Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa
File: de52a646-8150-3baa-964a-af38db1002f1.roa (raw, json)
Hash identifier: 2rUFcRZ9425w4Cr5INdCbsKwXmdMuYUUMYlg3E6+fc8=
Subject key identifier: 05:04:CD:D8:A2:CD:43:00:6C:29:59:C4:9B:47:33:E6:D8:AF:E9:D5
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848775096C5CF7E5319CB0F4A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa
Signing time: Tue 07 Jan 2025 13:50:27 +0000
ROA not before: Tue 07 Jan 2025 13:50:27 +0000
ROA not after: Mon 07 Apr 2025 12:50:27 +0000
asID: 7029
IP address blocks: 75.117.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:50:96:c5:cf:7e:53:19:cb:0f:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 7 13:50:27 2025 GMT
Not After : Apr 7 12:50:27 2025 GMT
Subject: CN=b4af97ec-8ec7-485f-8c68-13abd497d79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:35:26:48:40:20:a0:a4:71:a7:8f:e0:09:
a8:9e:0d:b0:9a:fe:15:68:1a:71:fa:1a:67:e8:fa:
d9:26:e8:36:cf:7a:9f:03:6d:4c:60:6f:f5:f2:65:
8d:89:14:04:bd:73:77:2c:2e:81:71:9f:3d:71:79:
6b:55:e7:cf:81:80:d5:03:56:f3:8b:a3:9a:b5:bf:
6d:45:17:91:e5:0a:bd:26:3d:31:fe:18:05:d9:56:
7e:c4:17:35:35:f7:ca:13:5b:40:7d:fb:27:37:28:
3c:5e:20:ef:6c:7b:68:4f:8c:e4:91:24:23:c8:bb:
f5:d2:9e:9f:1f:57:58:47:c3:9b:44:ed:73:52:17:
96:ee:a4:a7:6b:5f:48:33:7b:f8:c9:0a:7c:2c:b0:
8b:b2:87:c7:4c:67:3b:19:46:ba:ff:19:74:2d:5d:
52:77:c3:c2:17:02:e7:2a:22:31:a5:18:9e:54:c6:
b1:5a:9c:7f:a0:7b:b9:21:3d:b9:0b:b2:5d:ab:b6:
3b:43:1f:47:44:e6:c0:b8:63:70:11:95:5d:c9:40:
05:ff:12:0a:c0:23:91:21:8e:a4:a3:f8:b7:6c:d0:
4b:43:3c:73:ee:d7:d1:f3:08:cd:67:87:de:bd:a2:
de:a7:bb:d5:bc:23:56:c0:6e:c9:be:4d:3d:97:ce:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:04:CD:D8:A2:CD:43:00:6C:29:59:C4:9B:47:33:E6:D8:AF:E9:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.117.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:3a:39:b7:d7:56:9e:62:3d:88:ba:b7:36:7e:11:34:33:27:
e9:49:83:de:ff:8f:b6:e4:f7:a0:c8:89:62:c2:bc:a7:3f:21:
53:ee:00:20:20:a1:0e:a6:19:cb:52:77:13:40:80:06:7b:5a:
b5:fd:0f:4e:f8:83:36:ad:db:d8:ca:51:b3:94:38:d5:8f:ab:
21:98:0e:c2:98:78:bf:e3:ca:f8:ea:13:62:22:93:61:90:3a:
f1:04:54:50:28:6b:93:9d:79:6c:20:bd:4e:b5:0f:30:e2:27:
c9:d0:ad:9e:9c:85:71:e1:26:e2:e5:fc:83:2e:76:7d:c3:52:
e1:d6:02:ce:82:01:c2:ed:f2:23:7f:86:11:ee:9a:4f:39:33:
bf:8e:58:9a:db:f1:2a:b6:e6:b1:c0:05:26:29:ad:4f:80:df:
74:8d:6f:ff:25:f9:fe:63:8a:ad:38:9d:45:d3:9d:8e:a4:1f:
d6:d1:39:3a:c7:8d:48:1e:4c:55:e6:6c:56:ab:23:d4:8f:81:
f2:f1:91:a2:0d:80:82:d3:42:36:91:55:8f:9d:cd:b8:be:90:
49:97:f1:59:4e:89:be:e4:b2:c8:6f:86:b1:d7:66:be:29:1d:
64:ea:fe:de:28:1c:60:ac:d8:29:84:f5:55:dc:5f:29:dc:22:
da:c1:e5:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3UJbFz35TGcsPSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDEwNzEzNTAyN1oXDTI1MDQwNzEyNTAyN1owLzEtMCsGA1UEAxMk
YjRhZjk3ZWMtOGVjNy00ODVmLThjNjgtMTNhYmQ0OTdkNzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOw1JkhAIKCkcaeP4Among2wmv4VaBpx+hpn
6PrZJug2z3qfA21MYG/18mWNiRQEvXN3LC6BcZ89cXlrVefPgYDVA1bzi6Oatb9t
RReR5Qq9Jj0x/hgF2VZ+xBc1NffKE1tAffsnNyg8XiDvbHtoT4zkkSQjyLv10p6f
H1dYR8ObRO1zUheW7qSna19IM3v4yQp8LLCLsofHTGc7GUa6/xl0LV1Sd8PCFwLn
KiIxpRieVMaxWpx/oHu5IT25C7Jdq7Y7Qx9HRObAuGNwEZVdyUAF/xIKwCORIY6k
o/i3bNBLQzxz7tfR8wjNZ4fevaLep7vVvCNWwG7Jvk09l84qoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUEzdiizUMAbClZxJtHM+bYr+nVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGU1MmE2NDYtODE1MC0z
YmFhLTk2NGEtYWYzOGRiMTAwMmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES3WwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAII6ObfXVp5iPYi6tzZ+ETQzJ+lJg97/j7bk96DIiWLCvKc/IVPuACAg
oQ6mGctSdxNAgAZ7WrX9D074gzat29jKUbOUONWPqyGYDsKYeL/jyvjqE2Iik2GQ
OvEEVFAoa5OdeWwgvU61DzDiJ8nQrZ6chXHhJuLl/IMudn3DUuHWAs6CAcLt8iN/
hhHumk85M7+OWJrb8Sq25rHABSYprU+A33SNb/8l+f5jiq04nUXTnY6kH9bROTrH
jUgeTFXmbFarI9SPgfLxkaINgILTQjaRVY+dzbi+kEmX8VlOib7ksshvhrHXZr4p
HWTq/t4oHGCs2CmE9VXcXyncItrB5Y4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:15 2025 by rpki-client