Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0fab0927-9a16-3974-af5e-e2529c6aa6cf.roa
File: 0fab0927-9a16-3974-af5e-e2529c6aa6cf.roa (raw, json)
Hash identifier: eRTj3qbUXb7SaAGgoig/drabAy/ixMTNUN8SMS64l0I=
Subject key identifier: A6:54:9B:2D:5F:F0:6C:EA:5F:85:51:DA:9F:5B:17:96:07:CF:33:44
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66169B78C945DC994E9D98A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0fab0927-9a16-3974-af5e-e2529c6aa6cf.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 50.96.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:16:9b:78:c9:45:dc:99:4e:9d:98:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=c97c60ae-5dfb-4d31-8de7-b81369942531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1f:93:44:bd:5b:4c:2d:20:f9:65:74:95:99:
da:03:a3:3b:0c:fe:da:3a:ca:cf:98:51:c1:ce:db:
82:84:fd:45:6c:c2:04:e7:90:cc:d2:d4:39:5e:1c:
8e:8c:be:0b:55:99:b2:9d:d2:11:aa:62:f8:25:05:
57:7f:8e:fd:28:bc:9e:ac:d3:c7:ca:68:3a:17:28:
91:55:12:d4:b5:b6:89:33:a7:f0:b5:71:ab:d4:92:
86:c1:11:9c:f0:4b:b1:a4:af:4a:52:86:e1:2d:f5:
40:75:c1:9f:ef:b0:61:89:80:28:74:a2:91:dc:24:
0e:52:ce:f0:96:15:fb:0c:7c:59:e0:85:51:5e:70:
02:8c:d2:22:41:4b:79:43:ee:36:d0:35:6d:87:85:
4a:17:b6:89:9e:2e:6d:04:ae:e3:25:7b:ce:b4:58:
bf:60:1c:f8:14:26:ca:30:d0:c2:f7:3d:de:09:5b:
d4:bd:c3:ae:5a:d3:2a:dc:0f:96:e4:7e:d8:a6:85:
cb:a9:ef:b8:d5:76:10:eb:e3:02:67:1e:3c:ee:37:
d2:f7:a9:cb:dd:55:88:25:25:46:aa:a2:72:1f:d4:
b9:af:aa:1e:f2:5c:b4:cf:7e:4d:5e:c9:fc:83:c3:
42:71:bb:66:23:45:e0:d2:0e:9c:3a:e5:b2:bb:c4:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:54:9B:2D:5F:F0:6C:EA:5F:85:51:DA:9F:5B:17:96:07:CF:33:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0fab0927-9a16-3974-af5e-e2529c6aa6cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:2b:54:43:7f:1d:40:ac:d4:99:3a:21:53:8f:d5:86:8c:ee:
27:e3:9e:c1:dc:b0:18:d9:ba:87:d8:23:74:6a:10:7c:fa:80:
2f:07:c1:ea:23:63:28:7a:0a:a6:f3:9c:3c:e1:b0:d4:78:3a:
0b:49:ed:c4:72:50:3d:55:c3:b5:4c:9c:76:e8:f4:75:12:21:
78:ee:82:ae:34:16:eb:95:a2:33:de:0e:3c:30:36:10:85:0b:
64:b8:d7:c6:c3:3e:4c:d9:3b:48:52:d8:48:77:f9:eb:f7:81:
1f:14:d4:ea:53:28:30:a3:26:8d:21:22:19:0f:78:90:55:e0:
2c:21:d1:96:0d:eb:1c:de:22:b5:b6:a7:b6:92:b4:95:54:a4:
d6:6c:d4:3b:e1:38:ef:9d:a9:d9:e0:ae:1b:ee:7f:91:47:a0:
a8:68:0f:0b:38:aa:f2:48:79:bc:63:ec:66:2d:c4:49:48:91:
d9:b8:50:8e:cd:26:0d:02:91:8a:b3:0e:ed:51:6b:2f:54:36:
0d:85:09:47:11:e7:4e:e3:dd:3f:da:f3:ae:9b:68:6a:c3:04:
09:72:f0:ad:7c:a9:d1:ad:a5:8a:f5:2d:0b:97:b2:e7:97:bd:
29:e2:4e:40:10:3d:d1:69:84:f4:df:d3:53:d7:cc:dd:f3:ea:
47:14:1b:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mFpt4yUXcmU6dmKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
Yzk3YzYwYWUtNWRmYi00ZDMxLThkZTctYjgxMzY5OTQyNTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx+TRL1bTC0g+WV0lZnaA6M7DP7aOsrPmFHB
ztuChP1FbMIE55DM0tQ5XhyOjL4LVZmyndIRqmL4JQVXf479KLyerNPHymg6FyiR
VRLUtbaJM6fwtXGr1JKGwRGc8EuxpK9KUobhLfVAdcGf77BhiYAodKKR3CQOUs7w
lhX7DHxZ4IVRXnACjNIiQUt5Q+420DVth4VKF7aJni5tBK7jJXvOtFi/YBz4FCbK
MNDC9z3eCVvUvcOuWtMq3A+W5H7YpoXLqe+41XYQ6+MCZx487jfS96nL3VWIJSVG
qqJyH9S5r6oe8ly0z35NXsn8g8NCcbtmI0Xg0g6cOuWyu8R3JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZUmy1f8GzqX4VR2p9bF5YHzzNEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGZhYjA5MjctOWExNi0z
OTc0LWFmNWUtZTI1MjljNmFhNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAForVEN/HUCs1Jk6IVOP1YaM7ifjnsHcsBjZuofYI3RqEHz6gC8Hweoj
Yyh6CqbznDzhsNR4OgtJ7cRyUD1Vw7VMnHbo9HUSIXjugq40FuuVojPeDjwwNhCF
C2S418bDPkzZO0hS2Eh3+ev3gR8U1OpTKDCjJo0hIhkPeJBV4Cwh0ZYN6xzeIrW2
p7aStJVUpNZs1DvhOO+dqdngrhvuf5FHoKhoDws4qvJIebxj7GYtxElIkdm4UI7N
Jg0CkYqzDu1Ray9UNg2FCUcR507j3T/a866baGrDBAly8K18qdGtpYr1LQuXsueX
vSniTkAQPdFphPTf01PXzN3z6kcUG2w=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:25 2025 by rpki-client