Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa
File: 13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa (raw, json)
Hash identifier: BhcLKqJL/sRzWT59kj2XwFGaO3KLvD6HzoFkPY+F3kc=
Subject key identifier: C1:5E:06:FA:F9:8F:C1:9B:23:EF:F4:00:65:D7:C2:3C:78:72:29:5E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F4F75BB022117C5D9F4F5F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7029
IP address blocks: 40.132.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:5b:b0:22:11:7c:5d:9f:4f:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=24f3a85d-67f9-4e29-81ae-a6dd8b4d5bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:70:74:c6:9d:6b:9b:a3:48:69:8d:54:3c:
3a:60:69:65:1c:76:fd:f6:9c:64:d3:d4:4f:ff:55:
5f:bb:f3:fa:2f:6f:66:81:17:04:8b:2a:0d:bf:aa:
5a:19:76:4e:05:e0:46:91:2f:eb:bf:2a:8a:06:29:
88:0e:8a:ef:75:47:00:40:e7:e6:b8:ef:a4:36:39:
fa:bd:a8:e9:e3:73:ab:30:ea:d4:dc:7a:52:56:07:
3d:77:e9:12:41:3d:d5:b1:82:c1:c8:58:aa:07:c4:
96:fa:80:66:25:66:94:dd:ad:b1:44:e1:72:5e:44:
64:c8:1f:ab:8c:f7:dc:d5:9b:5f:31:72:29:49:3c:
7a:90:29:18:5d:8c:31:97:2b:1d:0f:7f:72:9d:c4:
67:06:97:dd:e7:3e:eb:cb:c9:b7:99:51:4e:9c:0a:
32:c6:0c:fe:a3:ab:f1:ff:b2:53:a6:1e:ef:0c:c6:
dd:73:7c:b9:e4:e8:b3:92:96:ed:ed:28:25:71:42:
3e:e2:f8:aa:d4:b6:1f:5f:59:9e:42:06:cd:cd:1a:
c9:64:1b:a4:71:b3:5a:43:38:f1:6b:2c:0c:92:e0:
bc:b8:e4:cf:55:d4:2f:62:8a:f4:4e:21:6b:aa:2e:
fb:76:54:b6:aa:bc:cd:2c:7a:db:28:4e:e7:17:ca:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:06:FA:F9:8F:C1:9B:23:EF:F4:00:65:D7:C2:3C:78:72:29:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.132.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:60:fc:4f:31:90:05:8e:2d:f4:c7:0b:bc:cd:56:87:2e:0e:
46:f7:52:04:80:f0:ea:97:fb:f0:8a:d4:5e:c6:9b:6e:34:a7:
c7:b4:ac:93:93:2e:3d:7d:c2:eb:49:1c:39:16:e6:bb:6c:d1:
c4:0a:38:41:20:a4:81:e6:0a:a2:88:4e:43:e6:95:a4:4d:96:
c8:0d:ad:d2:83:4b:25:70:d3:c0:40:c1:fb:fc:84:a7:79:7d:
29:bf:f1:67:5e:49:b8:75:3d:31:69:c9:00:88:d7:63:23:fa:
00:79:3f:fc:75:41:2f:ea:e0:2f:a0:e7:70:65:97:2f:46:3f:
fe:b2:f0:26:72:b8:09:80:c9:cf:15:b8:d1:12:4c:92:d7:f1:
64:2b:d0:1a:c7:fe:b1:5c:a4:59:e0:fc:2a:74:1c:eb:f3:c3:
a9:dd:f2:f9:35:bc:2a:8e:de:42:63:37:6d:dd:f6:34:40:d9:
06:d7:06:40:2b:42:51:78:e7:3b:c5:72:19:9e:8e:2f:d4:f6:
37:23:ef:da:dd:99:aa:f1:70:b0:f2:a1:ee:62:2a:ca:5a:05:
7d:09:a5:45:ff:84:bd:6a:eb:34:0c:cd:50:76:47:7e:bb:67:
74:c9:52:8b:d7:b9:d5:47:0c:a7:ed:dc:3b:1d:06:ad:75:41:
ff:29:d1:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj091uwIhF8XZ9PX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MjRmM2E4NWQtNjdmOS00ZTI5LTgxYWUtYTZkZDhiNGQ1YmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsVwdMada5ujSGmNVDw6YGllHHb99pxk09RP
/1Vfu/P6L29mgRcEiyoNv6paGXZOBeBGkS/rvyqKBimIDorvdUcAQOfmuO+kNjn6
vajp43OrMOrU3HpSVgc9d+kSQT3VsYLByFiqB8SW+oBmJWaU3a2xROFyXkRkyB+r
jPfc1ZtfMXIpSTx6kCkYXYwxlysdD39yncRnBpfd5z7ry8m3mVFOnAoyxgz+o6vx
/7JTph7vDMbdc3y55Oizkpbt7SglcUI+4viq1LYfX1meQgbNzRrJZBukcbNaQzjx
aywMkuC8uOTPVdQvYor0TiFrqi77dlS2qrzNLHrbKE7nF8qX5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFeBvr5j8GbI+/0AGXXwjx4cileMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTNhNDc0MGItNjY3NC0z
ZGFlLThjMTktY2RmZDQxZjRmYzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKISoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChg/E8xkAWOLfTHC7zNVocuDkb3UgSA8OqX+/CK1F7Gm240p8e0rJOT
Lj19wutJHDkW5rts0cQKOEEgpIHmCqKITkPmlaRNlsgNrdKDSyVw08BAwfv8hKd5
fSm/8WdeSbh1PTFpyQCI12Mj+gB5P/x1QS/q4C+g53Blly9GP/6y8CZyuAmAyc8V
uNESTJLX8WQr0BrH/rFcpFng/Cp0HOvzw6nd8vk1vCqO3kJjN23d9jRA2QbXBkAr
QlF45zvFchmeji/U9jcj79rdmarxcLDyoe5iKspaBX0JpUX/hL1q6zQMzVB2R367
Z3TJUovXudVHDKft3DsdBq11Qf8p0ZQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:27 2025 by rpki-client