Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/328da984-1fbd-3c49-94d5-71cf7f97c69d.roa
File: 328da984-1fbd-3c49-94d5-71cf7f97c69d.roa (raw, json)
Hash identifier: +t9uWRAqv5KRGWSdCbcsszf+k54Vnvd2ALAkVQy1WWU=
Subject key identifier: 7A:35:0F:4C:93:58:91:8C:68:E1:E3:0D:A0:86:D2:89:94:A1:99:74
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289D6EBF0730C5ACA18F680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/328da984-1fbd-3c49-94d5-71cf7f97c69d.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 75.88.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:d6:eb:f0:73:0c:5a:ca:18:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=2008d7db-ec60-487d-a201-5d040cd6fc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:6b:f6:4d:62:f2:bb:f1:68:4d:d5:f1:8f:
63:37:dd:34:f5:62:d1:c2:58:b5:af:38:d3:fb:84:
30:05:7e:95:59:90:24:6c:e5:e7:18:b2:e3:9a:70:
31:a7:9f:b4:d2:b3:fa:91:44:2d:b1:77:40:47:4a:
a2:ef:cc:e3:39:81:fd:ce:a6:1a:bf:29:a8:57:41:
4e:65:aa:bb:c4:a9:c4:93:c2:5e:96:5b:56:af:e3:
42:1f:e0:48:6d:bf:b3:fb:f2:c3:9f:a7:53:a3:75:
00:93:d2:a6:38:e0:01:9a:d7:ac:28:28:65:84:f8:
1a:f8:d8:40:3b:e9:4a:60:5e:24:f4:79:26:8a:a2:
03:72:fd:67:ba:85:25:e0:c7:f8:b6:0c:d3:ac:93:
34:aa:c9:fd:84:de:21:f3:69:9c:55:82:af:6e:a3:
98:a5:43:fe:bd:1b:0e:74:af:9f:62:87:15:d4:3b:
15:60:83:4d:1b:c9:6d:0a:cd:74:67:ae:5a:e2:68:
65:6a:ab:d6:b2:03:c1:da:43:2c:70:67:84:1c:18:
cc:95:33:2a:6c:5b:48:aa:3a:79:73:c5:36:81:d5:
a5:1d:32:6f:d0:fb:31:7d:a5:b0:31:6d:6f:df:9c:
93:3e:b3:a1:69:11:90:eb:0f:e8:52:35:0c:b5:ee:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:35:0F:4C:93:58:91:8C:68:E1:E3:0D:A0:86:D2:89:94:A1:99:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/328da984-1fbd-3c49-94d5-71cf7f97c69d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:41:f5:e8:cf:a8:b4:96:de:d3:7a:8e:b7:d6:50:2f:0e:0d:
04:1c:87:ad:38:be:d5:4f:b3:92:b9:46:bd:65:1c:b0:59:a8:
41:aa:eb:e4:aa:cf:ec:81:5e:93:f0:f5:7b:51:35:59:2e:a9:
0a:d8:cb:ec:39:0a:4e:8d:99:06:bd:cc:de:76:3d:47:e0:e2:
46:8a:83:60:eb:1a:5e:ca:dd:3e:c9:35:46:ef:1e:a4:dc:4c:
c5:32:e6:0f:d1:b3:5c:a0:ea:35:46:cd:9f:0f:07:e2:04:60:
33:a0:f2:96:36:f0:28:33:22:6e:e5:98:9d:71:c1:f5:44:ab:
32:5c:1e:e8:91:93:3a:c2:08:85:84:98:1c:fc:9e:d3:e4:b3:
cb:47:1d:e6:2a:7e:c5:94:8d:32:90:12:1e:2e:b1:bd:a4:61:
73:cc:63:78:b6:0c:a6:30:f9:1f:03:fa:56:c0:0f:e2:1e:ce:
36:73:ae:a2:ff:69:21:13:d4:7e:72:c7:c9:fc:cf:03:62:2a:
fa:d6:0f:83:fe:8c:41:09:dd:2b:90:bb:88:09:a5:9a:30:e7:
e7:ca:54:c4:e7:02:0a:2e:ca:46:d7:4f:be:84:c9:f4:c9:0b:
db:86:4c:d4:bf:cd:9e:5c:d9:60:2b:8c:56:7a:e0:86:98:6e:
aa:c2:a9:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYyidbr8HMMWsoY9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDYxMzEzMDAzNFoXDTI0MDkxMTEzMDAzNFowLzEtMCsGA1UEAxMk
MjAwOGQ3ZGItZWM2MC00ODdkLWEyMDEtNWQwNDBjZDZmYzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQtr9k1i8rvxaE3V8Y9jN9009WLRwli1rzjT
+4QwBX6VWZAkbOXnGLLjmnAxp5+00rP6kUQtsXdAR0qi78zjOYH9zqYavymoV0FO
Zaq7xKnEk8JelltWr+NCH+BIbb+z+/LDn6dTo3UAk9KmOOABmtesKChlhPga+NhA
O+lKYF4k9HkmiqIDcv1nuoUl4Mf4tgzTrJM0qsn9hN4h82mcVYKvbqOYpUP+vRsO
dK+fYocV1DsVYINNG8ltCs10Z65a4mhlaqvWsgPB2kMscGeEHBjMlTMqbFtIqjp5
c8U2gdWlHTJv0PsxfaWwMW1v35yTPrOhaRGQ6w/oUjUMte5ErQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHo1D0yTWJGMaOHjDaCG0omUoZl0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI4ZGE5ODQtMWZiZC0z
YzQ5LTk0ZDUtNzFjZjdmOTdjNjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1g4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZB9ejPqLSW3tN6jrfWUC8ODQQch604vtVPs5K5Rr1lHLBZqEGq6+Sq
z+yBXpPw9XtRNVkuqQrYy+w5Ck6NmQa9zN52PUfg4kaKg2DrGl7K3T7JNUbvHqTc
TMUy5g/Rs1yg6jVGzZ8PB+IEYDOg8pY28CgzIm7lmJ1xwfVEqzJcHuiRkzrCCIWE
mBz8ntPks8tHHeYqfsWUjTKQEh4usb2kYXPMY3i2DKYw+R8D+lbAD+IezjZzrqL/
aSET1H5yx8n8zwNiKvrWD4P+jEEJ3SuQu4gJpZow5+fKVMTnAgouykbXT76EyfTJ
C9uGTNS/zZ5c2WArjFZ64IaYbqrCqXc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:59:50 2025 by rpki-client