Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa
File: f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa (raw, json)
Hash identifier: KJFNlhKJQ5emgH7cB62AdNGwtuFxwsi1c+qMOwrTqAc=
Subject key identifier: 33:7E:72:54:70:33:68:C3:59:DE:CB:9C:73:13:52:5F:B9:96:28:CC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847EFEF862D5E5F293491CFAE40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa
Signing time: Wed 20 Nov 2024 02:00:39 +0000
ROA not before: Wed 20 Nov 2024 02:00:39 +0000
ROA not after: Tue 18 Feb 2025 02:00:39 +0000
asID: 7029
IP address blocks: 67.224.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ef:ef:86:2d:5e:5f:29:34:91:cf:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 02:00:39 2024 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=255e4962-3706-4aca-a3ef-5953facd1b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:48:51:34:b9:6c:45:e8:da:78:49:41:8d:
aa:bc:ba:fb:38:c5:5d:cf:e9:87:63:8e:73:72:2c:
2d:af:fb:d7:55:19:68:b4:e7:17:a8:0b:5c:ae:04:
e5:3f:ff:61:f5:f9:e6:67:90:98:60:a2:20:d6:c7:
0b:03:21:ba:5e:31:c1:00:d1:1d:b6:be:cc:c3:ad:
5b:bb:7a:0a:4f:ad:ea:49:49:2a:09:b6:2f:ef:5c:
18:55:32:23:3e:bb:a4:93:78:b4:c8:81:8c:78:1f:
cf:4e:2e:f9:5a:22:4f:29:c8:c9:7c:9c:ef:98:dc:
48:08:59:09:1c:a0:fe:9c:91:81:01:7a:bd:b9:0c:
ae:54:ac:0e:37:7d:d4:84:90:25:b0:c2:ae:30:3f:
a3:44:95:1d:5a:5a:e1:c0:7c:08:da:16:b3:c6:36:
1e:97:9b:e0:03:c9:c2:3f:e6:14:30:88:f6:b5:88:
5d:11:f7:ec:c6:c8:11:d7:ec:fe:d1:cf:9b:c7:91:
2f:25:63:b7:07:b1:aa:6d:e4:00:b0:22:75:4f:95:
d8:f7:ac:c6:b2:d4:46:28:a5:3e:fc:28:c8:4e:56:
04:33:74:ce:8d:a5:a4:bb:8c:11:7d:bf:68:67:27:
c0:41:29:2a:53:56:46:5c:1a:8e:5e:0e:55:71:06:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7E:72:54:70:33:68:C3:59:DE:CB:9C:73:13:52:5F:B9:96:28:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4c20f69-85de-3b12-bb6d-5b45469b0fe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.224.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:90:b8:1c:69:f2:0a:f6:ac:d6:23:66:5d:d6:fd:5f:e4:13:
ca:83:37:83:a3:6a:40:4a:e9:24:d9:c9:75:d6:0f:39:5d:5c:
cb:9f:60:bf:87:3f:f7:ea:e6:ee:26:2a:6a:f6:f1:f3:d7:78:
bb:cf:81:22:f4:96:c3:b9:63:f2:4c:f9:11:4b:b3:68:b2:78:
b1:1b:1f:98:3d:38:f4:e3:eb:45:38:a1:80:ce:9f:e1:b6:4a:
0a:37:7f:03:ca:94:7a:65:db:6c:c1:6d:67:00:e7:00:8a:41:
73:50:01:1d:cb:e2:31:5d:22:d4:63:25:5f:c0:36:ad:19:52:
33:98:74:79:e8:d2:66:57:5f:ff:40:1a:49:49:66:c6:7e:37:
f0:4f:d0:ad:3c:02:57:f0:e4:de:e8:e4:27:b9:99:fd:24:3e:
b9:73:aa:2a:fb:53:7f:4a:7b:f8:4c:90:06:be:b8:8f:2b:a4:
ed:bf:68:fe:6d:a2:59:77:16:5a:54:97:39:88:fe:96:4b:54:
80:85:eb:6b:28:7f:37:91:5b:74:ab:87:ad:8f:f3:11:e3:57:
bf:10:e9:06:04:8a:73:8b:a6:1a:65:fb:94:71:dc:96:84:c8:
5b:d4:0b:e6:9b:e4:7f:18:5b:aa:07:b0:cd:38:a8:2c:7a:12:
0e:c9:66:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74YtXl8pNJHPrkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk
MjU1ZTQ5NjItMzcwNi00YWNhLWEzZWYtNTk1M2ZhY2QxYjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZVIUTS5bEXo2nhJQY2qvLr7OMVdz+mHY45z
ciwtr/vXVRlotOcXqAtcrgTlP/9h9fnmZ5CYYKIg1scLAyG6XjHBANEdtr7Mw61b
u3oKT63qSUkqCbYv71wYVTIjPrukk3i0yIGMeB/PTi75WiJPKcjJfJzvmNxICFkJ
HKD+nJGBAXq9uQyuVKwON33UhJAlsMKuMD+jRJUdWlrhwHwI2hazxjYel5vgA8nC
P+YUMIj2tYhdEffsxsgR1+z+0c+bx5EvJWO3B7GqbeQAsCJ1T5XY96zGstRGKKU+
/CjITlYEM3TOjaWku4wRfb9oZyfAQSkqU1ZGXBqOXg5VcQYcewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDN+clRwM2jDWd7LnHMTUl+5lijMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjRjMjBmNjktODVkZS0z
YjEyLWJiNmQtNWI0NTQ2OWIwZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+AQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCQuBxp8gr2rNYjZl3W/V/kE8qDN4OjakBK6STZyXXWDzldXMufYL+H
P/fq5u4mKmr28fPXeLvPgSL0lsO5Y/JM+RFLs2iyeLEbH5g9OPTj60U4oYDOn+G2
Sgo3fwPKlHpl22zBbWcA5wCKQXNQAR3L4jFdItRjJV/ANq0ZUjOYdHno0mZXX/9A
GklJZsZ+N/BP0K08Alfw5N7o5Ce5mf0kPrlzqir7U39Ke/hMkAa+uI8rpO2/aP5t
oll3FlpUlzmI/pZLVICF62sofzeRW3Srh62P8xHjV78Q6QYEinOLphpl+5Rx3JaE
yFvUC+ab5H8YW6oHsM04qCx6Eg7JZgg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:54:30 2025 by rpki-client