Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa
File: 48e35af3-3f19-327b-a342-5b5e29f9df5f.roa (raw, json)
Hash identifier: ZZXClUHXtMjdaxLuVcy2E/ZV29ZNuXSqMwlrGv+Wq8c=
Subject key identifier: 66:BC:AF:8A:9D:71:CF:B9:DC:9F:C3:A1:79:03:96:D1:EB:EC:CE:DB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848143B2D1763B296B9DB783E80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 207.91.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:2d:17:63:b2:96:b9:db:78:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c6ced8f5-04d9-4689-af4b-b43090aa9d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7b:81:c3:2a:1d:0c:4d:a8:fd:88:e1:22:6a:
8f:37:8a:86:5a:91:4d:c0:c7:2f:f8:aa:d3:b7:c6:
ed:da:85:0b:5b:42:e2:a9:a3:a7:c1:84:0a:10:48:
c2:b9:1c:47:19:37:8c:bf:f8:32:7d:12:d5:15:59:
19:07:9c:9d:5d:b0:10:59:61:dc:98:58:17:e3:c5:
51:52:b5:9e:88:9f:fc:a1:22:34:f0:81:ba:55:75:
5d:66:52:f0:7e:ed:f7:0c:d6:5f:9b:3c:57:6b:2c:
23:93:46:cc:7b:fc:17:8b:30:59:c2:0b:5f:be:ab:
f7:54:b6:a2:15:13:97:18:a4:90:69:6c:d3:4b:35:
ce:fc:17:34:00:84:13:db:73:e0:2a:23:17:81:cd:
fe:06:8c:09:f9:97:a8:82:a8:25:be:c3:fa:d0:5d:
ae:8c:47:ca:29:78:fb:46:74:cb:5f:52:1c:4f:8f:
a1:c7:67:2d:a6:15:1f:5c:8a:37:d8:b8:ef:bc:f3:
79:f0:f7:41:19:6b:53:c1:86:6a:9b:f7:56:3f:ec:
af:41:cc:fd:75:66:89:00:59:03:8c:88:6f:cb:51:
00:f7:74:83:80:cb:20:0e:21:f4:46:f9:ab:6f:f9:
52:c6:ce:29:d7:fc:d3:b8:6e:18:78:47:43:c9:ac:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BC:AF:8A:9D:71:CF:B9:DC:9F:C3:A1:79:03:96:D1:EB:EC:CE:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.91.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:a0:54:5c:23:1f:c3:3f:a7:ad:50:db:41:ac:d9:55:e5:6a:
84:96:8e:cd:15:9c:03:53:4f:c7:2b:7f:f1:56:c5:ba:0f:52:
ad:1a:b0:ba:38:89:f2:fd:d7:9a:ef:b7:c5:48:02:42:a4:de:
7a:07:91:86:73:03:c7:b1:36:74:d1:e8:f5:99:c0:9d:27:b5:
e0:c2:7e:0a:e4:0b:1d:52:38:f0:7a:46:1c:f3:04:5a:00:40:
20:52:1f:e0:ec:e4:4d:20:75:e2:7e:53:c7:eb:64:23:57:62:
9b:0b:68:00:70:03:cf:d6:7a:b2:8b:3a:ec:02:9e:6a:75:33:
19:1b:1f:0f:d7:5a:77:c8:46:1c:bb:89:bf:c6:ae:3e:71:c0:
e6:5e:b8:f2:98:04:fa:6b:ce:77:e0:9d:e6:09:4e:9f:07:7b:
e1:b2:5c:85:63:5c:96:be:49:94:15:35:dd:fe:b4:b4:a3:64:
08:9f:51:03:82:75:c3:03:d9:52:d0:fb:e3:8a:44:6e:4c:14:
4c:bf:bb:ba:ea:9b:3c:88:9d:c6:0f:a3:e9:84:db:9e:b9:d5:
bb:a7:be:ae:17:81:77:98:55:03:d2:c7:ce:89:a6:63:4c:c4:
04:9a:6e:4b:f4:78:88:f0:57:2e:a3:02:d7:90:a8:76:a4:ab:
f2:a1:ec:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOy0XY7KWudt4PoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
YzZjZWQ4ZjUtMDRkOS00Njg5LWFmNGItYjQzMDkwYWE5ZDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HuBwyodDE2o/YjhImqPN4qGWpFNwMcv+KrT
t8bt2oULW0LiqaOnwYQKEEjCuRxHGTeMv/gyfRLVFVkZB5ydXbAQWWHcmFgX48VR
UrWeiJ/8oSI08IG6VXVdZlLwfu33DNZfmzxXaywjk0bMe/wXizBZwgtfvqv3VLai
FROXGKSQaWzTSzXO/Bc0AIQT23PgKiMXgc3+BowJ+ZeogqglvsP60F2ujEfKKXj7
RnTLX1IcT4+hx2ctphUfXIo32LjvvPN58PdBGWtTwYZqm/dWP+yvQcz9dWaJAFkD
jIhvy1EA93SDgMsgDiH0Rvmrb/lSxs4p1/zTuG4YeEdDyawI6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGa8r4qdcc+53J/DoXkDltHr7M7bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDhlMzVhZjMtM2YxOS0z
MjdiLWEzNDItNWI1ZTI5ZjlkZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz1sQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJCgVFwjH8M/p61Q20Gs2VXlaoSWjs0VnANTT8crf/FWxboPUq0asLo4
ifL915rvt8VIAkKk3noHkYZzA8exNnTR6PWZwJ0nteDCfgrkCx1SOPB6RhzzBFoA
QCBSH+Ds5E0gdeJ+U8frZCNXYpsLaABwA8/WerKLOuwCnmp1MxkbHw/XWnfIRhy7
ib/Grj5xwOZeuPKYBPprznfgneYJTp8He+GyXIVjXJa+SZQVNd3+tLSjZAifUQOC
dcMD2VLQ++OKRG5MFEy/u7rqmzyIncYPo+mE25651bunvq4XgXeYVQPSx86JpmNM
xASabkv0eIjwVy6jAteQqHakq/Kh7Os=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:38:24 2025 by rpki-client