Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3a9a40-4595-38f8-a92b-fdb444293646.roa
File: 4c3a9a40-4595-38f8-a92b-fdb444293646.roa (raw, json)
Hash identifier: 8zkZ0V6s+aX12ziW+ciK4ppHmi4q8OxxcVlFw7zQXLQ=
Subject key identifier: 7A:BC:A9:A7:F6:71:F8:3C:E0:DB:46:88:FA:B1:33:55:1A:A5:DF:D1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15534B12747F5B7D4997200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3a9a40-4595-38f8-a92b-fdb444293646.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 166.102.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:34:b1:27:47:f5:b7:d4:99:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=627bc970-dc9f-401e-8632-7513c1bc8d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:62:af:e6:de:fc:00:f3:1a:a3:7e:1f:ff:db:
57:89:0a:55:14:79:8c:af:ca:05:d7:ac:4a:71:1e:
1b:ed:8a:b8:32:ed:f7:bc:6e:8d:c9:09:d5:fe:c0:
fa:ea:f4:b8:9e:81:15:a4:a0:31:34:57:d2:4f:34:
3b:da:23:bb:78:5a:b2:48:03:f8:62:c3:61:ee:a9:
4f:76:64:b0:3c:2c:20:f2:03:0c:4d:f5:bd:44:9d:
d5:0b:e0:3a:7c:d5:ec:1c:f0:40:da:52:fe:d7:a5:
d6:04:cd:53:b7:a8:50:0e:d6:bc:d6:f1:d7:1b:02:
8d:77:55:62:4c:4f:5a:fd:73:9f:6b:0c:59:19:03:
60:04:34:8c:f9:e9:79:5d:5f:41:54:5d:27:62:8e:
b2:25:20:7d:62:75:d1:bd:6e:e8:a6:fb:fa:86:28:
82:92:37:d7:42:44:73:a4:4a:2c:42:3d:82:08:79:
19:46:e9:ec:22:01:d0:db:3e:13:65:7a:14:ea:c4:
16:d9:d7:80:81:dc:5d:7f:6b:15:a8:57:ac:b6:e5:
9c:4e:3a:2f:ad:c9:28:5e:6c:5d:88:65:af:0f:e0:
3a:63:57:ae:c8:63:c2:a9:c4:62:cf:fc:44:79:e8:
bf:4e:27:85:b1:64:27:ee:aa:1f:ce:bd:fa:85:2f:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BC:A9:A7:F6:71:F8:3C:E0:DB:46:88:FA:B1:33:55:1A:A5:DF:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3a9a40-4595-38f8-a92b-fdb444293646.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
166.102.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:d0:7a:24:40:db:df:e9:d4:76:bb:26:6e:67:39:80:99:93:
3b:9b:1f:17:7b:ce:1c:0c:41:c8:78:6c:23:1a:27:50:e4:f4:
de:8e:35:bf:b6:65:77:f9:23:22:52:6f:d2:85:81:7b:1d:b8:
a2:17:73:e8:17:ba:2e:15:09:ec:7b:4b:a4:ce:d6:14:78:f2:
3c:39:13:d8:39:a9:6d:c3:ff:ad:da:a6:89:05:51:32:6b:70:
34:d8:be:9b:d0:37:cf:f4:fa:89:b8:58:55:c6:e0:81:b8:ab:
02:65:c8:db:96:c8:ac:8d:8b:10:2f:12:c2:54:d0:d6:69:7a:
a7:ed:09:4b:db:ad:e6:b2:7f:9d:bd:20:e0:87:c4:8b:35:3b:
e6:9d:78:c0:10:5d:d5:a7:4d:58:28:8c:92:9f:f1:82:0d:8b:
78:06:87:96:d6:be:a0:1e:8f:b5:c7:ec:0d:4e:ae:92:a6:2b:
8d:1e:84:dd:8a:62:7e:d6:2c:c8:ea:f5:26:30:ed:3c:67:c0:
1c:87:c5:66:33:2b:de:c6:e6:0f:7d:ef:e9:f2:d9:a1:8e:28:
1f:aa:9f:65:fc:3c:9d:1d:f6:d2:47:90:75:71:4e:0c:a5:2f:
22:6c:4a:f8:51:57:68:04:35:0e:e1:8b:52:15:9d:15:5d:70:
2e:cc:1d:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTSxJ0f1t9SZcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
NjI3YmM5NzAtZGM5Zi00MDFlLTg2MzItNzUxM2MxYmM4ZDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGKv5t78APMao34f/9tXiQpVFHmMr8oF16xK
cR4b7Yq4Mu33vG6NyQnV/sD66vS4noEVpKAxNFfSTzQ72iO7eFqySAP4YsNh7qlP
dmSwPCwg8gMMTfW9RJ3VC+A6fNXsHPBA2lL+16XWBM1Tt6hQDta81vHXGwKNd1Vi
TE9a/XOfawxZGQNgBDSM+el5XV9BVF0nYo6yJSB9YnXRvW7opvv6hiiCkjfXQkRz
pEosQj2CCHkZRunsIgHQ2z4TZXoU6sQW2deAgdxdf2sVqFestuWcTjovrckoXmxd
iGWvD+A6Y1euyGPCqcRiz/xEeei/TieFsWQn7qofzr36hS8wrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHq8qaf2cfg84NtGiPqxM1Uapd/RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMzYTlhNDAtNDU5NS0z
OGY4LWE5MmItZmRiNDQ0MjkzNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmYcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3QeiRA29/p1Ha7Jm5nOYCZkzubHxd7zhwMQch4bCMaJ1Dk9N6ONb+2
ZXf5IyJSb9KFgXsduKIXc+gXui4VCex7S6TO1hR48jw5E9g5qW3D/63apokFUTJr
cDTYvpvQN8/0+om4WFXG4IG4qwJlyNuWyKyNixAvEsJU0NZpeqftCUvbreayf529
IOCHxIs1O+adeMAQXdWnTVgojJKf8YINi3gGh5bWvqAej7XH7A1OrpKmK40ehN2K
Yn7WLMjq9SYw7TxnwByHxWYzK97G5g997+ny2aGOKB+qn2X8PJ0d9tJHkHVxTgyl
LyJsSvhRV2gENQ7hi1IVnRVdcC7MHf0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:43:21 2025 by rpki-client