Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdfaef2d-5be9-3f6e-b693-1c0c640702a2.roa
File: cdfaef2d-5be9-3f6e-b693-1c0c640702a2.roa (raw, json)
Hash identifier: ltCMQt+2i3/Gw4bJKDtOS/W79Iryc5ZheQZeBJOad8g=
Subject key identifier: 36:B2:EF:89:7C:26:9E:99:B3:00:FB:BA:33:77:61:5D:68:1B:01:A5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847ED24E04FFB5E423323AE2A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdfaef2d-5be9-3f6e-b693-1c0c640702a2.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 397889
IP address blocks: 66.19.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:e0:4f:fb:5e:42:33:23:ae:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=c676d015-bcdc-4e58-adc7-35d24e64d64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ff:eb:b0:70:2d:1f:5e:07:7f:f7:7b:7b:46:
c9:62:fb:99:d3:c8:1a:39:0d:87:bd:49:04:50:78:
14:24:1f:7e:b6:83:fa:6b:db:84:3c:f1:e4:fe:98:
e1:b3:74:94:e0:a1:24:05:04:9c:0b:98:e9:18:4e:
36:ec:31:db:b1:46:ca:e9:74:a7:6c:e3:c5:ed:c3:
78:23:60:64:99:3e:05:54:df:0e:53:72:41:2e:2a:
bc:99:68:ac:8a:02:da:18:31:0f:49:58:57:33:20:
06:1a:75:71:cf:87:41:07:a9:30:54:a2:28:52:33:
57:d2:8a:08:aa:c8:e9:a3:f1:72:2e:85:2a:47:c9:
d5:1e:62:42:f9:fd:33:3b:6f:c3:09:5a:28:ce:d3:
4c:aa:90:3c:fc:8a:b8:c0:0c:0a:34:6e:a8:1d:4c:
b3:95:79:4e:24:a8:9b:36:b4:f7:cf:3c:e0:2a:40:
7b:ab:be:35:60:bd:22:d5:da:a3:da:b5:80:7e:81:
e9:8c:07:95:6c:e4:b5:62:45:8e:97:c4:86:30:3a:
a9:0e:60:07:b1:90:c7:26:cc:78:bd:58:06:59:3c:
5e:bd:50:d8:97:5b:ee:47:9f:eb:b5:f4:e0:4a:a5:
4b:43:0d:25:42:3c:67:fb:e5:d5:32:ed:5e:7a:c2:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B2:EF:89:7C:26:9E:99:B3:00:FB:BA:33:77:61:5D:68:1B:01:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdfaef2d-5be9-3f6e-b693-1c0c640702a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.19.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:dc:bb:b3:f5:a0:d0:22:a0:46:50:59:31:5e:8d:db:f5:8c:
af:14:01:75:f7:40:7a:ba:95:2f:a2:95:8a:60:ae:38:ad:b6:
d4:6a:c8:e3:ce:66:dc:52:78:6b:22:ab:6a:52:eb:ae:8d:ce:
30:fd:14:dd:08:3b:9d:51:83:48:e1:7c:66:12:72:95:46:cb:
f5:f5:4a:23:f9:b9:69:cd:54:50:d0:bc:f9:5c:3a:47:fb:ce:
fb:35:b8:d1:ed:d0:c7:fe:9b:46:7e:e6:14:78:11:2d:95:49:
30:51:17:b4:75:b1:a9:9c:e6:ea:a5:e6:80:55:dd:b7:86:84:
f9:82:2b:24:49:95:4c:77:f1:a6:af:c5:e9:92:75:a0:8b:21:
21:a2:8f:a6:74:14:f4:11:c8:83:b4:a9:d0:a0:91:de:1d:67:
fd:d0:dc:a9:4b:4e:eb:4c:68:14:e5:24:d3:07:ee:f0:28:8f:
df:56:f2:b4:b1:be:cb:eb:09:2c:47:ad:ce:5d:38:54:2b:98:
d7:cd:43:0b:dc:75:ad:b1:2e:ac:9d:9e:2b:bf:1d:36:e2:3b:
07:24:13:24:4d:cb:93:3e:8f:59:7a:7c:df:01:c2:88:9e:49:
25:99:e8:af:c8:c0:ea:d6:e6:d4:2e:b4:57:65:b5:7d:9d:48:
69:a2:42:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJOBP+15CMyOuKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
YzY3NmQwMTUtYmNkYy00ZTU4LWFkYzctMzVkMjRlNjRkNjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf/rsHAtH14Hf/d7e0bJYvuZ08gaOQ2HvUkE
UHgUJB9+toP6a9uEPPHk/pjhs3SU4KEkBQScC5jpGE427DHbsUbK6XSnbOPF7cN4
I2BkmT4FVN8OU3JBLiq8mWisigLaGDEPSVhXMyAGGnVxz4dBB6kwVKIoUjNX0ooI
qsjpo/FyLoUqR8nVHmJC+f0zO2/DCVooztNMqpA8/Iq4wAwKNG6oHUyzlXlOJKib
NrT3zzzgKkB7q741YL0i1dqj2rWAfoHpjAeVbOS1YkWOl8SGMDqpDmAHsZDHJsx4
vVgGWTxevVDYl1vuR5/rtfTgSqVLQw0lQjxn++XVMu1eesL+zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDay74l8Jp6ZswD7ujN3YV1oGwGlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2RmYWVmMmQtNWJlOS0z
ZjZlLWI2OTMtMWMwYzY0MDcwMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhPVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADncu7P1oNAioEZQWTFejdv1jK8UAXX3QHq6lS+ilYpgrjitttRqyOPO
ZtxSeGsiq2pS666NzjD9FN0IO51Rg0jhfGYScpVGy/X1SiP5uWnNVFDQvPlcOkf7
zvs1uNHt0Mf+m0Z+5hR4ES2VSTBRF7R1samc5uql5oBV3beGhPmCKyRJlUx38aav
xemSdaCLISGij6Z0FPQRyIO0qdCgkd4dZ/3Q3KlLTutMaBTlJNMH7vAoj99W8rSx
vsvrCSxHrc5dOFQrmNfNQwvcda2xLqydniu/HTbiOwckEyRNy5M+j1l6fN8Bwoie
SSWZ6K/IwOrW5tQutFdltX2dSGmiQjU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:30 2025 by rpki-client