Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d202b2a-93aa-32a5-86c7-a9e260b1251e.roa
File: 0d202b2a-93aa-32a5-86c7-a9e260b1251e.roa (raw, json)
Hash identifier: Z9QN4ygrn8O5syFKAaFuCPOBjD/HbtrG+wB+H3u1n6o=
Subject key identifier: BC:54:D2:EC:77:D0:C0:EE:04:5C:90:D4:65:9D:DE:F8:9C:52:6E:F2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C55F1FC1EFC0E695AEAD4B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d202b2a-93aa-32a5-86c7-a9e260b1251e.roa
Signing time: Tue 04 Feb 2025 12:52:48 +0000
ROA not before: Tue 04 Feb 2025 12:52:48 +0000
ROA not after: Mon 05 May 2025 11:52:48 +0000
asID: 30036
IP address blocks: 50.81.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:5f:1f:c1:ef:c0:e6:95:ae:ad:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 12:52:48 2025 GMT
Not After : May 5 11:52:48 2025 GMT
Subject: CN=4a37cad1-f3bf-4b7e-b163-2c04775ab015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:78:27:0d:df:33:97:83:5e:5c:13:45:4f:
ab:3f:ec:0f:dc:8b:15:76:c8:73:56:c0:c3:d0:70:
26:5a:96:b0:60:48:8f:74:22:82:49:fb:eb:e4:e1:
92:e5:75:ab:9a:91:00:d6:16:b2:75:b4:cc:1e:64:
45:3b:50:32:02:77:26:ee:18:e8:29:10:0c:7c:68:
1f:4d:18:e4:66:6d:92:56:1c:06:ac:f5:9a:f4:b5:
8e:66:c2:a7:4d:e3:cf:35:36:f1:8b:51:33:26:70:
2b:bd:65:16:f7:8d:9c:53:00:a7:1e:88:80:75:34:
f2:e5:07:ba:8d:7f:c1:e5:59:ba:bc:4b:e5:df:61:
95:c7:6b:da:36:cb:91:61:9c:6b:49:f5:f8:ed:50:
c8:54:1f:f8:6b:1a:98:71:b8:18:f0:dc:21:d2:7c:
11:3b:3e:9e:f7:c0:03:cd:7a:b7:fa:7e:8f:e2:44:
cd:bc:bc:5f:ea:94:f6:19:19:d9:22:ae:55:de:52:
19:91:52:69:cc:7d:6d:1e:26:50:84:59:3c:c9:f5:
1e:59:4c:ee:53:3b:7e:9f:ca:a2:c3:b2:e1:09:8b:
2c:21:04:ec:d5:0e:d7:f3:7c:a1:e6:b5:b2:36:38:
f6:c8:01:11:3d:25:71:ac:8f:9c:a8:7c:46:89:80:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:54:D2:EC:77:D0:C0:EE:04:5C:90:D4:65:9D:DE:F8:9C:52:6E:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d202b2a-93aa-32a5-86c7-a9e260b1251e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
50.81.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:12:9a:b6:1f:3e:7f:64:2f:b9:94:34:dd:9d:95:07:a8:7d:
cc:cf:14:e3:6d:a8:0f:f1:a7:d2:25:8b:3a:68:c9:6d:a8:48:
e8:5e:a4:be:88:ad:1b:d0:96:e3:64:07:1b:b1:3c:e5:19:73:
ce:e2:a7:f9:35:13:10:f4:ad:ce:7b:e6:d0:1b:17:94:11:f2:
ce:44:e2:fc:f3:8d:35:66:93:a0:e4:b9:b7:e9:0c:91:2a:a1:
1a:e1:ad:e9:e9:8c:5e:bf:99:f6:f7:4a:36:3c:09:f9:06:97:
35:32:1d:29:7e:4b:e8:ca:0a:56:e8:f3:b5:bc:43:97:64:3f:
32:87:ab:c5:d5:ae:e3:80:a3:e9:5c:53:bf:e9:5b:fb:58:a1:
d8:6f:4b:ea:80:cc:97:43:27:c0:15:80:d5:76:0a:34:38:04:
04:dc:6d:84:d0:26:c2:cd:13:99:ff:7d:85:be:71:ad:6c:27:
7c:de:b9:c1:e5:db:80:31:f5:51:9c:44:09:21:dc:c9:2d:3f:
53:f1:c0:f4:8a:14:df:1c:c8:17:f4:3d:e6:0c:91:a7:6f:94:
6e:b0:5f:5d:8b:93:b3:44:76:38:c6:01:26:1f:d5:1d:4a:cd:
cb:9a:e4:1e:4e:39:32:4c:8c:58:e9:74:57:9f:e2:02:25:e5:
e1:41:4e:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFXx/B78Dmla6tSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEyNTI0OFoXDTI1MDUwNTExNTI0OFowLzEtMCsGA1UEAxMk
NGEzN2NhZDEtZjNiZi00YjdlLWIxNjMtMmMwNDc3NWFiMDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQt4Jw3fM5eDXlwTRU+rP+wP3IsVdshzVsDD
0HAmWpawYEiPdCKCSfvr5OGS5XWrmpEA1haydbTMHmRFO1AyAncm7hjoKRAMfGgf
TRjkZm2SVhwGrPWa9LWOZsKnTePPNTbxi1EzJnArvWUW942cUwCnHoiAdTTy5Qe6
jX/B5Vm6vEvl32GVx2vaNsuRYZxrSfX47VDIVB/4axqYcbgY8Nwh0nwROz6e98AD
zXq3+n6P4kTNvLxf6pT2GRnZIq5V3lIZkVJpzH1tHiZQhFk8yfUeWUzuUzt+n8qi
w7LhCYssIQTs1Q7X83yh5rWyNjj2yAERPSVxrI+cqHxGiYC5EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLxU0ux30MDuBFyQ1GWd3vicUm7yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGQyMDJiMmEtOTNhYS0z
MmE1LTg2YzctYTllMjYwYjEyNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlGoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4SmrYfPn9kL7mUNN2dlQeofczPFONtqA/xp9IlizpoyW2oSOhepL6I
rRvQluNkBxuxPOUZc87ip/k1ExD0rc575tAbF5QR8s5E4vzzjTVmk6DkubfpDJEq
oRrhrenpjF6/mfb3SjY8CfkGlzUyHSl+S+jKClbo87W8Q5dkPzKHq8XVruOAo+lc
U7/pW/tYodhvS+qAzJdDJ8AVgNV2CjQ4BATcbYTQJsLNE5n/fYW+ca1sJ3zeucHl
24Ax9VGcRAkh3MktP1PxwPSKFN8cyBf0PeYMkadvlG6wX12Lk7NEdjjGASYf1R1K
zcua5B5OOTJMjFjpdFef4gIl5eFBTik=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:39 2025 by rpki-client