Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e920d678-f493-3e03-ad55-bd771a6429e0.roa
File: e920d678-f493-3e03-ad55-bd771a6429e0.roa (raw, json)
Hash identifier: 450ULhXwUW3q87aZYUSvxdQyZ44EAWb3IVVfWsFOgkc=
Subject key identifier: 0E:B7:DD:4E:5C:D0:0F:7E:AD:63:59:79:2E:AD:6F:80:D0:7A:CA:C6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F154F7D156EA86867C096B20
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e920d678-f493-3e03-ad55-bd771a6429e0.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 64.196.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:f7:d1:56:ea:86:86:7c:09:6b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=9a1bd063-1bd5-40c4-a5b6-134910f10656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c2:5a:f6:38:ab:f7:32:48:b3:db:7c:f4:be:
19:81:89:65:43:14:2a:6b:31:b8:9a:a0:c0:04:54:
c4:4c:ed:61:4a:e4:b8:f7:a7:71:8b:62:2c:11:27:
bd:15:0c:d1:06:b7:53:04:5d:7d:36:68:72:c2:07:
f7:76:f0:47:e2:b0:15:d0:4d:5c:73:1e:6a:4f:94:
ab:b4:c8:30:48:ef:83:8b:31:8c:e6:e9:83:44:d5:
f7:4f:a8:79:67:db:fb:5f:22:98:1d:0b:27:cd:38:
00:31:1d:c0:d5:b6:8c:e7:c0:f6:17:70:a6:e7:56:
99:cc:33:7d:42:51:59:3c:6e:f4:46:a1:49:c8:ab:
aa:89:ae:66:f2:0f:97:32:fb:cb:93:ec:e3:26:97:
c0:ea:ec:66:ca:4c:24:35:40:74:f4:cb:37:ba:87:
ac:bc:72:4d:06:0f:e1:a6:d8:18:35:b6:4b:c9:e4:
f7:eb:30:59:36:cb:2e:ea:a3:75:85:c6:b2:ee:72:
b4:27:3d:4a:04:5e:83:08:f8:2c:a6:d6:46:1b:6c:
e9:b1:60:d6:38:0a:d5:09:12:8e:29:58:96:33:46:
af:43:ed:81:d9:fe:5c:e4:11:e4:f6:fa:1d:cc:92:
5f:23:4c:88:93:9b:b1:37:01:0c:75:0f:f1:2a:53:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:DD:4E:5C:D0:0F:7E:AD:63:59:79:2E:AD:6F:80:D0:7A:CA:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e920d678-f493-3e03-ad55-bd771a6429e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.196.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:8a:a0:c8:c9:d7:87:26:85:a1:6e:c9:0a:cb:56:1c:4c:f5:
a0:19:eb:f0:49:85:ec:da:74:6d:a7:c0:4f:11:82:f9:22:3b:
fa:85:7c:8e:02:3a:66:67:93:3e:52:aa:d5:26:ed:b7:42:3e:
f6:b7:b5:71:b3:c0:f0:e9:1f:a6:76:af:7b:23:8a:3f:39:67:
49:fb:73:7c:07:d2:8a:56:78:61:fb:4d:98:72:89:c4:c4:41:
46:db:e4:de:51:fa:19:cf:db:48:a2:12:a9:d2:e5:06:b0:ef:
f2:bc:82:d8:3e:dd:e7:df:bc:4b:ff:31:44:f3:8d:3e:af:44:
1f:3e:31:7d:11:ff:c9:f7:a9:7e:8d:b7:ff:b8:a8:dc:96:48:
ba:25:bc:5b:79:32:d7:0e:ee:01:ec:56:27:f9:7f:6a:d4:e3:
20:51:7a:a4:8f:b9:f9:21:df:0e:53:38:f4:c4:31:45:a1:a7:
e8:ae:6b:c6:57:53:40:2e:8c:a6:6e:90:68:a4:a8:b5:cf:13:
7c:85:18:d0:e4:a3:ea:cd:c0:d3:bf:a3:8c:7a:10:82:15:ed:
c0:b5:07:0c:50:c0:60:91:00:94:19:89:01:34:29:cf:1c:bf:
bf:b3:6c:f2:91:e0:f3:fa:48:10:1f:8a:5a:a2:25:af:6c:85:
af:27:78:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPfRVuqGhnwJayAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
OWExYmQwNjMtMWJkNS00MGM0LWE1YjYtMTM0OTEwZjEwNjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sJa9jir9zJIs9t89L4ZgYllQxQqazG4mqDA
BFTETO1hSuS496dxi2IsESe9FQzRBrdTBF19Nmhywgf3dvBH4rAV0E1ccx5qT5Sr
tMgwSO+DizGM5umDRNX3T6h5Z9v7XyKYHQsnzTgAMR3A1baM58D2F3Cm51aZzDN9
QlFZPG70RqFJyKuqia5m8g+XMvvLk+zjJpfA6uxmykwkNUB09Ms3uoesvHJNBg/h
ptgYNbZLyeT36zBZNssu6qN1hcay7nK0Jz1KBF6DCPgsptZGG2zpsWDWOArVCRKO
KViWM0avQ+2B2f5c5BHk9vodzJJfI0yIk5uxNwEMdQ/xKlOFywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA633U5c0A9+rWNZeS6tb4DQesrGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTkyMGQ2NzgtZjQ5My0z
ZTAzLWFkNTUtYmQ3NzFhNjQyOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMTFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWKoMjJ14cmhaFuyQrLVhxM9aAZ6/BJhezadG2nwE8RgvkiO/qFfI4C
OmZnkz5SqtUm7bdCPva3tXGzwPDpH6Z2r3sjij85Z0n7c3wH0opWeGH7TZhyicTE
QUbb5N5R+hnP20iiEqnS5Qaw7/K8gtg+3effvEv/MUTzjT6vRB8+MX0R/8n3qX6N
t/+4qNyWSLolvFt5MtcO7gHsVif5f2rU4yBReqSPufkh3w5TOPTEMUWhp+iua8ZX
U0AujKZukGikqLXPE3yFGNDko+rNwNO/o4x6EIIV7cC1BwxQwGCRAJQZiQE0Kc8c
v7+zbPKR4PP6SBAfilqiJa9sha8neDU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:11 2025 by rpki-client