Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b5da6f8-b036-314a-ad66-171212cc3bf2.roa
File: 4b5da6f8-b036-314a-ad66-171212cc3bf2.roa (raw, json)
Hash identifier: F1EQHJYXxOcT95xJ7cQWEZtRK2aaGpKwnjQd9cXM5Xs=
Subject key identifier: B5:AE:21:78:15:CB:B6:C3:84:EA:83:A6:39:88:4E:59:62:C0:BB:31
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15535DABC50AFA0E870B0C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b5da6f8-b036-314a-ad66-171212cc3bf2.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 173.187.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:35:da:bc:50:af:a0:e8:70:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=fc4844db-ba5b-4586-aee1-e30969ca07be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:68:86:a4:32:ca:1e:ca:17:1e:0c:60:4c:
91:12:b9:f9:94:e6:fd:ed:81:96:bb:c9:19:59:08:
c6:1d:39:6a:31:77:da:eb:bd:3b:12:3f:c4:ab:d0:
a6:78:f9:7e:2d:f4:f6:53:21:e4:bb:93:61:cc:4a:
f0:b3:f4:e6:d1:92:ff:ff:67:e4:13:59:5e:a4:a2:
75:21:e1:fc:36:08:09:02:f1:28:b1:cf:04:bc:77:
57:29:39:1d:5d:b3:69:1d:00:99:96:9a:06:e7:58:
e9:67:a4:75:50:8c:de:a5:bd:31:2f:fb:9f:92:a6:
5c:15:b0:5d:44:ac:22:db:8c:ca:be:66:0d:65:5a:
c0:17:40:84:e1:b9:d4:b0:ea:d0:d8:eb:60:1d:04:
00:15:35:95:02:77:97:b1:38:b3:45:f4:b6:28:8f:
20:61:94:80:c5:49:98:6b:5e:20:ae:f7:d5:ca:41:
ca:85:9c:27:f6:8e:95:0e:1f:22:96:ca:39:74:53:
1d:58:f2:4c:7d:53:71:5f:02:46:45:c6:03:18:ca:
93:4b:33:97:81:cb:dc:bd:c7:60:f9:02:97:a1:7b:
14:ed:c3:6e:bc:b8:4d:30:dd:af:bd:b7:9f:9a:e9:
fc:5f:9e:f9:63:7f:da:07:1e:80:61:51:dd:13:f2:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AE:21:78:15:CB:B6:C3:84:EA:83:A6:39:88:4E:59:62:C0:BB:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b5da6f8-b036-314a-ad66-171212cc3bf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:02:60:fb:c2:cc:48:d4:74:be:c1:6d:ff:b2:b7:40:36:95:
e4:e7:85:d0:77:2b:44:23:5d:93:13:1e:c2:ba:60:7c:71:37:
a6:b0:7c:10:7f:3a:3f:fa:ec:b1:42:12:18:dc:03:a8:86:d2:
3d:a7:6e:be:9f:dc:ff:55:40:b6:ab:0c:60:2c:bb:c6:08:32:
c4:c3:07:0d:e7:7c:aa:c6:b1:ef:56:40:f5:45:73:1d:20:ae:
a3:fb:bb:b8:5a:ff:24:53:31:d5:57:e4:66:fa:27:99:11:e4:
08:c1:cb:14:55:c3:de:99:50:0d:ad:9e:eb:14:90:1b:92:33:
b1:75:2c:82:ef:e9:f2:8f:83:d8:36:1d:17:10:cf:47:8e:17:
23:f9:7b:bb:09:0d:cd:7f:3b:54:cb:d1:e7:46:8e:2f:bc:ab:
23:39:3e:d6:76:03:ef:80:d8:bc:c2:a0:df:cb:0e:76:ce:8d:
48:f6:64:71:b4:e9:db:f8:e6:a2:a1:12:a6:1c:34:aa:98:b9:
30:e9:66:1b:df:5d:65:74:f5:c7:89:27:6b:58:1a:1e:50:ed:
e8:7b:76:49:47:da:5f:01:c4:49:04:74:68:45:b8:2f:90:ec:
04:b5:8f:3a:04:15:54:55:5a:8b:41:1d:e5:81:29:a0:66:d1:
25:b0:8c:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTXavFCvoOhwsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
ZmM0ODQ0ZGItYmE1Yi00NTg2LWFlZTEtZTMwOTY5Y2EwN2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfFohqQyyh7KFx4MYEyRErn5lOb97YGWu8kZ
WQjGHTlqMXfa6707Ej/Eq9CmePl+LfT2UyHku5NhzErws/Tm0ZL//2fkE1lepKJ1
IeH8NggJAvEosc8EvHdXKTkdXbNpHQCZlpoG51jpZ6R1UIzepb0xL/ufkqZcFbBd
RKwi24zKvmYNZVrAF0CE4bnUsOrQ2OtgHQQAFTWVAneXsTizRfS2KI8gYZSAxUmY
a14grvfVykHKhZwn9o6VDh8ilso5dFMdWPJMfVNxXwJGRcYDGMqTSzOXgcvcvcdg
+QKXoXsU7cNuvLhNMN2vvbefmun8X575Y3/aBx6AYVHdE/I4aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWuIXgVy7bDhOqDpjmITlliwLsxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGI1ZGE2ZjgtYjAzNi0z
MTRhLWFkNjYtMTcxMjEyY2MzYmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbtwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkCYPvCzEjUdL7Bbf+yt0A2leTnhdB3K0QjXZMTHsK6YHxxN6awfBB/
Oj/67LFCEhjcA6iG0j2nbr6f3P9VQLarDGAsu8YIMsTDBw3nfKrGse9WQPVFcx0g
rqP7u7ha/yRTMdVX5Gb6J5kR5AjByxRVw96ZUA2tnusUkBuSM7F1LILv6fKPg9g2
HRcQz0eOFyP5e7sJDc1/O1TL0edGji+8qyM5PtZ2A++A2LzCoN/LDnbOjUj2ZHG0
6dv45qKhEqYcNKqYuTDpZhvfXWV09ceJJ2tYGh5Q7eh7dklH2l8BxEkEdGhFuC+Q
7AS1jzoEFVRVWotBHeWBKaBm0SWwjIo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:55:42 2025 by rpki-client