Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aedb6680-9be9-3d84-897b-027b32eaa971.roa
File: aedb6680-9be9-3d84-897b-027b32eaa971.roa (raw, json)
Hash identifier: Jf+YO4CF5ySQ93ypPYZbAeXuC+bWDJhds7AWcwjxKDg=
Subject key identifier: 33:2C:68:6E:00:0F:97:2E:D4:14:5C:F1:F6:33:AA:55:09:6D:90:A9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C26261F3042D148FC9D1F9C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aedb6680-9be9-3d84-897b-027b32eaa971.roa
Signing time: Mon 03 Feb 2025 11:11:56 +0000
ROA not before: Mon 03 Feb 2025 11:11:56 +0000
ROA not after: Sun 04 May 2025 10:11:56 +0000
asID: 30036
IP address blocks: 50.82.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:62:61:f3:04:2d:14:8f:c9:d1:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 3 11:11:56 2025 GMT
Not After : May 4 10:11:56 2025 GMT
Subject: CN=4fc61d57-7184-412f-bf17-274a56b8741a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:c8:68:b7:3f:b6:c5:6f:16:8c:db:6c:ee:
fc:36:82:68:6d:dd:d9:36:06:6f:7e:d9:0c:05:2d:
f5:b6:a2:c6:b8:16:f8:21:08:f6:a2:1e:17:e6:29:
d7:9d:1a:85:49:00:de:91:8e:23:e1:a4:62:22:c3:
10:f9:97:e0:34:84:3c:85:57:f5:52:af:34:89:40:
67:f1:00:66:18:b6:d7:ea:2b:04:ad:8c:a3:41:e0:
c6:ac:ce:b6:93:8f:36:bd:0e:14:36:07:b0:8a:75:
72:75:3a:02:f1:76:41:fc:41:2c:08:bc:1d:91:b8:
e3:63:63:0f:3a:49:67:2e:fd:18:6b:4f:ff:5c:4a:
52:bc:2b:ab:61:8e:59:2a:21:60:28:85:fb:be:4b:
7e:54:85:71:e9:b7:9a:22:b4:14:0c:d3:db:bd:a9:
5e:0f:de:65:8c:09:1b:89:47:82:46:3b:8f:79:86:
a1:1a:a6:bb:2d:78:cc:cd:f5:9b:0c:65:63:07:12:
e9:d9:ab:5e:0a:2f:6a:3d:9e:25:1d:33:c5:42:60:
b1:3d:7f:b3:16:0b:1a:ff:85:40:05:38:17:89:76:
32:08:3b:77:90:52:3d:34:d3:f0:62:d7:52:fa:25:
85:0e:b5:56:a2:13:ac:ea:2e:8a:8d:01:fd:27:45:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2C:68:6E:00:0F:97:2E:D4:14:5C:F1:F6:33:AA:55:09:6D:90:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aedb6680-9be9-3d84-897b-027b32eaa971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
50.82.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:d7:92:4a:f4:42:fe:38:99:29:ea:c3:45:a8:f8:74:c4:e4:
ef:d6:4c:a8:9d:61:d9:9b:b8:07:68:f6:67:ae:e2:86:a4:04:
93:d7:44:3e:57:6f:34:b0:55:19:0f:50:5e:35:e1:42:0a:55:
b2:38:d0:18:94:d5:2a:c3:0c:b7:be:aa:90:1c:31:99:dc:a8:
5c:86:b3:fa:22:c4:5f:42:60:e0:b2:5f:a4:40:e2:e3:e0:19:
f6:63:f7:89:f3:20:ee:e2:26:55:98:55:e4:c8:78:65:84:17:
4f:e2:79:f6:ac:c5:b4:a9:5a:66:bd:19:a8:81:aa:2e:4f:21:
70:1d:bd:03:53:a5:63:85:ce:45:20:07:5e:7f:b6:78:fe:c6:
60:a4:63:32:86:d4:07:1e:48:2e:f8:70:19:8e:45:cd:53:54:
a7:17:f4:de:96:e9:25:94:ca:97:e5:6c:0a:ce:1b:ff:c1:50:
68:29:24:37:95:a9:2a:be:d7:02:b6:01:06:63:fc:87:b9:9a:
be:fc:9e:1d:e0:05:92:fe:53:9d:14:17:fd:28:31:11:97:98:
fe:b9:81:89:e7:84:64:56:38:9d:06:c1:71:9f:9f:2f:ec:d3:
27:52:f4:c7:eb:e9:05:3e:e1:4d:bb:3b:9f:56:e5:95:44:da:
b6:03:e3:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYmHzBC0Uj8nR+cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTE1NloXDTI1MDUwNDEwMTE1NlowLzEtMCsGA1UEAxMk
NGZjNjFkNTctNzE4NC00MTJmLWJmMTctMjc0YTU2Yjg3NDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQHIaLc/tsVvFozbbO78NoJobd3ZNgZvftkM
BS31tqLGuBb4IQj2oh4X5inXnRqFSQDekY4j4aRiIsMQ+ZfgNIQ8hVf1Uq80iUBn
8QBmGLbX6isErYyjQeDGrM62k482vQ4UNgewinVydToC8XZB/EEsCLwdkbjjY2MP
OklnLv0Ya0//XEpSvCurYY5ZKiFgKIX7vkt+VIVx6beaIrQUDNPbvaleD95ljAkb
iUeCRjuPeYahGqa7LXjMzfWbDGVjBxLp2ateCi9qPZ4lHTPFQmCxPX+zFgsa/4VA
BTgXiXYyCDt3kFI9NNPwYtdS+iWFDrVWohOs6i6KjQH9J0XQmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMsaG4AD5cu1BRc8fYzqlUJbZCpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWVkYjY2ODAtOWJlOS0z
ZDg0LTg5N2ItMDI3YjMyZWFhOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlIhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzXkkr0Qv44mSnqw0Wo+HTE5O/WTKidYdmbuAdo9meu4oakBJPXRD5X
bzSwVRkPUF414UIKVbI40BiU1SrDDLe+qpAcMZncqFyGs/oixF9CYOCyX6RA4uPg
GfZj94nzIO7iJlWYVeTIeGWEF0/iefasxbSpWma9GaiBqi5PIXAdvQNTpWOFzkUg
B15/tnj+xmCkYzKG1AceSC74cBmORc1TVKcX9N6W6SWUypflbArOG//BUGgpJDeV
qSq+1wK2AQZj/Ie5mr78nh3gBZL+U50UF/0oMRGXmP65gYnnhGRWOJ0GwXGfny/s
0ydS9Mfr6QU+4U27O59W5ZVE2rYD49w=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:58 2025 by rpki-client