Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa
File: 8af95620-011e-3ede-9167-cda01e18c471.roa (raw, json)
Hash identifier: 3zA1L+gITfFTe6uclYhwLnlmgyK7aBOJ/iYp8PTuhxs=
Subject key identifier: 89:A0:F1:AE:37:54:A0:92:5B:BB:8F:B7:7C:E0:0E:BF:7F:17:EC:5B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847FB1A2BD7FE9A48E24F9EFD00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 7029
IP address blocks: 69.40.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2b:d7:fe:9a:48:e2:4f:9e:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=1a048fa4-1730-41f7-abd5-53a0a4899b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:28:e2:ba:db:79:c9:c4:22:3a:cb:a3:cd:2a:
24:14:cf:39:7a:e5:f7:00:18:92:2d:58:d9:d6:28:
3b:ef:50:1f:41:d0:b5:7b:4f:14:08:6e:c7:01:f8:
e4:72:fb:0a:a7:d1:20:7d:bb:9b:83:e3:c4:72:d6:
01:19:10:d1:20:2a:b0:0f:ed:b2:13:84:99:bc:29:
49:61:cb:e8:17:00:77:9e:12:d8:e3:9e:2e:e2:f0:
05:69:22:29:89:d1:b7:30:f3:e5:5e:60:0b:67:fa:
b4:40:e1:e6:17:b4:3c:b3:53:a0:75:66:e3:b4:44:
88:0c:a4:64:ad:b5:94:15:02:3a:5d:e2:67:a1:1d:
d3:e6:88:41:e6:e4:39:89:05:2a:5f:97:e5:8e:1b:
6c:aa:94:ec:58:86:07:f1:39:dd:8a:48:72:31:00:
b5:26:d2:04:20:be:8a:1c:de:0f:aa:0f:98:44:04:
9f:72:16:ce:3b:b4:43:28:d0:f6:fb:29:8f:4c:60:
60:74:8f:9e:55:a9:f2:7d:38:05:37:2e:dc:54:e4:
55:6a:6b:ec:d7:ad:3b:18:fc:f5:51:e8:21:7e:ac:
c4:1d:67:05:55:c8:c0:01:29:fb:8c:bd:92:1b:bc:
75:76:82:29:12:80:1a:87:2d:74:19:2d:3a:44:e8:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:F1:AE:37:54:A0:92:5B:BB:8F:B7:7C:E0:0E:BF:7F:17:EC:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af95620-011e-3ede-9167-cda01e18c471.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.40.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:c3:33:4e:01:57:87:79:7c:8e:69:d4:03:d5:b2:65:f5:bc:
7a:50:a5:34:85:64:b5:2e:f8:c9:60:23:ea:45:e7:1b:d8:5d:
de:c6:f4:dc:e7:02:1a:ed:8e:c9:dc:f1:64:1b:48:6c:03:15:
55:4a:a5:f1:24:b1:cd:d4:37:f5:e3:65:72:ca:63:2b:0a:48:
8a:61:0d:cb:f6:79:5a:1f:8c:cf:fd:46:42:fa:9e:a0:3f:d9:
6a:c6:33:f8:4f:63:5c:43:6b:33:96:8c:fa:80:d5:cf:ec:0d:
23:7a:21:6e:e8:d9:dd:fa:f2:f0:d5:c6:02:ac:f7:44:d4:af:
84:71:95:cd:cb:21:33:bd:e6:2e:40:15:2d:6f:2e:de:79:15:
d3:06:d0:eb:4b:14:7f:af:cb:65:73:24:fe:63:09:66:a9:3b:
5e:f9:46:9f:8b:e8:1a:e9:3f:04:bf:3c:fb:1d:21:40:46:cd:
29:22:95:a5:5b:32:d3:94:f9:80:1f:48:26:2f:f8:a2:cb:0d:
32:91:e4:bc:5c:d7:fe:6e:af:57:53:75:49:8f:96:83:3c:c2:
0b:43:ab:a5:be:b2:18:1d:a0:e3:65:b4:87:b7:1a:08:05:f0:
01:8b:66:01:4a:49:ae:69:0a:d0:f7:e5:86:c1:d3:cd:ec:28:
28:6c:c4:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7GivX/ppI4k+e/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
MWEwNDhmYTQtMTczMC00MWY3LWFiZDUtNTNhMGE0ODk5YjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Sjiutt5ycQiOsujzSokFM85euX3ABiSLVjZ
1ig771AfQdC1e08UCG7HAfjkcvsKp9Egfbubg+PEctYBGRDRICqwD+2yE4SZvClJ
YcvoFwB3nhLY454u4vAFaSIpidG3MPPlXmALZ/q0QOHmF7Q8s1OgdWbjtESIDKRk
rbWUFQI6XeJnoR3T5ohB5uQ5iQUqX5fljhtsqpTsWIYH8TndikhyMQC1JtIEIL6K
HN4Pqg+YRASfchbOO7RDKND2+ymPTGBgdI+eVanyfTgFNy7cVORVamvs1607GPz1
UeghfqzEHWcFVcjAASn7jL2SG7x1doIpEoAahy10GS06ROjf8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImg8a43VKCSW7uPt3zgDr9/F+xbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGFmOTU2MjAtMDExZS0z
ZWRlLTkxNjctY2RhMDFlMThjNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRShYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3DM04BV4d5fI5p1APVsmX1vHpQpTSFZLUu+MlgI+pF5xvYXd7G9Nzn
Ahrtjsnc8WQbSGwDFVVKpfEksc3UN/XjZXLKYysKSIphDcv2eVofjM/9RkL6nqA/
2WrGM/hPY1xDazOWjPqA1c/sDSN6IW7o2d368vDVxgKs90TUr4Rxlc3LITO95i5A
FS1vLt55FdMG0OtLFH+vy2VzJP5jCWapO175Rp+L6BrpPwS/PPsdIUBGzSkilaVb
MtOU+YAfSCYv+KLLDTKR5Lxc1/5ur1dTdUmPloM8wgtDq6W+shgdoONltIe3GggF
8AGLZgFKSa5pCtD35YbB083sKChsxHU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:44:02 2025 by rpki-client