Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa
File: 844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa (raw, json)
Hash identifier: XHa5xjdFl+eWVJwUEAPonOc2htlfNejdtTVpdzioQ3c=
Subject key identifier: 43:46:E8:1A:E3:0D:49:1E:A8:5B:08:3B:69:77:A5:60:4A:F6:E7:EC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155412EF87B377C786D0510
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 20458
IP address blocks: 216.204.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:41:2e:f8:7b:37:7c:78:6d:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=509d8c19-65f7-40dd-93de-dd3d4ea0b60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:10:c9:ea:f0:c1:d1:04:63:45:88:ac:d5:
1b:13:22:d2:9d:a8:17:b9:0b:83:2e:7d:fc:ad:e9:
dc:aa:13:3f:2b:af:63:9a:d6:8c:5e:f1:0a:ac:6e:
5b:a1:38:c6:5a:80:8e:d1:a6:ef:d3:b4:1a:e6:45:
22:29:1f:a9:23:e1:ae:61:69:42:f1:3a:c1:22:98:
b1:a3:c5:63:4f:ec:ea:f4:3d:f2:b9:c2:3d:d4:30:
46:93:73:57:18:9f:89:62:d6:a0:c9:37:b6:13:3c:
b1:33:cf:bd:02:cc:ff:d3:fd:b3:4c:3d:25:f2:e9:
a2:a3:e9:2d:82:af:30:11:0c:54:7e:e1:f8:d6:c7:
c8:97:89:53:fd:ab:cb:be:9b:a5:e3:da:b9:75:53:
8f:c2:48:7f:4e:26:70:85:c4:d3:9c:ea:a9:16:06:
6b:3e:dd:2d:c1:39:86:1c:76:9b:e7:b7:44:aa:df:
2b:85:b4:71:32:8e:ad:63:77:6f:42:39:4c:e9:ba:
9d:58:cf:e7:70:78:f6:35:b4:9f:03:c1:03:47:83:
ca:d9:61:06:22:65:a4:3b:c3:fe:12:a1:df:d4:3c:
81:1f:eb:4d:ef:f6:58:5a:03:87:c4:3f:05:11:2f:
cc:e4:ac:3b:3b:e3:77:11:f8:9b:f8:d5:66:16:b9:
d8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:46:E8:1A:E3:0D:49:1E:A8:5B:08:3B:69:77:A5:60:4A:F6:E7:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.204.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:fc:c4:b1:a6:c8:33:f9:48:61:e1:b9:af:d4:97:84:85:ad:
9a:7d:d7:90:8d:2a:a2:e7:d3:7c:28:97:2b:99:82:41:c2:ad:
8d:13:80:8d:ac:0f:9e:e7:68:46:b1:c3:57:3d:4e:e7:7d:88:
e5:0a:04:ff:1b:36:fd:12:8e:8d:13:e2:92:f8:2c:ea:ec:07:
b0:7b:7e:de:07:9d:4f:c3:cc:b5:69:14:e0:81:bb:a9:37:32:
ad:2f:b1:8d:7c:c5:56:2e:18:37:80:5b:e8:53:4f:f1:01:fc:
88:fe:a5:55:fc:b0:8f:c9:77:2e:fe:34:32:8c:05:03:66:7b:
d5:83:32:fb:b5:06:e7:d7:dc:e0:20:92:9f:05:5f:40:3b:8b:
85:a6:5b:74:32:d6:45:3d:ff:62:00:03:e2:ca:0c:2e:71:b3:
6d:2f:91:22:4e:53:b3:b8:d7:af:e0:af:e4:01:23:8a:a6:98:
3f:4e:ca:29:3c:5d:ab:d3:38:ae:07:60:d9:6d:77:3c:ab:57:
99:0a:2d:5a:10:3b:63:5e:e6:47:3a:04:ce:94:a6:bb:19:e7:
41:bb:b5:10:4e:a9:09:e5:74:71:89:9b:f6:63:b0:8f:f5:db:
8f:08:a8:be:af:9f:2b:06:02:c7:cb:4a:4d:3f:96:c5:29:f2:
9e:8c:37:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUEu+Hs3fHhtBRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
NTA5ZDhjMTktNjVmNy00MGRkLTkzZGUtZGQzZDRlYTBiNjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLoQyerwwdEEY0WIrNUbEyLSnagXuQuDLn38
rencqhM/K69jmtaMXvEKrG5boTjGWoCO0abv07Qa5kUiKR+pI+GuYWlC8TrBIpix
o8VjT+zq9D3yucI91DBGk3NXGJ+JYtagyTe2EzyxM8+9Asz/0/2zTD0l8umio+kt
gq8wEQxUfuH41sfIl4lT/avLvpul49q5dVOPwkh/TiZwhcTTnOqpFgZrPt0twTmG
HHab57dEqt8rhbRxMo6tY3dvQjlM6bqdWM/ncHj2NbSfA8EDR4PK2WEGImWkO8P+
EqHf1DyBH+tN7/ZYWgOHxD8FES/M5Kw7O+N3Efib+NVmFrnYZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFENG6BrjDUkeqFsIO2l3pWBK9ufsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQ0ZDBiNDItMWYzMC0z
ZTI3LWE3M2EtNmE2ZDhmMDRjMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MyTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAX8xLGmyDP5SGHhua/Ul4SFrZp915CNKqLn03wolyuZgkHCrY0TgI2s
D57naEaxw1c9Tud9iOUKBP8bNv0Sjo0T4pL4LOrsB7B7ft4HnU/DzLVpFOCBu6k3
Mq0vsY18xVYuGDeAW+hTT/EB/Ij+pVX8sI/Jdy7+NDKMBQNme9WDMvu1BufX3OAg
kp8FX0A7i4WmW3Qy1kU9/2IAA+LKDC5xs20vkSJOU7O416/gr+QBI4qmmD9Oyik8
XavTOK4HYNltdzyrV5kKLVoQO2Ne5kc6BM6UprsZ50G7tRBOqQnldHGJm/ZjsI/1
248IqL6vnysGAsfLSk0/lsUp8p6MNw8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:31 2025 by rpki-client