Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34369aa8-0896-3e8f-b764-c2a5457fe097.roa
File: 34369aa8-0896-3e8f-b764-c2a5457fe097.roa (raw, json)
Hash identifier: NRsr4D2bBTt3hktXJAenYAodq0j/83mMoZAVJ/18o/0=
Subject key identifier: DD:EB:D0:20:5F:36:10:76:DA:DE:AD:19:28:29:F3:F3:39:1F:14:BD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CDE118E0E9727C39A0C50300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34369aa8-0896-3e8f-b764-c2a5457fe097.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 50.96.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:18:e0:e9:72:7c:39:a0:c5:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=1e41603f-a58b-4b33-b09e-e6ead340c4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0b:77:53:87:11:ed:8f:a8:7c:fe:bf:32:45:
a0:fe:8e:e5:fd:15:aa:37:e8:53:b7:e6:1e:15:a6:
20:34:47:a0:9a:73:ad:0e:1e:a0:9e:7f:22:2a:88:
0f:a9:5c:93:1e:c3:1d:4d:51:43:be:ae:28:ba:91:
3f:b3:be:3c:59:10:61:b1:e4:c9:78:bc:c3:6c:54:
11:ae:b6:16:b0:be:9d:87:0a:3c:02:7d:96:ab:a5:
7e:b4:4c:e4:a8:32:ce:b1:da:4e:4c:da:ab:d8:8c:
9a:4c:e3:dd:89:d7:60:25:b4:c4:38:a0:eb:c5:8c:
84:ae:0d:35:e7:96:1c:19:ab:cb:b2:ab:67:a8:6d:
82:31:79:a9:a5:2c:00:7d:84:7c:64:0e:2d:f8:ec:
ff:76:c6:e6:b8:06:a3:dc:95:7c:c2:3c:ed:8c:3c:
4f:85:33:d2:38:84:77:c1:3e:59:50:a3:86:48:93:
30:cd:ca:76:dd:ca:35:0e:f0:da:b1:b5:83:ec:f2:
a8:0f:08:e0:46:30:32:5c:d3:40:db:83:ab:3e:d2:
25:06:db:6b:4b:e7:ae:84:a3:08:ea:3d:54:4c:63:
cd:ef:be:b8:fe:1f:5d:f3:57:40:4a:8d:52:41:38:
b4:b0:ae:84:93:80:d2:24:86:a4:22:2f:cb:98:4f:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EB:D0:20:5F:36:10:76:DA:DE:AD:19:28:29:F3:F3:39:1F:14:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34369aa8-0896-3e8f-b764-c2a5457fe097.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:2b:e1:7b:fb:0d:e1:7c:cd:92:a3:60:52:83:d5:f6:37:5c:
e1:71:fd:5f:14:8c:e2:f6:8e:8b:e7:8e:41:82:9c:86:06:fd:
5b:fc:b9:c4:6e:6d:98:00:6a:80:ee:72:6b:5b:ab:af:b2:d7:
bc:ab:f8:51:0d:27:d1:80:07:cf:62:7a:bb:e6:21:b4:ad:f1:
a7:05:83:ae:d9:7f:4a:f0:5d:77:e2:20:dc:01:ec:4c:05:73:
0d:3a:47:d2:35:3f:bb:cf:18:ac:61:c6:de:ad:b1:4c:c7:5a:
fd:f2:35:07:35:c4:04:5b:32:be:c8:78:67:0f:ca:63:ed:0d:
32:b6:fc:31:18:e0:c4:ff:c8:65:1b:1d:ae:ce:da:5e:0f:5e:
5d:41:47:0b:99:7b:33:95:90:82:6a:3b:da:ff:69:32:e4:d8:
d5:b8:58:3a:7d:e6:a0:b6:a1:39:24:bf:28:a6:6d:b7:09:10:
26:3e:7e:7b:25:b4:76:87:82:3b:c5:ba:b7:20:77:8c:1c:9a:
36:ea:ad:db:5e:e3:40:8d:28:dd:0b:a5:e2:fa:e9:65:cb:ff:
c0:96:a7:99:df:e1:21:21:c4:ab:95:0d:44:4c:c3:68:fc:87:
df:09:d6:f0:8d:86:7b:66:42:15:1b:82:3a:da:fc:0f:43:aa:
e9:3f:eb:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rjg6XJ8OaDFAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk
MWU0MTYwM2YtYTU4Yi00YjMzLWIwOWUtZTZlYWQzNDBjNGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAt3U4cR7Y+ofP6/MkWg/o7l/RWqN+hTt+Ye
FaYgNEegmnOtDh6gnn8iKogPqVyTHsMdTVFDvq4oupE/s748WRBhseTJeLzDbFQR
rrYWsL6dhwo8An2Wq6V+tEzkqDLOsdpOTNqr2IyaTOPdiddgJbTEOKDrxYyErg01
55YcGavLsqtnqG2CMXmppSwAfYR8ZA4t+Oz/dsbmuAaj3JV8wjztjDxPhTPSOIR3
wT5ZUKOGSJMwzcp23co1DvDasbWD7PKoDwjgRjAyXNNA24OrPtIlBttrS+euhKMI
6j1UTGPN7764/h9d81dASo1SQTi0sK6Ek4DSJIakIi/LmE/rHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3r0CBfNhB22t6tGSgp8/M5HxS9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzQzNjlhYTgtMDg5Ni0z
ZThmLWI3NjQtYzJhNTQ1N2ZlMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgr4Xv7DeF8zZKjYFKD1fY3XOFx/V8UjOL2jovnjkGCnIYG/Vv8ucRu
bZgAaoDucmtbq6+y17yr+FENJ9GAB89iervmIbSt8acFg67Zf0rwXXfiINwB7EwF
cw06R9I1P7vPGKxhxt6tsUzHWv3yNQc1xARbMr7IeGcPymPtDTK2/DEY4MT/yGUb
Ha7O2l4PXl1BRwuZezOVkIJqO9r/aTLk2NW4WDp95qC2oTkkvyimbbcJECY+fnsl
tHaHgjvFurcgd4wcmjbqrdte40CNKN0LpeL66WXL/8CWp5nf4SEhxKuVDURMw2j8
h98J1vCNhntmQhUbgjra/A9Dquk/6zQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:24 2025 by rpki-client