Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/00e94ee9-6df1-362a-82f4-9742f39073a2.roa
File: 00e94ee9-6df1-362a-82f4-9742f39073a2.roa (raw, json)
Hash identifier: wL8acsR4yOEfuSPonDZujwt2snQxTg6rmTX4oG5EC3A=
Subject key identifier: 76:6E:C7:D3:72:56:88:31:70:6F:00:B3:91:7F:8D:68:65:C8:DA:B2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661FEED8CBC20A626B758290
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/00e94ee9-6df1-362a-82f4-9742f39073a2.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.187.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1f:ee:d8:cb:c2:0a:62:6b:75:82:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=c0e3983b-e556-48a6-9b4d-247d9112a5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:cc:ba:8d:29:99:58:66:fc:3b:f9:bc:1e:
30:9e:97:70:06:27:fd:07:86:14:f7:1f:c8:64:59:
ba:a1:af:77:81:c4:68:e4:6e:1f:86:1e:d1:4f:14:
e9:53:dd:7a:fb:1f:b7:40:92:f9:34:bc:84:54:01:
0b:ff:f2:88:27:d0:cd:e0:99:15:e1:9a:eb:49:e1:
ad:76:09:4e:a8:50:e2:a4:9d:6e:8d:4b:72:ac:2d:
53:3b:c0:6d:72:c5:ba:78:ea:c1:03:34:20:34:e4:
13:4f:ed:0f:b3:00:da:42:47:c1:5f:91:91:9d:c0:
2d:47:79:0a:15:56:e9:19:ff:b3:82:6b:0c:9b:da:
30:10:2f:50:04:cb:00:ed:db:a9:27:61:e7:15:f2:
94:25:6c:d5:82:f8:3a:da:62:73:eb:67:78:d6:bf:
0c:67:38:79:9c:56:ef:99:7a:f7:d8:e7:a5:3d:14:
24:a3:e2:55:43:5e:69:04:33:8c:79:e6:ad:5b:a9:
81:e2:b4:cb:42:53:08:c6:25:0d:40:01:67:e5:91:
92:cf:a6:72:9d:54:a8:54:c4:0b:dc:9c:a4:67:eb:
cd:bd:ce:36:c3:d4:4a:3c:fc:e4:1b:8c:3f:9a:23:
18:13:7c:b6:cc:a4:0c:a2:75:13:96:de:6f:5e:e3:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6E:C7:D3:72:56:88:31:70:6F:00:B3:91:7F:8D:68:65:C8:DA:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/00e94ee9-6df1-362a-82f4-9742f39073a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:17:76:33:70:b8:68:88:b9:ce:ea:fb:2b:3c:40:73:e9:de:
31:de:87:c1:af:b7:19:26:e1:fe:9b:47:ba:65:2a:5c:ff:08:
aa:e1:50:e1:d7:1e:53:c7:41:7b:25:48:01:f9:0a:b1:7d:64:
f3:71:b1:24:6c:98:af:09:b7:d1:11:0b:04:8f:5d:19:eb:46:
f7:4d:fe:0f:a2:9e:bc:50:6a:6b:40:74:17:ea:e0:21:a2:db:
45:ec:22:7f:0c:61:aa:98:72:58:f5:fa:b4:48:9a:a5:4b:93:
66:bd:73:d2:51:c1:ff:1d:43:73:3e:b5:b9:34:1b:30:9d:e4:
76:cb:87:20:29:1f:63:e9:2c:f9:3d:55:15:45:a9:4f:4c:37:
99:9a:8b:fb:95:c8:7b:41:76:89:b3:3e:71:ff:bb:2c:ad:6d:
7f:c1:be:dc:03:7f:fe:5f:d7:11:88:56:8f:a8:e9:5f:61:82:
17:23:35:af:5b:4e:7a:d1:cf:23:dd:51:f4:94:7a:1f:ae:8b:
a8:eb:a0:f9:41:d4:dd:42:12:1a:58:6a:ff:9e:7f:2d:4d:30:
c3:06:ad:2d:0f:81:dc:02:8d:ec:55:9b:1b:b6:e1:e5:4f:47:
9b:ba:52:ae:78:2c:00:52:eb:5a:e6:47:c8:63:06:d4:76:97:
48:3f:14:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mH+7Yy8IKYmt1gpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzBlMzk4M2ItZTU1Ni00OGE2LTliNGQtMjQ3ZDkxMTJhNWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy/Muo0pmVhm/Dv5vB4wnpdwBif9B4YU9x/I
ZFm6oa93gcRo5G4fhh7RTxTpU916+x+3QJL5NLyEVAEL//KIJ9DN4JkV4ZrrSeGt
dglOqFDipJ1ujUtyrC1TO8BtcsW6eOrBAzQgNOQTT+0PswDaQkfBX5GRncAtR3kK
FVbpGf+zgmsMm9owEC9QBMsA7dupJ2HnFfKUJWzVgvg62mJz62d41r8MZzh5nFbv
mXr32OelPRQko+JVQ15pBDOMeeatW6mB4rTLQlMIxiUNQAFn5ZGSz6ZynVSoVMQL
3JykZ+vNvc42w9RKPPzkG4w/miMYE3y2zKQMonUTlt5vXuMcHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHZux9NyVogxcG8As5F/jWhlyNqyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDBlOTRlZTktNmRmMS0z
NjJhLTgyZjQtOTc0MmYzOTA3M2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbtwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMXdjNwuGiIuc7q+ys8QHPp3jHeh8Gvtxkm4f6bR7plKlz/CKrhUOHX
HlPHQXslSAH5CrF9ZPNxsSRsmK8Jt9ERCwSPXRnrRvdN/g+inrxQamtAdBfq4CGi
20XsIn8MYaqYclj1+rRImqVLk2a9c9JRwf8dQ3M+tbk0GzCd5HbLhyApH2PpLPk9
VRVFqU9MN5mai/uVyHtBdomzPnH/uyytbX/BvtwDf/5f1xGIVo+o6V9hghcjNa9b
TnrRzyPdUfSUeh+ui6jroPlB1N1CEhpYav+efy1NMMMGrS0PgdwCjexVmxu24eVP
R5u6Uq54LABS61rmR8hjBtR2l0g/FAc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:06 2025 by rpki-client