c:e1:5f:a3:
73:cd:ca:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr8g9k5NyyByr2dAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
ZGIwOWM1YzItNmJhYS00YTlmLWJkMTMtYjAxNWViNjgxNDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKNDsZlsJPFAFZ9QD1z42Vm+Rqx6po8fajnt
O71nxY4hYhPkuvR3TDjCdo6s0ODfPZhbqt4F3sQ9bnAg714VT+bjq4G5ZZ84/dbL
HIomtvAWyTJOD1jjSchutZMpme0HqojeiT7pfa25OP3d+SXBYlhfq3S4zUagT4Zq
N1aikM3eD8xrE76WII6jkL6AIyDBTNFB/VKq9gwj+oteYHziIZeHex0nhSS9YPqa
Ih8dzprm1zPxRwWeZZIH5UKMhU3Brum6u2JherCqaCvMlUT5bYxsoaLYVHw16us9
RqfY6W7F5DFNWRZZQE/rF+OF7BaHr89bgd4g0GZyClHmjYeqXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIEhLKsREij2yDUq335nHWaM1lfqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzM5NzQ0MmMtYmZjNC0z
MzQ4LTg3MjEtYjM3ZGUwODYzOWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9WQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADiUnQdYxcFeUL7W6d2h14MyNOaPNWHNqh/eslhH6gPinbc/Av8rnhpX
yXOq0QQySjJaxePZRUp8udnT8Wvcr4DTP13DHLl89yEk+WtUqIDQflX8DWqL9nue
pOapMRMIPStrZoMj4VlyOLf7WZ2jqKFxkSDNv94CLGTNyiCLHkVFI7xLHb+0Fi+k
zddGpylDu68kBQjyj2EsK7iXjTS4s28jG2ktcfa+Z/3yfFpMQXTdwcC0kJLOOCR3
e1zqB0856Ba9XaskQV/yZ9JWWWQO6NDvUkaVkfKZnzwhHxKa6UBRvzz8yOM+jHEm
G4ysXu2Hkj0BcDUlRSqGjOFfo3PNysw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:42:14 2025 by rpki-client