Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa
File: a15dd1fc-a5e6-3111-ac70-b3161353326b.roa (raw, json)
Hash identifier: vQMXnx0d7nDvs11S+On06jM0nmRuhL6Qnl2XRG0Um80=
Subject key identifier: C4:42:92:70:9D:0A:33:6B:F6:B1:BA:54:50:FD:45:E5:89:9E:84:82
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584800AFC71C21CC4033AF108D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 7029
IP address blocks: 67.141.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c7:1c:21:cc:40:33:af:10:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=99b5a3b9-546d-49db-9e96-f988cd8c175a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ef:96:d7:99:71:cc:ad:e8:17:8f:da:c6:23:
cb:91:81:24:4c:3f:96:fc:88:e4:12:15:ff:d6:50:
8b:1c:a7:2e:bc:8d:1e:30:64:d5:ec:4f:fc:76:97:
21:b5:3c:8f:f8:c9:5d:32:8a:0f:87:65:63:ac:53:
66:f0:4d:19:c7:ce:41:71:e5:6a:9d:6a:6d:4e:94:
0a:e4:7b:e9:06:8c:5d:aa:ca:7f:8b:e8:56:f1:35:
a5:37:a8:dd:8b:9d:4f:8b:c9:85:20:87:6f:40:66:
fa:fc:69:f2:a0:ad:0f:98:f8:26:e2:e9:a8:a8:52:
c3:7f:d8:10:9b:62:ee:86:84:5f:d4:c4:2c:cf:85:
9d:e1:43:e0:a4:53:88:79:1b:8b:19:93:0b:f7:2a:
cc:de:ad:76:0f:af:03:25:a5:6b:e9:d7:5c:08:41:
37:4f:8b:5b:1b:40:2c:81:3f:97:96:7d:6f:16:b0:
4a:63:27:c5:d7:51:b0:d0:86:8d:48:8b:67:09:b4:
f9:07:41:7f:e1:28:6c:f7:ef:63:11:11:17:ad:af:
7c:06:ad:e6:fc:0c:6e:c0:ba:e7:6c:df:33:e8:16:
c3:5a:32:03:c4:33:a8:7b:0f:63:05:7a:cd:a3:00:
9d:a0:87:07:1b:ee:9f:7d:88:63:13:04:82:d6:3a:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:42:92:70:9D:0A:33:6B:F6:B1:BA:54:50:FD:45:E5:89:9E:84:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.141.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:4b:f3:4b:ca:46:57:b3:76:d9:11:85:85:ec:03:e1:e1:ef:
30:4a:eb:3a:ec:09:56:91:b9:7e:10:61:b6:d4:28:20:ef:13:
c9:46:22:49:ec:c4:3d:db:b1:b8:01:71:ec:e4:32:33:17:90:
21:85:68:8f:21:8d:a3:31:fc:63:e6:0c:f9:a1:18:11:cd:29:
22:e0:fb:c7:85:a3:33:f2:09:23:e3:3b:88:8a:5f:8a:d8:f4:
ba:2d:41:ae:2f:d8:32:2f:30:0f:64:37:51:87:d0:83:29:68:
da:60:9a:a9:e5:33:0d:4b:bd:38:e8:10:1d:86:d4:a4:c8:18:
13:79:43:51:f7:47:de:16:a3:6a:7e:4f:75:54:e0:07:78:51:
00:f0:7b:36:da:06:e3:93:5c:d5:84:c9:ad:2a:47:89:c9:1f:
28:47:ce:c0:77:16:dc:f7:ea:06:7d:66:15:d8:31:7a:60:30:
e4:3c:51:a7:37:b8:46:31:87:62:b1:c5:e5:05:94:be:d1:8c:
1e:28:17:54:13:bc:c1:9a:db:d3:3c:99:b7:59:3a:99:35:17:
f6:0a:d7:ef:64:15:40:c2:1d:ad:6c:8e:d4:94:71:e9:12:fc:
7b:d2:2e:3a:bd:32:aa:1d:13:25:08:91:5f:4b:3e:2a:1d:7c:
a9:de:86:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr8ccIcxAM68QjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
OTliNWEzYjktNTQ2ZC00OWRiLTllOTYtZjk4OGNkOGMxNzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg++W15lxzK3oF4/axiPLkYEkTD+W/IjkEhX/
1lCLHKcuvI0eMGTV7E/8dpchtTyP+MldMooPh2VjrFNm8E0Zx85BceVqnWptTpQK
5HvpBoxdqsp/i+hW8TWlN6jdi51Pi8mFIIdvQGb6/GnyoK0PmPgm4umoqFLDf9gQ
m2LuhoRf1MQsz4Wd4UPgpFOIeRuLGZML9yrM3q12D68DJaVr6ddcCEE3T4tbG0As
gT+Xln1vFrBKYyfF11Gw0IaNSItnCbT5B0F/4Shs9+9jEREXra98Bq3m/AxuwLrn
bN8z6BbDWjIDxDOoew9jBXrNowCdoIcHG+6ffYhjEwSC1jpYPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRCknCdCjNr9rG6VFD9ReWJnoSCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE1ZGQxZmMtYTVlNi0z
MTExLWFjNzAtYjMxNjEzNTMzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ436MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5L80vKRlezdtkRhYXsA+Hh7zBK6zrsCVaRuX4QYbbUKCDvE8lGIkns
xD3bsbgBcezkMjMXkCGFaI8hjaMx/GPmDPmhGBHNKSLg+8eFozPyCSPjO4iKX4rY
9LotQa4v2DIvMA9kN1GH0IMpaNpgmqnlMw1LvTjoEB2G1KTIGBN5Q1H3R94Wo2p+
T3VU4Ad4UQDwezbaBuOTXNWEya0qR4nJHyhHzsB3Ftz36gZ9ZhXYMXpgMOQ8Uac3
uEYxh2KxxeUFlL7RjB4oF1QTvMGa29M8mbdZOpk1F/YK1+9kFUDCHa1sjtSUcekS
/HvSLjq9MqodEyUIkV9LPiodfKnehpQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:51:21 2025 by rpki-client