Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d2b3815-e1c5-3352-8922-b7e0e2f4df48.roa
File: 2d2b3815-e1c5-3352-8922-b7e0e2f4df48.roa (raw, json)
Hash identifier: O0IoOpiYd9zyoBXTLANN5r3VFeFDdXCzF0k7LmikKWo=
Subject key identifier: 65:48:D1:2B:91:DF:DE:25:67:73:0F:D9:8D:A2:5F:5A:EE:F2:22:D3
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C5846ACC0F9E92BB6725B340
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d2b3815-e1c5-3352-8922-b7e0e2f4df48.roa
Signing time: Tue 04 Feb 2025 14:07:56 +0000
ROA not before: Tue 04 Feb 2025 14:07:56 +0000
ROA not after: Mon 05 May 2025 13:07:56 +0000
asID: 30036
IP address blocks: 50.81.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:84:6a:cc:0f:9e:92:bb:67:25:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 14:07:56 2025 GMT
Not After : May 5 13:07:56 2025 GMT
Subject: CN=c7d66204-b2e8-4aec-b6b3-74d79e2ff707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:8e:fd:c3:a5:ce:5b:20:45:5f:bc:d0:fe:
50:32:f7:74:87:41:28:8c:84:21:ce:76:ce:9b:62:
d7:f3:1e:40:ee:2a:5e:2e:99:a4:6a:38:ae:6d:9c:
af:e6:4d:4b:de:2f:41:77:5a:80:a4:ee:f3:ed:c4:
7c:53:ba:ea:32:c6:71:98:a2:fe:0f:b5:4d:2f:63:
2d:a3:04:b9:b3:d4:77:42:32:e8:92:ac:9c:86:58:
32:69:24:31:95:d0:08:37:fa:bf:c2:61:50:ab:09:
d1:99:b4:14:be:89:45:f5:16:ff:df:63:65:aa:c9:
93:cc:f4:2a:aa:14:f9:1a:8f:c6:c7:6b:39:d0:a7:
1a:cc:2d:fd:bc:0e:17:c0:67:b8:45:9f:a4:ac:e8:
8d:53:b6:b6:31:c7:40:e8:b7:66:65:e2:0f:75:1e:
55:29:b8:fb:02:49:b5:08:63:2c:f7:c3:02:8d:34:
5d:ea:fe:93:dc:36:e2:e0:32:66:9a:be:45:85:74:
9a:92:42:b7:0c:ab:76:73:85:7d:db:21:8d:a7:dc:
f2:cb:7c:c3:4c:0f:03:d4:22:f5:a8:b5:55:b4:ed:
e2:5b:2a:40:58:25:42:48:1a:c1:8a:fb:9b:f7:71:
27:d8:24:cd:f7:12:47:7c:1f:de:fc:8c:7a:66:0f:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:48:D1:2B:91:DF:DE:25:67:73:0F:D9:8D:A2:5F:5A:EE:F2:22:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d2b3815-e1c5-3352-8922-b7e0e2f4df48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
50.81.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:8d:d9:45:6a:cf:bb:ae:c2:88:78:73:8f:bf:6b:66:2c:8e:
51:2c:1a:5e:08:13:d5:3c:3e:d8:5b:67:11:93:8b:21:2d:3a:
55:2c:0b:f0:7b:d2:b9:fb:73:17:06:98:14:ca:5b:fc:a7:f2:
bb:6f:40:e0:13:0a:a0:a9:b7:36:01:a7:28:b3:56:fd:5e:39:
4d:7a:78:7b:bf:d8:e3:26:ab:a9:62:a6:c4:39:ce:93:36:87:
17:64:54:dc:a8:7c:da:44:37:8f:ce:c2:26:6a:21:82:35:31:
d2:69:0a:88:f2:4c:67:f9:d0:c4:71:49:a4:77:1e:80:be:51:
aa:88:3a:24:0c:ff:29:0b:36:3d:20:35:64:b7:20:74:80:b5:
dc:45:10:57:a8:ea:d3:28:c9:04:60:ac:16:20:18:48:cb:af:
aa:65:b7:3f:4f:20:9c:83:39:3c:d5:c7:8b:5a:8f:a0:40:38:
83:59:35:0c:d2:1f:91:44:98:bd:04:ef:0e:bf:eb:e5:57:df:
96:0a:8a:e0:a0:10:90:10:c0:b5:19:40:53:68:b3:75:3d:cd:
c8:c3:7c:07:3e:5f:8a:9b:c2:af:7a:f9:be:02:41:57:b7:81:
a9:bc:ad:4b:a6:e2:69:fc:de:c9:b4:bc:f9:76:bb:c7:45:65:
ed:2e:53:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFhGrMD56Su2cls0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDE0MDc1NloXDTI1MDUwNTEzMDc1NlowLzEtMCsGA1UEAxMk
YzdkNjYyMDQtYjJlOC00YWVjLWI2YjMtNzRkNzllMmZmNzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/CO/cOlzlsgRV+80P5QMvd0h0EojIQhznbO
m2LX8x5A7ipeLpmkajiubZyv5k1L3i9Bd1qApO7z7cR8U7rqMsZxmKL+D7VNL2Mt
owS5s9R3QjLokqychlgyaSQxldAIN/q/wmFQqwnRmbQUvolF9Rb/32NlqsmTzPQq
qhT5Go/Gx2s50KcazC39vA4XwGe4RZ+krOiNU7a2McdA6LdmZeIPdR5VKbj7Akm1
CGMs98MCjTRd6v6T3Dbi4DJmmr5FhXSakkK3DKt2c4V92yGNp9zyy3zDTA8D1CL1
qLVVtO3iWypAWCVCSBrBivub93En2CTN9xJHfB/e/Ix6Zg9HHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVI0SuR394lZ3MP2Y2iX1ru8iLTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQyYjM4MTUtZTFjNS0z
MzUyLTg5MjItYjdlMGUyZjRkZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMlHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmN2UVqz7uuwoh4c4+/a2YsjlEsGl4IE9U8PthbZxGTiyEtOlUsC/B7
0rn7cxcGmBTKW/yn8rtvQOATCqCptzYBpyizVv1eOU16eHu/2OMmq6lipsQ5zpM2
hxdkVNyofNpEN4/OwiZqIYI1MdJpCojyTGf50MRxSaR3HoC+UaqIOiQM/ykLNj0g
NWS3IHSAtdxFEFeo6tMoyQRgrBYgGEjLr6pltz9PIJyDOTzVx4taj6BAOINZNQzS
H5FEmL0E7w6/6+VX35YKiuCgEJAQwLUZQFNos3U9zcjDfAc+X4qbwq96+b4CQVe3
gam8rUum4mn83sm0vPl2u8dFZe0uUxc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:06 2025 by rpki-client