Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa
File: 37011cf7-93bf-3f24-a66a-48d124c2519a.roa (raw, json)
Hash identifier: tFnqbO9uTtrtBdNnZ8CrvLElElNMjf4JUJ4W3mg1dBA=
Subject key identifier: 3E:77:11:D1:F5:8E:AA:2D:0A:53:D7:B1:3D:DA:99:DF:20:5F:D6:8F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848116FB5D3CE2FA9EF1B0E0280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 173.187.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:b5:d3:ce:2f:a9:ef:1b:0e:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=33fcc4d5-1756-4193-af46-96e6595370bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:5d:39:07:89:b2:ce:f3:48:55:1a:be:d3:
88:28:79:19:cf:46:b2:5c:45:da:f5:61:82:18:dc:
73:67:bb:9f:f4:04:fd:4a:57:92:1a:b5:07:62:e4:
08:d9:e4:f1:b6:8c:c1:a0:32:33:3a:73:1f:5d:63:
64:f3:fd:35:61:8d:47:7a:12:f0:da:93:44:38:97:
0a:28:eb:3f:8b:cb:c6:8c:2a:15:5f:75:36:a4:41:
3c:35:56:3e:3d:88:e7:36:4d:d0:73:d3:a0:be:61:
6a:ac:b0:b3:2f:ae:03:1f:44:0b:bc:18:62:8f:24:
71:12:a1:ec:05:25:4b:01:a1:54:28:d3:1c:82:d3:
d7:62:39:f2:40:8e:bf:8c:4d:3b:85:ac:d7:4e:a9:
9c:a3:8f:27:f1:7a:07:92:00:1e:79:56:ba:19:c7:
58:a3:89:36:76:77:6e:14:0a:86:84:6d:ec:e8:3e:
5e:c3:ac:cb:f5:30:25:89:19:24:63:38:df:ff:a8:
7e:6c:29:e4:53:4d:bc:94:ee:1c:c2:1d:d2:b2:12:
66:8b:ae:7b:12:a1:5f:f2:40:b2:c5:a3:ce:2f:a5:
4c:93:7e:3e:e2:3b:ad:80:07:b9:5b:47:2f:21:2e:
e7:77:0f:82:a5:65:d5:a7:72:11:99:94:cb:68:d4:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:77:11:D1:F5:8E:AA:2D:0A:53:D7:B1:3D:DA:99:DF:20:5F:D6:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:9e:32:6a:3f:52:df:2e:b0:22:93:96:fe:1d:48:b3:bf:84:
cb:ba:4b:b0:06:93:12:03:73:f1:96:d4:6c:ac:b0:be:8a:0d:
f4:0f:1b:cd:64:99:2b:06:45:e3:a7:6d:04:96:67:7d:79:a3:
0c:7c:fb:1a:52:80:3f:9c:8c:cc:ca:02:72:0c:7f:77:51:11:
63:b3:05:1f:25:0c:68:ee:0f:6c:71:85:dc:c1:57:41:d7:1a:
3f:af:88:60:cb:bd:4e:d4:f0:2a:25:3c:b7:ef:87:f0:82:88:
e9:d3:30:54:ea:4d:d5:c4:09:16:8b:e5:2e:c6:d9:e4:80:43:
b8:d8:dd:cd:3d:70:23:96:17:af:f0:dc:6d:f7:82:17:32:5e:
d5:69:b1:c5:07:cb:da:1b:11:af:f7:12:1c:2b:4a:cf:7a:e9:
9d:86:e3:c7:fb:c5:63:dc:07:34:45:85:29:f9:02:1f:ca:59:
3e:fc:35:f8:ce:cb:cb:03:f3:b4:8e:2c:3e:19:6a:42:4a:3e:
6f:3d:3c:e6:a2:24:41:5b:be:dd:d5:0e:f4:6f:70:e4:45:44:
d7:52:7f:5d:f3:c5:45:19:4a:76:e0:70:60:df:cb:7c:0d:1c:
60:02:3d:7b:c2:3c:46:4b:fc:af:11:43:61:bc:c2:03:55:d6:
17:45:59:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7XTzi+p7xsOAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
MzNmY2M0ZDUtMTc1Ni00MTkzLWFmNDYtOTZlNjU5NTM3MGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+tdOQeJss7zSFUavtOIKHkZz0ayXEXa9WGC
GNxzZ7uf9AT9SleSGrUHYuQI2eTxtozBoDIzOnMfXWNk8/01YY1HehLw2pNEOJcK
KOs/i8vGjCoVX3U2pEE8NVY+PYjnNk3Qc9OgvmFqrLCzL64DH0QLvBhijyRxEqHs
BSVLAaFUKNMcgtPXYjnyQI6/jE07hazXTqmco48n8XoHkgAeeVa6GcdYo4k2dndu
FAqGhG3s6D5ew6zL9TAliRkkYzjf/6h+bCnkU028lO4cwh3SshJmi657EqFf8kCy
xaPOL6VMk34+4jutgAe5W0cvIS7ndw+CpWXVp3IRmZTLaNTN+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD53EdH1jqotClPXsT3amd8gX9aPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzcwMTFjZjctOTNiZi0z
ZjI0LWE2NmEtNDhkMTI0YzI1MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOeMmo/Ut8usCKTlv4dSLO/hMu6S7AGkxIDc/GW1GyssL6KDfQPG81k
mSsGReOnbQSWZ315owx8+xpSgD+cjMzKAnIMf3dREWOzBR8lDGjuD2xxhdzBV0HX
Gj+viGDLvU7U8ColPLfvh/CCiOnTMFTqTdXECRaL5S7G2eSAQ7jY3c09cCOWF6/w
3G33ghcyXtVpscUHy9obEa/3EhwrSs966Z2G48f7xWPcBzRFhSn5Ah/KWT78NfjO
y8sD87SOLD4ZakJKPm89POaiJEFbvt3VDvRvcORFRNdSf13zxUUZSnbgcGDfy3wN
HGACPXvCPEZL/K8RQ2G8wgNV1hdFWWg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:35 2025 by rpki-client