Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa
File: 654dd9cc-b166-3061-853e-a33f75bc0504.roa (raw, json)
Hash identifier: aU7KcQPdsWhcu3JH85icdcozrqNo2FQ2nYEmBjoNfDM=
Subject key identifier: 58:42:DF:B2:1F:18:41:A7:13:9A:C2:27:46:2C:AB:BD:C8:D2:72:6B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848143EBF9734EE0CC1A91C9F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7029
IP address blocks: 40.133.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:bf:97:34:ee:0c:c1:a9:1c:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8c28e415-a823-4fab-bfa7-13b99a60f01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e6:26:55:21:d9:7a:66:c3:b6:50:55:3f:2d:
d6:c9:4e:24:a9:01:cc:6e:a8:b8:90:72:9d:c7:43:
c1:d8:40:2b:90:22:0b:1c:5e:ae:7f:1c:19:07:40:
40:38:72:7b:01:41:74:6e:62:44:7e:8b:5b:96:87:
00:bd:7f:4d:40:e4:a0:eb:02:97:30:17:af:fe:1d:
20:7b:db:3b:d0:71:dc:70:ce:a1:09:d7:bf:15:a1:
e9:8c:24:ca:fb:54:e7:48:69:34:db:fb:a7:36:88:
ef:0d:33:5b:ef:64:f6:3d:d1:47:0c:83:76:0f:60:
7c:51:ae:16:42:3a:ea:2b:2d:34:3a:6f:92:f7:61:
f5:4c:8a:bf:e1:32:c4:d9:24:b7:a6:1e:93:39:81:
6f:34:65:bb:82:b5:7e:cc:3a:de:88:b8:ac:02:89:
94:f0:0c:60:3d:83:80:22:62:08:ee:91:2c:13:64:
4c:a8:21:c0:38:15:bf:47:84:de:67:1d:5b:73:1d:
8d:4c:fa:c3:0a:76:2d:9e:81:10:e5:cf:56:70:f0:
b3:8e:07:e0:b1:9f:c1:3b:5d:b8:53:92:d0:81:35:
34:41:f0:3a:76:07:7b:1a:23:13:31:fa:25:2f:30:
b4:39:17:ac:b9:76:4d:3f:21:a0:1f:0c:05:8f:ec:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:DF:B2:1F:18:41:A7:13:9A:C2:27:46:2C:AB:BD:C8:D2:72:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.133.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:44:07:7a:28:9d:65:0f:80:39:3f:f3:16:40:a7:fc:c0:6d:
97:47:38:60:95:10:a4:11:1f:8f:bd:50:84:0e:09:e1:94:a6:
06:cb:09:19:c6:d2:61:5d:b4:76:d2:75:5c:66:31:0d:48:fc:
a2:35:fb:a7:c2:22:55:19:95:c0:85:1e:8a:f6:1a:1e:99:d2:
28:97:1b:e1:1b:ae:d5:42:15:be:dd:87:33:79:b1:3c:5e:03:
a6:54:a1:03:4d:4f:ed:0b:72:b3:1f:73:b9:a3:95:bc:3d:a8:
55:ae:d6:af:38:24:c8:62:dd:33:dc:84:34:72:30:63:fb:0a:
e7:3c:c2:63:45:14:77:f0:48:12:29:8a:ce:5a:e8:1e:50:f8:
e6:92:62:f5:37:18:1c:f3:bd:a5:cc:a5:01:c0:ea:5d:ba:36:
f6:40:fa:3f:6b:fe:2c:66:49:f3:bd:96:44:34:30:3d:1a:15:
17:0c:bc:d0:98:98:b6:16:07:4e:81:1a:48:5f:2a:fc:8b:7c:
9e:e9:1e:51:a7:30:3e:08:3b:ed:50:40:b5:ef:f1:2f:43:e9:
f4:3f:ba:b1:75:f2:c9:33:e0:75:0c:1f:46:a5:de:8b:a8:46:
77:01:b2:a4:23:21:aa:94:3f:8b:19:13:f3:06:0b:1c:cf:96:
d1:52:f5:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPr+XNO4Mwakcn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
OGMyOGU0MTUtYTgyMy00ZmFiLWJmYTctMTNiOTlhNjBmMDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOYmVSHZembDtlBVPy3WyU4kqQHMbqi4kHKd
x0PB2EArkCILHF6ufxwZB0BAOHJ7AUF0bmJEfotblocAvX9NQOSg6wKXMBev/h0g
e9s70HHccM6hCde/FaHpjCTK+1TnSGk02/unNojvDTNb72T2PdFHDIN2D2B8Ua4W
QjrqKy00Om+S92H1TIq/4TLE2SS3ph6TOYFvNGW7grV+zDreiLisAomU8AxgPYOA
ImII7pEsE2RMqCHAOBW/R4TeZx1bcx2NTPrDCnYtnoEQ5c9WcPCzjgfgsZ/BO124
U5LQgTU0QfA6dgd7GiMTMfolLzC0OResuXZNPyGgHwwFj+wl6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhC37IfGEGnE5rCJ0Ysq73I0nJrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjU0ZGQ5Y2MtYjE2Ni0z
MDYxLTg1M2UtYTMzZjc1YmMwNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIWQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBEB3oonWUPgDk/8xZAp/zAbZdHOGCVEKQRH4+9UIQOCeGUpgbLCRnG
0mFdtHbSdVxmMQ1I/KI1+6fCIlUZlcCFHor2Gh6Z0iiXG+EbrtVCFb7dhzN5sTxe
A6ZUoQNNT+0LcrMfc7mjlbw9qFWu1q84JMhi3TPchDRyMGP7Cuc8wmNFFHfwSBIp
is5a6B5Q+OaSYvU3GBzzvaXMpQHA6l26NvZA+j9r/ixmSfO9lkQ0MD0aFRcMvNCY
mLYWB06BGkhfKvyLfJ7pHlGnMD4IO+1QQLXv8S9D6fQ/urF18skz4HUMH0al3ouo
RncBsqQjIaqUP4sZE/MGCxzPltFS9dw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:36:40 2025 by rpki-client