Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa
File: f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa (raw, json)
Hash identifier: nccQ0cK1wgX5Khfa8VSeA4BvFU3ahx94VjqP4eiI+Gc=
Subject key identifier: 4A:A1:C2:21:62:49:26:4F:FC:F9:04:77:23:B0:33:8D:3C:B4:97:D4
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F155113A05F3A879EA0EFE80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 2607:fec0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:11:3a:05:f3:a8:79:ea:0e:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=34eec177-3c2d-4d32-9d7f-ba21bf8bc844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:e6:f3:04:ec:15:aa:d1:8e:6c:65:ec:c1:
47:41:84:6e:6b:61:12:4b:c0:cd:4f:e6:a5:1e:f5:
2a:4d:e3:cc:c6:23:5c:19:41:f6:75:c1:e9:8c:64:
c8:2e:f3:aa:9c:91:4a:0c:36:a2:e5:d9:81:47:e7:
9b:63:96:97:22:d9:e6:ab:1a:f4:eb:e4:6b:01:1f:
3b:ab:a0:b7:80:07:ac:b8:7d:86:6d:a3:e0:12:7c:
2a:a5:86:aa:05:2e:8a:75:e6:68:e2:5a:6d:5f:f6:
0f:f8:37:38:ad:96:d0:51:38:7a:68:cf:93:4b:b5:
64:95:20:6b:08:95:70:5a:91:d7:e2:7f:0e:32:8d:
8b:93:e5:12:e1:81:2f:64:4f:4b:11:80:71:cd:67:
ce:87:62:c4:8d:c7:ed:e9:48:ad:e8:78:ea:5c:51:
92:b8:5a:ff:df:d0:5a:cd:31:70:55:9a:bd:ca:9e:
3f:61:c8:ea:63:9e:7b:46:0a:75:36:6b:85:31:13:
ad:23:7b:2d:11:8b:66:51:73:1a:ad:f0:f8:ea:a6:
3d:25:47:8e:c3:95:1e:50:7b:9b:0d:ff:24:82:52:
d8:92:fa:6c:63:ca:cf:3c:70:87:4b:62:39:3f:2c:
d1:6d:0a:ac:71:57:58:e5:49:3e:0d:6a:ee:46:cd:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A1:C2:21:62:49:26:4F:FC:F9:04:77:23:B0:33:8D:3C:B4:97:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fec0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:0e:b1:a8:b5:65:eb:15:fc:25:bb:17:d8:6a:cd:28:90:2b:
73:c5:57:6b:bb:51:18:6a:8b:c2:11:db:4d:d1:8f:c5:d7:15:
f1:53:2c:de:83:09:f5:8e:b8:3e:02:2a:bd:02:30:b9:93:3d:
74:47:45:80:61:5b:38:55:7f:46:ff:d5:65:0f:8e:08:ed:d7:
09:74:d5:43:40:c0:3e:b8:f8:20:e6:21:18:6f:97:23:ce:03:
49:57:44:87:49:c1:72:ec:52:c6:8f:0c:76:c2:88:59:71:2d:
f3:24:c3:60:79:c8:06:0c:8f:f2:b3:a4:e9:db:4c:08:8f:e2:
da:2e:56:ee:ad:63:e5:a2:c6:97:ee:d1:c8:81:9b:f1:dd:73:
ba:42:5a:91:28:0a:bd:de:69:a1:52:c6:b7:cb:36:ed:4a:c2:
d3:01:b2:38:60:bb:b2:1d:9b:f6:1a:6b:e0:bf:c8:de:5f:ce:
e5:6f:b3:ad:88:bb:a2:55:13:9e:b6:a3:a1:b6:4b:63:fd:9e:
d3:03:fb:0e:d1:08:2c:10:40:2d:06:33:b9:f9:33:b4:c3:ef:
5c:e1:50:fd:1e:44:e8:46:3a:25:c7:78:79:d0:b9:5a:be:df:
bb:78:da:14:38:97:c2:50:f3:cb:00:94:24:a7:88:39:f8:1d:
7b:85:69:39
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfxVRE6BfOoeeoO/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
MzRlZWMxNzctM2MyZC00ZDMyLTlkN2YtYmEyMWJmOGJjODQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Tm8wTsFarRjmxl7MFHQYRua2ESS8DNT+al
HvUqTePMxiNcGUH2dcHpjGTILvOqnJFKDDai5dmBR+ebY5aXItnmqxr06+RrAR87
q6C3gAesuH2GbaPgEnwqpYaqBS6KdeZo4lptX/YP+Dc4rZbQUTh6aM+TS7VklSBr
CJVwWpHX4n8OMo2Lk+US4YEvZE9LEYBxzWfOh2LEjcft6Uit6HjqXFGSuFr/39Ba
zTFwVZq9yp4/YcjqY557Rgp1NmuFMROtI3stEYtmUXMarfD46qY9JUeOw5UeUHub
Df8kglLYkvpsY8rPPHCHS2I5PyzRbQqscVdY5Uk+DWruRs2WMQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEqhwiFiSSZP/PkEdyOwM408tJfUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjMzMWZlNmYtYmY3MC0z
ZTc1LTlmMjItYzllMDBlODY2YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf+wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB+DrGotWXrFfwluxfYas0okCtzxVdru1EYaovCEdtN0Y/F1xXxUyze
gwn1jrg+Aiq9AjC5kz10R0WAYVs4VX9G/9VlD44I7dcJdNVDQMA+uPgg5iEYb5cj
zgNJV0SHScFy7FLGjwx2wohZcS3zJMNgecgGDI/ys6Tp20wIj+LaLlburWPlosaX
7tHIgZvx3XO6QlqRKAq93mmhUsa3yzbtSsLTAbI4YLuyHZv2Gmvgv8jeX87lb7Ot
iLuiVROetqOhtktj/Z7TA/sO0QgsEEAtBjO5+TO0w+9c4VD9HkToRjolx3h50Lla
vt+7eNoUOJfCUPPLAJQkp4g5+B17hWk5
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:05 2025 by rpki-client