Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78d35d18-3ab0-3586-8363-2fa340e3a405.roa
File: 78d35d18-3ab0-3586-8363-2fa340e3a405.roa (raw, json)
Hash identifier: j8+05ynF1Yrhi9D7sf2UDTtb6gkv8+fncaK1fzrG03c=
Subject key identifier: 62:AE:D3:54:48:D5:D5:81:F4:B0:C8:AA:15:57:EB:41:0B:A1:60:F8
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A3C267F3B9E7B178F4200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78d35d18-3ab0-3586-8363-2fa340e3a405.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 173.190.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:3c:26:7f:3b:9e:7b:17:8f:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=282b1a3d-8341-4a16-8ae3-57e7c3f08510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:c7:85:ae:29:33:09:63:0c:7c:55:6a:92:
eb:da:fb:f1:ea:3b:13:98:74:39:cc:80:25:ab:2d:
a8:b2:27:95:71:b2:eb:63:4f:0b:65:6c:bc:c0:11:
ba:16:82:72:0d:8d:f5:33:9f:cb:ba:6c:bd:e1:a7:
ed:72:bb:95:bd:49:c7:3f:ba:35:8b:3f:94:2c:74:
78:39:08:41:17:39:94:7a:5a:5f:eb:46:b9:82:17:
f2:56:1c:d9:a4:c5:84:1e:1f:c0:d2:7c:7d:76:92:
d0:39:40:f3:55:9c:5b:a4:cd:96:27:c2:09:eb:3d:
77:4c:af:0f:ec:97:af:19:9c:38:ed:a8:c1:d7:30:
ff:e4:6c:19:b6:bb:cf:1d:8e:32:bc:4e:22:ab:55:
f4:98:21:14:a3:78:56:7c:3b:0e:92:62:eb:fe:2c:
b2:5f:cc:f7:83:ea:3e:94:94:14:56:9a:b7:43:c8:
5d:fe:bf:6d:d2:16:20:2c:52:6c:60:9a:bf:6c:e5:
d6:95:e9:89:f9:40:28:55:ec:85:06:39:fc:e6:27:
3c:ef:b0:ad:59:f0:21:e2:05:74:f5:49:65:db:c7:
6f:61:95:ea:70:2a:16:85:d2:09:6f:cb:61:1c:25:
84:bc:50:ad:ff:79:44:4e:59:b3:38:80:4b:a3:0c:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AE:D3:54:48:D5:D5:81:F4:B0:C8:AA:15:57:EB:41:0B:A1:60:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78d35d18-3ab0-3586-8363-2fa340e3a405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.190.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:e9:0c:16:41:32:e4:34:fd:bc:65:3a:7a:db:8b:f7:33:94:
96:9c:99:86:0d:0e:08:a7:5d:d4:b1:92:c8:7a:0a:0d:f7:57:
c5:fa:09:e8:9b:39:00:5b:50:16:73:b8:80:0b:42:5c:2a:34:
13:2f:47:6e:5b:4e:c2:ae:19:2e:a5:96:93:a9:1a:13:c8:a1:
af:21:a3:ec:28:d0:7a:e2:35:b6:5f:37:f6:82:58:bf:7e:7e:
32:59:e2:fe:a7:1f:c7:b0:0a:29:0e:ef:e3:cc:10:06:dc:a9:
6e:07:bf:51:a5:70:64:c1:91:d6:ec:7c:76:71:eb:36:75:0b:
45:f9:99:6a:9c:0d:60:64:2e:5d:a5:fb:25:e0:26:4f:39:fd:
dc:d7:7d:6d:d5:e8:6b:f4:9e:11:50:8b:11:6a:8a:90:f3:b7:
a9:04:b6:33:d6:fe:79:0d:60:a8:8c:bf:a4:cb:ee:1e:75:bc:
c2:72:de:c4:bb:50:df:dc:d2:3e:79:b0:20:ae:db:b4:84:9e:
38:38:1e:56:e9:e5:f6:ed:4c:62:80:0c:41:8d:92:df:ca:1f:
5f:10:6b:4d:dd:17:c0:3c:94:3f:0a:b8:90:4d:47:c5:fb:08:
0c:0d:73:69:73:5b:2d:bd:5f:08:74:3e:c9:8b:2f:8b:94:c4:
ba:21:8f:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijwmfzueexePQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk
MjgyYjFhM2QtODM0MS00YTE2LThhZTMtNTdlN2MzZjA4NTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/PHha4pMwljDHxVapLr2vvx6jsTmHQ5zIAl
qy2osieVcbLrY08LZWy8wBG6FoJyDY31M5/Lumy94aftcruVvUnHP7o1iz+ULHR4
OQhBFzmUelpf60a5ghfyVhzZpMWEHh/A0nx9dpLQOUDzVZxbpM2WJ8IJ6z13TK8P
7JevGZw47ajB1zD/5GwZtrvPHY4yvE4iq1X0mCEUo3hWfDsOkmLr/iyyX8z3g+o+
lJQUVpq3Q8hd/r9t0hYgLFJsYJq/bOXWlemJ+UAoVeyFBjn85ic877CtWfAh4gV0
9Ull28dvYZXqcCoWhdIJb8thHCWEvFCt/3lETlmzOIBLowz/wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKu01RI1dWB9LDIqhVX60ELoWD4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzhkMzVkMTgtM2FiMC0z
NTg2LTgzNjMtMmZhMzQwZTNhNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb7QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7pDBZBMuQ0/bxlOnrbi/czlJacmYYNDginXdSxksh6Cg33V8X6Ceib
OQBbUBZzuIALQlwqNBMvR25bTsKuGS6llpOpGhPIoa8ho+wo0HriNbZfN/aCWL9+
fjJZ4v6nH8ewCikO7+PMEAbcqW4Hv1GlcGTBkdbsfHZx6zZ1C0X5mWqcDWBkLl2l
+yXgJk85/dzXfW3V6Gv0nhFQixFqipDzt6kEtjPW/nkNYKiMv6TL7h51vMJy3sS7
UN/c0j55sCCu27SEnjg4Hlbp5fbtTGKADEGNkt/KH18Qa03dF8A8lD8KuJBNR8X7
CAwNc2lzWy29Xwh0PsmLL4uUxLohj4w=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:33:46 2025 by rpki-client