Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa
File: 0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa (raw, json)
Hash identifier: f0DQPN+NtzuYi4BVFJql9VoobJKKMiZheTMyVoojm9Y=
Subject key identifier: A8:6F:0B:E9:EE:67:DE:49:5B:10:79:B4:77:CA:3D:39:40:3B:5E:8A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848DA71041CB58C1625DF669DA0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 173.185.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:71:04:1c:b5:8c:16:25:df:66:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=b4222744-1774-4093-99b7-2853e8fb051c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6d:11:86:42:37:5b:37:b4:a4:32:af:c4:92:
49:45:db:30:1f:22:81:63:4e:e0:cd:ab:19:9b:de:
3e:c7:57:20:47:0f:25:15:af:14:a3:0d:77:2b:88:
b9:a4:b7:54:30:26:fd:d1:c6:30:ab:1c:7e:34:d1:
1c:e0:21:f2:68:ef:a3:c6:2c:ef:c7:9b:26:1c:6b:
9d:c3:4a:bf:1e:c5:56:f3:9e:8d:96:9b:0e:c6:98:
e1:02:3e:66:20:19:09:8d:77:52:24:8f:d1:ac:0a:
b8:8f:72:96:da:f0:81:d0:58:53:35:45:be:1e:93:
21:d8:d1:c6:f5:6e:42:c9:2d:b6:5a:18:3a:8f:b1:
22:b2:51:b0:94:7b:b9:79:1b:2a:6d:03:9d:d5:e2:
97:f7:ad:cc:06:63:5d:f9:db:19:3a:73:9e:97:63:
df:33:ef:92:f7:d1:09:84:b7:84:31:7b:fd:1e:46:
57:8c:13:05:4e:73:57:13:37:77:63:ac:0b:b7:f0:
db:eb:d4:a1:68:83:87:4d:2d:5c:41:7e:c9:55:55:
7e:f3:2d:fd:68:9b:4e:aa:14:83:88:3d:e9:5f:81:
a5:18:21:f2:e9:a4:31:6a:3d:90:3f:7d:fe:66:7e:
de:37:c9:14:a0:66:06:da:86:96:a1:d9:84:ed:9c:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6F:0B:E9:EE:67:DE:49:5B:10:79:B4:77:CA:3D:39:40:3B:5E:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.185.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:fd:04:1c:47:2d:b4:21:fe:84:50:5a:f1:12:2e:e8:23:2a:
d1:b2:08:38:4c:1f:93:44:b5:fa:7d:66:9a:23:4c:83:cf:d8:
f5:3d:09:18:62:e6:3d:c7:81:7f:0b:d1:a7:a7:6e:c5:a3:39:
b7:47:4f:de:d7:84:75:e4:9c:a7:65:3e:91:cb:b2:96:28:79:
86:80:db:90:70:c6:1a:df:47:62:b9:a3:1b:91:f4:8e:73:8f:
15:b9:6f:31:4b:d9:2a:e9:5e:3a:97:78:cf:97:f4:3c:cd:dc:
70:c1:c5:80:0f:53:47:9e:f9:00:88:fe:e3:53:c3:3b:5d:05:
9d:6e:55:00:ec:67:bd:89:24:3a:85:b4:2e:dd:e2:7e:20:91:
46:ed:c2:3d:b6:cf:03:a0:ee:b7:01:a3:a2:31:38:9e:f4:7a:
f6:3e:ce:8c:54:b6:9f:0a:92:d2:d9:35:6c:24:96:3b:ca:5f:
1b:f2:f8:0e:83:fa:af:03:3e:4d:d6:e8:a6:1a:63:da:40:10:
73:0c:eb:7a:fc:c4:4a:03:6d:f3:3f:29:a6:83:85:85:c6:dc:
2a:f1:41:59:64:d2:27:1c:35:fd:58:69:9e:97:09:36:59:68:
05:a2:22:3b:5a:58:ba:4c:93:94:85:2e:b2:42:bb:5b:76:01:
6f:fa:f0:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQQctYwWJd9mnaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk
YjQyMjI3NDQtMTc3NC00MDkzLTk5YjctMjg1M2U4ZmIwNTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi20RhkI3Wze0pDKvxJJJRdswHyKBY07gzasZ
m94+x1cgRw8lFa8Uow13K4i5pLdUMCb90cYwqxx+NNEc4CHyaO+jxizvx5smHGud
w0q/HsVW856NlpsOxpjhAj5mIBkJjXdSJI/RrAq4j3KW2vCB0FhTNUW+HpMh2NHG
9W5CyS22Whg6j7EislGwlHu5eRsqbQOd1eKX963MBmNd+dsZOnOel2PfM++S99EJ
hLeEMXv9HkZXjBMFTnNXEzd3Y6wLt/Db69ShaIOHTS1cQX7JVVV+8y39aJtOqhSD
iD3pX4GlGCHy6aQxaj2QP33+Zn7eN8kUoGYG2oaWodmE7ZwMbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhvC+nuZ95JWxB5tHfKPTlAO16KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGJlMTRlZTItMjdjYS0z
ZmRmLTlkNWItMWU3NjdkYjRlZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbl4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF39BBxHLbQh/oRQWvESLugjKtGyCDhMH5NEtfp9ZpojTIPP2PU9CRhi
5j3HgX8L0aenbsWjObdHT97XhHXknKdlPpHLspYoeYaA25BwxhrfR2K5oxuR9I5z
jxW5bzFL2SrpXjqXeM+X9DzN3HDBxYAPU0ee+QCI/uNTwztdBZ1uVQDsZ72JJDqF
tC7d4n4gkUbtwj22zwOg7rcBo6IxOJ70evY+zoxUtp8KktLZNWwkljvKXxvy+A6D
+q8DPk3W6KYaY9pAEHMM63r8xEoDbfM/KaaDhYXG3CrxQVlk0iccNf1YaZ6XCTZZ
aAWiIjtaWLpMk5SFLrJCu1t2AW/68CE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:32 2025 by rpki-client