Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/288535cd-0ec8-30a6-bf0a-31012f2dfd11.roa
File: 288535cd-0ec8-30a6-bf0a-31012f2dfd11.roa (raw, json)
Hash identifier: wJ3UDZ8XmyIcDiPazfG0o+iFxz13fTw9mFHtL0gYQAE=
Subject key identifier: 9B:25:48:18:FF:1B:DE:51:3E:B9:DD:FE:37:4A:68:7D:DA:FD:05:CD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB26319F6960C39AE0CD6C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/288535cd-0ec8-30a6-bf0a-31012f2dfd11.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 216.176.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b2:63:19:f6:96:0c:39:ae:0c:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=081b694c-0096-4eeb-972d-b86c96b1bea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0b:a9:f0:d4:4e:0b:fb:32:14:e7:ba:38:d9:
8c:b9:4e:35:73:76:f4:da:d9:25:99:6a:cc:3f:9a:
be:3a:ff:94:66:51:f2:45:a9:9d:aa:fe:53:71:31:
b5:bf:51:8c:4a:14:34:fc:75:bb:a4:37:c3:37:a7:
6a:94:0c:27:80:ab:fb:17:46:31:a8:c8:3e:63:3d:
39:7d:49:82:8e:2c:cf:0f:64:4e:69:68:cd:27:45:
4a:ba:d2:52:52:9b:7e:67:ad:29:3a:da:f7:a1:2b:
20:7c:83:26:cf:4a:c5:79:01:24:91:52:88:d4:63:
2c:ad:95:91:70:b4:86:d4:85:77:c1:e4:bb:14:98:
7e:93:fa:c8:8c:df:1e:13:90:3c:68:30:31:0c:10:
4e:3a:eb:8c:5a:9c:e5:06:20:bb:92:0e:91:78:01:
b7:70:e6:e7:5a:9d:09:75:b8:67:1c:17:7d:56:76:
48:f1:61:39:5b:16:6c:67:c5:5b:b8:5e:39:e0:35:
5e:75:27:38:88:4c:b0:0b:62:47:7e:2f:bb:89:82:
ce:10:9d:12:65:43:29:26:a6:0f:50:3d:3b:ca:bc:
ff:5a:72:25:17:cc:2e:bd:df:6b:ee:de:64:b7:75:
fe:3e:08:f5:23:96:b0:7b:47:93:50:9a:c2:fb:11:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:25:48:18:FF:1B:DE:51:3E:B9:DD:FE:37:4A:68:7D:DA:FD:05:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/288535cd-0ec8-30a6-bf0a-31012f2dfd11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.176.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:b2:65:c5:c9:e1:c4:fc:9d:0b:db:84:1f:e9:97:1a:d4:48:
be:df:4e:e5:4a:19:19:6b:5f:67:50:59:85:9e:0a:14:69:62:
87:b3:50:20:a6:0a:07:cd:4b:66:cb:2e:e1:2b:16:8c:e8:52:
ef:da:ab:a7:f0:59:02:ed:f3:d0:c1:53:11:08:14:49:27:3c:
7d:c0:d0:e7:3e:41:62:5f:f4:cb:04:9b:75:fd:79:d0:7c:d2:
49:08:79:4f:29:1f:0f:e0:06:64:ec:fc:2a:fa:77:97:50:b9:
3f:d6:b2:b7:0d:60:71:f6:6a:95:ff:31:d3:1b:20:f3:ee:d7:
97:ef:72:13:e6:c9:96:7e:53:85:ce:ae:39:ad:a6:a6:a8:b0:
4a:51:fa:70:2b:75:38:db:87:be:6c:4c:52:0a:33:d0:22:a6:
66:cc:0b:83:e4:b5:95:4c:4d:35:f0:04:de:fd:51:18:1e:d2:
99:6a:8b:c5:1a:68:95:d1:80:49:f7:ad:81:ed:b3:9e:72:f3:
71:57:86:d6:27:ad:b9:62:57:0a:ce:a8:3b:03:9b:71:9e:58:
a6:78:22:eb:9e:5c:f3:45:ba:ee:f4:db:64:d8:b7:19:53:d1:
36:9d:b5:5d:cf:9c:be:71:26:4c:11:80:af:d9:66:28:e8:02:
f1:c2:17:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1PsmMZ9pYMOa4M1sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMTA0MDAwMFoXDTI4MDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
MDgxYjY5NGMtMDA5Ni00ZWViLTk3MmQtYjg2Yzk2YjFiZWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gup8NROC/syFOe6ONmMuU41c3b02tklmWrM
P5q+Ov+UZlHyRamdqv5TcTG1v1GMShQ0/HW7pDfDN6dqlAwngKv7F0YxqMg+Yz05
fUmCjizPD2ROaWjNJ0VKutJSUpt+Z60pOtr3oSsgfIMmz0rFeQEkkVKI1GMsrZWR
cLSG1IV3weS7FJh+k/rIjN8eE5A8aDAxDBBOOuuMWpzlBiC7kg6ReAG3cObnWp0J
dbhnHBd9VnZI8WE5WxZsZ8VbuF454DVedSc4iEywC2JHfi+7iYLOEJ0SZUMpJqYP
UD07yrz/WnIlF8wuvd9r7t5kt3X+Pgj1I5awe0eTUJrC+xHmUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJslSBj/G95RPrnd/jdKaH3a/QXNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjg4NTM1Y2QtMGVjOC0z
MGE2LWJmMGEtMzEwMTJmMmRmZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEayZcXJ4cT8nQvbhB/plxrUSL7fTuVKGRlrX2dQWYWeChRpYoezUCCm
CgfNS2bLLuErFozoUu/aq6fwWQLt89DBUxEIFEknPH3A0Oc+QWJf9MsEm3X9edB8
0kkIeU8pHw/gBmTs/Cr6d5dQuT/WsrcNYHH2apX/MdMbIPPu15fvchPmyZZ+U4XO
rjmtpqaosEpR+nArdTjbh75sTFIKM9AipmbMC4PktZVMTTXwBN79URge0plqi8Ua
aJXRgEn3rYHts55y83FXhtYnrbliVwrOqDsDm3GeWKZ4IuueXPNFuu7022TYtxlT
0TadtV3PnL5xJkwRgK/ZZijoAvHCFwc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:47 2025 by rpki-client