Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa
File: aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa (raw, json)
Hash identifier: wnulTmDkZg3B6qyVienRj3Rvobvdn7/iCxowyPq3vSg=
Subject key identifier: CC:1C:5D:61:85:26:8F:79:E6:09:B4:97:FC:54:4C:01:85:63:77:9F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EE8A34D1B67111143902D7C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 7029
IP address blocks: 173.190.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:34:d1:b6:71:11:14:39:02:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=ab6df59d-de6b-4ef5-9492-5ffbf0bbe430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:fe:40:61:9e:dc:60:a8:91:9f:3e:cd:90:
d1:1a:5c:ca:9c:86:64:43:8d:0a:cc:ff:98:0a:2a:
7b:aa:5c:a5:96:15:08:9e:65:77:a0:5f:81:6b:2d:
b9:51:76:d7:2c:b5:d4:7d:b3:54:16:e5:28:cb:a5:
d9:36:42:11:20:7d:d3:a2:e3:ee:41:c0:41:07:cc:
36:bf:a4:56:66:bd:d5:f0:80:45:33:fd:57:be:94:
4a:0d:76:78:d1:7f:d7:ce:2f:11:a6:59:61:16:e5:
b6:40:73:b7:86:1a:6d:1c:60:30:34:2d:c7:23:1b:
e1:4b:ad:f2:33:89:06:88:ce:5d:64:ba:de:ec:b4:
9b:48:82:d0:c0:93:f4:9d:97:08:0f:aa:72:07:70:
5a:08:4e:21:02:cb:ba:72:08:cb:cb:9d:76:33:7e:
77:40:c4:41:85:a7:c2:6d:5a:5d:60:76:76:73:d3:
fc:a0:79:b5:49:cd:99:b8:44:9f:e7:30:f6:31:90:
ef:05:c5:80:57:4b:b5:49:d4:62:b9:ca:cf:ca:ed:
09:80:e2:29:70:17:3d:84:e7:67:cb:be:e8:9d:ce:
f8:a1:2d:ec:e1:18:4e:ec:ef:d6:71:2e:f6:40:25:
1f:7c:67:97:28:10:40:cc:b5:31:32:f3:77:f6:ae:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1C:5D:61:85:26:8F:79:E6:09:B4:97:FC:54:4C:01:85:63:77:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.190.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:eb:57:f1:b0:98:70:09:21:c1:d8:24:37:e2:09:38:86:2c:
68:33:8e:1c:ef:30:64:59:ff:d5:02:53:56:80:c7:92:b3:d4:
6e:c7:3f:9a:59:fe:08:ee:4a:b0:6b:53:17:33:7d:5b:9b:82:
6f:c1:51:60:61:bc:09:dc:bf:f1:1a:54:74:36:02:30:fa:9f:
0d:55:a2:a6:1f:70:a9:03:57:66:ca:ea:af:94:0a:6e:fd:d0:
2b:04:73:a1:f2:5d:57:fb:2b:ac:e9:0a:2a:49:02:f3:f6:24:
6c:f1:4b:1e:6f:bc:45:0d:96:b3:0f:85:09:b5:19:ae:62:8c:
c3:e4:ad:aa:d9:88:d4:b9:b7:22:4f:69:68:7e:a9:dc:bf:e7:
d9:36:0e:5a:df:b0:c0:1e:5c:2e:fa:2c:0a:ce:dc:9e:68:d9:
5e:da:a5:d5:3d:81:0e:38:13:11:be:b8:5b:0e:65:7c:1a:b9:
87:f5:3d:7e:43:40:1b:50:61:d0:cb:c0:45:00:c3:88:db:27:
29:a7:5a:23:c4:c3:10:d7:89:a2:36:4c:15:8f:87:27:eb:bd:
ca:02:9c:73:8e:96:c5:e2:98:5e:c3:5c:48:84:b0:42:2e:99:
a3:3b:a3:e6:ad:a7:33:07:d4:7c:fd:12:f5:33:7c:66:64:8f:
6f:52:a9:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijTRtnERFDkC18AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk
YWI2ZGY1OWQtZGU2Yi00ZWY1LTk0OTItNWZmYmYwYmJlNDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6v+QGGe3GCokZ8+zZDRGlzKnIZkQ40KzP+Y
Cip7qlyllhUInmV3oF+Bay25UXbXLLXUfbNUFuUoy6XZNkIRIH3TouPuQcBBB8w2
v6RWZr3V8IBFM/1XvpRKDXZ40X/Xzi8RpllhFuW2QHO3hhptHGAwNC3HIxvhS63y
M4kGiM5dZLre7LSbSILQwJP0nZcID6pyB3BaCE4hAsu6cgjLy512M353QMRBhafC
bVpdYHZ2c9P8oHm1Sc2ZuESf5zD2MZDvBcWAV0u1SdRiucrPyu0JgOIpcBc9hOdn
y77onc74oS3s4RhO7O/WcS72QCUffGeXKBBAzLUxMvN39q7ztQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwcXWGFJo955gm0l/xUTAGFY3efMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWVkZmMzNmYtZjlhYi0z
OGJjLThmMWEtMTA4ODMyMzdkZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7rV/GwmHAJIcHYJDfiCTiGLGgzjhzvMGRZ/9UCU1aAx5Kz1G7HP5pZ
/gjuSrBrUxczfVubgm/BUWBhvAncv/EaVHQ2AjD6nw1VoqYfcKkDV2bK6q+UCm79
0CsEc6HyXVf7K6zpCipJAvP2JGzxSx5vvEUNlrMPhQm1Ga5ijMPkrarZiNS5tyJP
aWh+qdy/59k2DlrfsMAeXC76LArO3J5o2V7apdU9gQ44ExG+uFsOZXwauYf1PX5D
QBtQYdDLwEUAw4jbJymnWiPEwxDXiaI2TBWPhyfrvcoCnHOOlsXimF7DXEiEsEIu
maM7o+atpzMH1Hz9EvUzfGZkj29SqVA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:38:48 2025 by rpki-client