Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7e7f63b-ecb4-3a72-aaa7-897d0575830d.roa
File: a7e7f63b-ecb4-3a72-aaa7-897d0575830d.roa (raw, json)
Hash identifier: q0Q75yEXlCRO0g6KxeeEfZa/5MTIvePTE20sQ2xDQ4o=
Subject key identifier: 0A:76:34:05:A5:D1:B8:FD:E4:62:1C:29:71:28:87:22:43:6E:1F:A3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488C45D0ECDC45953ACC4426C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7e7f63b-ecb4-3a72-aaa7-897d0575830d.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 27338
IP address blocks: 74.8.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:d0:ec:dc:45:95:3a:cc:44:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=944067fb-a968-4dd1-8898-e4817b0c7962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:a8:d3:21:35:e6:38:ac:03:25:1f:57:97:
e0:ba:64:8d:11:be:3b:5c:57:1a:49:64:35:4f:4c:
e4:a2:99:3c:2f:22:f1:c8:b5:6d:cd:26:db:4e:03:
28:21:07:30:2c:53:4c:67:3a:03:74:29:10:ce:60:
62:60:78:f1:86:43:be:14:97:54:4c:f8:01:40:b6:
78:f9:f4:9d:40:86:cc:d5:a7:32:45:0b:66:cd:a1:
3a:d8:71:9f:9e:1e:09:d3:8b:4e:b5:e6:cd:55:49:
fb:ba:e7:2f:a9:d7:6a:b8:e0:63:5a:bb:90:59:19:
2c:bd:52:fb:80:36:18:45:e6:aa:b7:22:17:61:d7:
8a:03:46:d6:28:e8:da:2b:d3:01:cd:c7:c0:8a:b5:
45:29:9d:dd:c1:c8:89:b6:3b:0c:cc:de:cd:78:f8:
11:49:5e:05:ec:8f:2c:6b:ff:88:ed:5a:4e:99:d5:
e1:7b:58:a4:01:ac:f8:cd:17:ec:8e:fa:f8:4d:02:
70:97:03:60:18:b0:e6:9b:36:90:4d:d7:7a:47:c5:
b4:1d:e1:cf:fc:57:05:ed:fc:3a:bb:44:2a:3f:34:
04:ca:6d:87:72:8a:73:27:31:a9:b1:3b:21:ed:de:
13:40:13:07:0b:a8:64:84:75:1c:cc:f5:af:12:30:
47:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:76:34:05:A5:D1:B8:FD:E4:62:1C:29:71:28:87:22:43:6E:1F:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7e7f63b-ecb4-3a72-aaa7-897d0575830d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.8.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:71:ba:29:4a:38:9b:6b:56:b0:f6:ab:de:47:f9:22:fe:26:
fb:72:ae:ba:81:1a:fd:7b:54:d6:50:25:64:49:c8:89:1f:47:
8f:70:ba:3b:8a:60:b3:a5:30:51:29:9d:86:e6:e4:8e:bf:59:
8f:e0:0f:bb:a7:a0:38:79:d5:81:93:eb:b7:e8:8a:a0:50:92:
e6:19:ef:e3:a8:89:69:10:6b:ea:8f:4a:1a:5e:af:02:61:59:
d5:fe:fd:d0:b1:91:c9:a2:47:6a:cf:99:d4:b1:e6:3c:de:59:
e9:0b:cc:1b:5d:3b:6c:8a:92:2c:69:e1:61:81:0d:f7:25:02:
8a:c1:ed:99:e2:d5:bb:c4:c6:31:7a:01:ce:e7:30:98:d5:7f:
35:9c:f2:d3:f6:cd:db:10:93:48:2f:b2:80:92:db:1c:4e:08:
92:7e:d3:5b:f1:ca:ed:79:3a:a7:18:fd:8a:77:a8:e5:ad:da:
b9:1e:3d:29:d2:31:86:55:ff:66:d1:ad:27:df:83:95:a3:3a:
72:11:1d:09:32:ce:e4:12:87:5f:27:10:08:7c:a6:73:af:de:
dd:12:29:f7:41:b6:a4:00:72:84:9f:cd:63:31:02:a2:f5:34:
d8:e4:9f:ec:10:cf:a6:8e:92:3c:76:88:b2:30:0d:d9:52:cd:
51:88:8f:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiMRdDs3EWVOsxEJsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDExNTAyMDAzOVoXDTI1MDQxNTAxMDAzOVowLzEtMCsGA1UEAxMk
OTQ0MDY3ZmItYTk2OC00ZGQxLTg4OTgtZTQ4MTdiMGM3OTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhImo0yE15jisAyUfV5fgumSNEb47XFcaSWQ1
T0zkopk8LyLxyLVtzSbbTgMoIQcwLFNMZzoDdCkQzmBiYHjxhkO+FJdUTPgBQLZ4
+fSdQIbM1acyRQtmzaE62HGfnh4J04tOtebNVUn7uucvqddquOBjWruQWRksvVL7
gDYYReaqtyIXYdeKA0bWKOjaK9MBzcfAirVFKZ3dwciJtjsMzN7NePgRSV4F7I8s
a/+I7VpOmdXhe1ikAaz4zRfsjvr4TQJwlwNgGLDmmzaQTdd6R8W0HeHP/FcF7fw6
u0QqPzQEym2HcopzJzGpsTsh7d4TQBMHC6hkhHUczPWvEjBHFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAp2NAWl0bj95GIcKXEohyJDbh+jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTdlN2Y2M2ItZWNiNC0z
YTcyLWFhYTctODk3ZDA1NzU4MzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgj+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRxuilKOJtrVrD2q95H+SL+JvtyrrqBGv17VNZQJWRJyIkfR49wujuK
YLOlMFEpnYbm5I6/WY/gD7unoDh51YGT67foiqBQkuYZ7+OoiWkQa+qPShperwJh
WdX+/dCxkcmiR2rPmdSx5jzeWekLzBtdO2yKkixp4WGBDfclAorB7Zni1bvExjF6
Ac7nMJjVfzWc8tP2zdsQk0gvsoCS2xxOCJJ+01vxyu15OqcY/Yp3qOWt2rkePSnS
MYZV/2bRrSffg5WjOnIRHQkyzuQSh18nEAh8pnOv3t0SKfdBtqQAcoSfzWMxAqL1
NNjkn+wQz6aOkjx2iLIwDdlSzVGIj0g=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:12 2025 by rpki-client