Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa
File: 44acb445-26d6-3fdf-8220-9a3adef4f394.roa (raw, json)
Hash identifier: AO9DD6uNApypGYZEPRwEEOmdKw0p+txpG4h1Rrpb1wA=
Subject key identifier: E3:8F:BE:E4:CB:CF:E5:F1:22:12:EC:80:12:30:A2:8C:35:04:7B:DF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A378ADBE50236707A3E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 98.20.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:37:8a:db:e5:02:36:70:7a:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=39aecc33-4b4d-48ea-91fa-b49cc0220012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:94:dd:22:10:ab:16:f0:81:d3:28:d8:66:c4:
c7:f0:62:63:4a:21:86:a2:b9:1a:86:98:0e:bc:b4:
df:d3:74:6f:15:54:89:9c:57:1a:75:18:5b:0b:44:
b3:74:bf:a9:d8:92:b4:7d:8d:7d:bd:83:71:f3:96:
de:55:f7:7e:73:73:a1:55:2b:ee:e4:b5:e1:f4:94:
4d:ed:d1:2f:96:98:7c:45:56:55:bf:3c:b3:64:c1:
c5:b8:ee:2d:21:e7:c0:eb:17:d8:da:5c:5c:f4:a9:
d9:97:23:0b:25:78:93:a8:95:38:94:c0:31:ba:32:
c4:86:a9:34:73:7c:ed:cc:15:c8:90:5a:59:b0:91:
ea:d6:d3:ab:9d:bd:5c:34:e7:42:f4:43:ab:79:d8:
1e:bc:3a:a6:ea:b7:ef:05:4a:ae:2a:52:73:bc:d2:
11:13:e2:05:e1:fb:25:f7:de:07:60:b0:e6:e1:fb:
4a:12:58:4d:b6:01:20:0d:58:47:37:9e:9c:a8:18:
77:5a:61:18:10:ce:f4:45:5b:7d:8d:1b:c7:3d:b4:
11:68:29:44:21:b8:8f:35:6c:c2:13:17:85:b6:78:
e0:5f:b7:21:35:60:d5:9f:04:ca:1a:56:37:45:b8:
a5:e5:04:9d:55:93:f3:4d:68:0a:9b:d4:c2:6f:21:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:BE:E4:CB:CF:E5:F1:22:12:EC:80:12:30:A2:8C:35:04:7B:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:78:44:60:da:41:37:b9:42:55:68:86:ab:2f:a6:ca:4a:80:
ce:85:cf:02:a4:37:f9:8c:5e:f4:e9:13:31:3e:75:c3:bf:78:
3b:7b:e7:9c:1a:e2:0a:25:14:c5:6e:94:1b:ae:59:5a:36:ff:
86:5b:1c:fe:26:f7:06:4b:18:a2:3f:10:09:86:71:48:92:67:
e9:b8:b7:ac:28:4c:5f:2f:56:29:e0:d3:ab:18:d7:e5:18:b1:
41:b3:f2:af:d7:65:cc:28:1c:02:a1:b7:09:82:94:5c:dd:f1:
e2:50:49:a8:45:9d:90:12:7c:ec:18:1c:3a:f9:ef:87:39:b4:
82:c4:ab:7f:31:9f:ba:c8:94:97:d4:50:07:4c:6c:60:4e:df:
fe:4b:be:8f:67:e4:f3:c0:39:ba:d5:03:dd:2f:6b:00:69:fc:
38:63:21:eb:65:28:5e:55:51:51:a1:88:c8:86:e8:a3:03:e4:
34:ae:f0:0a:c2:08:3b:8a:54:70:c9:23:24:ca:9a:36:38:2e:
cb:9b:5e:da:ef:ca:a9:c2:7a:78:13:8e:e1:15:e7:08:2a:1d:
a0:31:fa:b0:a2:02:39:77:e2:5d:53:cb:9b:76:62:1e:fa:8a:
32:c5:e2:a8:13:e5:ab:21:76:2e:8a:f6:2d:74:09:16:e2:88:
61:94:b2:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijeK2+UCNnB6PgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk
MzlhZWNjMzMtNGI0ZC00OGVhLTkxZmEtYjQ5Y2MwMjIwMDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJTdIhCrFvCB0yjYZsTH8GJjSiGGorkahpgO
vLTf03RvFVSJnFcadRhbC0SzdL+p2JK0fY19vYNx85beVfd+c3OhVSvu5LXh9JRN
7dEvlph8RVZVvzyzZMHFuO4tIefA6xfY2lxc9KnZlyMLJXiTqJU4lMAxujLEhqk0
c3ztzBXIkFpZsJHq1tOrnb1cNOdC9EOredgevDqm6rfvBUquKlJzvNIRE+IF4fsl
994HYLDm4ftKElhNtgEgDVhHN56cqBh3WmEYEM70RVt9jRvHPbQRaClEIbiPNWzC
ExeFtnjgX7chNWDVnwTKGlY3Rbil5QSdVZPzTWgKm9TCbyEyaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOPvuTLz+XxIhLsgBIwoow1BHvfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDRhY2I0NDUtMjZkNi0z
ZmRmLTgyMjAtOWEzYWRlZjRmMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhSQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHB4RGDaQTe5QlVohqsvpspKgM6FzwKkN/mMXvTpEzE+dcO/eDt755wa
4golFMVulBuuWVo2/4ZbHP4m9wZLGKI/EAmGcUiSZ+m4t6woTF8vVing06sY1+UY
sUGz8q/XZcwoHAKhtwmClFzd8eJQSahFnZASfOwYHDr574c5tILEq38xn7rIlJfU
UAdMbGBO3/5Lvo9n5PPAObrVA90vawBp/DhjIetlKF5VUVGhiMiG6KMD5DSu8ArC
CDuKVHDJIyTKmjY4LsubXtrvyqnCengTjuEV5wgqHaAx+rCiAjl34l1Ty5t2Yh76
ijLF4qgT5ashdi6K9i10CRbiiGGUslE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:29:30 2025 by rpki-client