Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ed43167-3d55-396e-b7f5-63a15906bbb8.roa
File: 8ed43167-3d55-396e-b7f5-63a15906bbb8.roa (raw, json)
Hash identifier: b6Ki20zsJ+4oar6bHsrDG5F+EjjxSFOyhGwY0WQGXwA=
Subject key identifier: A3:A5:D3:24:DA:A7:8B:74:FA:93:B3:99:0A:6D:AA:A9:DC:A6:B9:92
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858483CB5745C39A4A1CBA88B0B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ed43167-3d55-396e-b7f5-63a15906bbb8.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 40.131.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:74:5c:39:a4:a1:cb:a8:8b:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=d3e9e916-b1ad-42de-81d3-09210b0f82dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b6:ea:e1:59:dd:a4:4c:81:22:03:e2:99:24:
bb:5b:16:70:64:9b:25:42:f3:ba:0a:ee:30:8c:0a:
84:7b:b3:92:82:81:37:aa:47:10:2e:8f:c6:6c:dd:
48:61:b1:3f:c7:5a:be:91:5d:02:77:75:06:11:be:
7e:65:5f:42:08:23:73:e9:a7:31:98:a7:d5:3c:92:
f5:3c:8a:ea:d7:0e:e7:40:63:9e:cb:64:81:fa:32:
21:0b:b1:dc:67:9f:f7:c2:6b:a4:5f:43:9d:0d:e1:
0d:fd:06:44:a7:3b:0a:59:64:23:0e:12:63:35:bf:
ea:74:3f:85:23:1f:41:80:2f:2f:bc:2f:f8:85:9c:
31:82:20:fa:5b:aa:48:3f:71:b0:18:da:0e:87:a7:
4f:9f:8a:01:3f:31:74:07:a9:f5:e4:ca:5e:73:79:
a7:0e:88:f1:b4:ef:9b:c5:a5:05:d5:c2:3a:f0:a0:
f1:c5:5a:a4:1e:1b:6a:2d:e7:35:30:ad:e2:c2:47:
cb:29:8f:83:5b:4a:60:e7:9b:0b:e6:6d:60:07:4c:
16:46:2b:2c:cb:08:62:4a:43:53:5c:29:83:33:b1:
f3:98:1f:16:9c:df:1c:f4:12:ae:61:13:88:3e:fa:
ab:fe:f7:03:3b:41:76:ff:07:8b:a1:b0:ba:57:69:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:D3:24:DA:A7:8B:74:FA:93:B3:99:0A:6D:AA:A9:DC:A6:B9:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ed43167-3d55-396e-b7f5-63a15906bbb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.131.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:e7:c2:9c:7f:69:6a:16:60:21:c0:ef:71:43:55:36:d1:d5:
cc:c0:15:4e:15:d9:37:39:12:be:36:d2:19:fc:aa:23:1c:21:
62:4a:3c:39:e3:06:7a:fb:36:7c:72:ea:41:3e:ff:f5:a6:09:
75:57:24:52:5c:ec:9a:57:61:bb:5b:4a:ff:14:e6:57:36:4c:
65:bb:df:0c:84:c1:a3:e3:82:76:f8:9c:01:49:e4:75:0f:6e:
1c:18:4e:63:8b:60:58:df:13:49:05:5a:2b:0b:19:d0:21:87:
ee:f1:83:e9:40:66:74:83:e3:ab:12:0d:a4:cf:cd:86:fe:9e:
d9:7f:bc:ed:4a:e2:d2:1e:13:ea:0f:5e:45:d7:ff:15:a0:47:
0c:a5:d4:28:1b:7e:a2:cd:a5:81:dc:2a:3f:82:ef:f7:2e:6b:
1a:b8:eb:fb:2b:75:82:8c:c6:9c:77:8d:01:40:22:dd:18:9e:
65:ae:cf:54:19:6d:cc:39:3d:d8:fd:56:51:37:44:27:78:8c:
81:c9:1a:a2:45:c1:6e:de:59:df:b3:2b:07:04:bc:a3:93:92:
a4:34:6f:08:1a:f8:1c:59:a5:7f:54:b3:56:e8:42:f3:39:6b:
c1:56:fc:dc:02:e6:40:9b:b5:93:60:7d:12:1b:a6:d1:37:d0:
bd:7f:35:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXRcOaShy6iLCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZDNlOWU5MTYtYjFhZC00MmRlLTgxZDMtMDkyMTBiMGY4MmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrbq4VndpEyBIgPimSS7WxZwZJslQvO6Cu4w
jAqEe7OSgoE3qkcQLo/GbN1IYbE/x1q+kV0Cd3UGEb5+ZV9CCCNz6acxmKfVPJL1
PIrq1w7nQGOey2SB+jIhC7HcZ5/3wmukX0OdDeEN/QZEpzsKWWQjDhJjNb/qdD+F
Ix9BgC8vvC/4hZwxgiD6W6pIP3GwGNoOh6dPn4oBPzF0B6n15Mpec3mnDojxtO+b
xaUF1cI68KDxxVqkHhtqLec1MK3iwkfLKY+DW0pg55sL5m1gB0wWRissywhiSkNT
XCmDM7HzmB8WnN8c9BKuYROIPvqr/vcDO0F2/weLobC6V2nMMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOl0yTap4t0+pOzmQptqqncprmSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGVkNDMxNjctM2Q1NS0z
OTZlLWI3ZjUtNjNhMTU5MDZiYmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPnwpx/aWoWYCHA73FDVTbR1czAFU4V2Tc5Er420hn8qiMcIWJKPDnj
Bnr7Nnxy6kE+//WmCXVXJFJc7JpXYbtbSv8U5lc2TGW73wyEwaPjgnb4nAFJ5HUP
bhwYTmOLYFjfE0kFWisLGdAhh+7xg+lAZnSD46sSDaTPzYb+ntl/vO1K4tIeE+oP
XkXX/xWgRwyl1CgbfqLNpYHcKj+C7/cuaxq46/srdYKMxpx3jQFAIt0YnmWuz1QZ
bcw5Pdj9VlE3RCd4jIHJGqJFwW7eWd+zKwcEvKOTkqQ0bwga+BxZpX9Us1boQvM5
a8FW/NwC5kCbtZNgfRIbptE30L1/NQ8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:49:40 2025 by rpki-client