Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38621503-4c5c-3498-a0be-2d35dfa7a799.roa
File: 38621503-4c5c-3498-a0be-2d35dfa7a799.roa (raw, json)
Hash identifier: 2PV+Vt6AS4Jx8CQCGKO6HcxtyGOlvWsRoPXzvlIVJj0=
Subject key identifier: 78:2A:67:A4:5F:1C:61:A0:08:26:D5:45:2C:C4:7E:58:2E:47:93:8E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2111F3BD2EBF5D41E553D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38621503-4c5c-3498-a0be-2d35dfa7a799.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 75.89.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:1f:3b:d2:eb:f5:d4:1e:55:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=24b4479b-7409-4f25-8e52-d4bde1ed1dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:71:fa:bc:e2:6a:dd:a0:d7:46:08:9a:6c:
58:54:58:65:de:bc:13:85:b4:27:da:c2:cc:b5:71:
9c:a5:54:73:f0:67:bf:87:d4:bc:ce:e2:fe:18:93:
cd:19:18:f6:e0:cc:44:3a:78:d9:1a:31:12:ee:25:
d4:72:f8:af:1a:33:9e:2e:8d:eb:d3:03:4f:a0:32:
dc:de:fc:29:0d:94:38:67:c3:02:6f:f2:32:c5:1f:
c3:5b:fe:cb:73:e3:fd:8d:fc:38:dd:57:e5:27:c3:
ea:b1:07:c0:10:a9:6c:25:9b:a3:b6:e9:ff:84:70:
c2:aa:f4:e9:26:f5:16:a4:d0:d7:22:df:24:17:10:
4e:1d:59:2f:3d:99:c9:a0:74:18:a8:05:65:5f:2c:
14:73:b9:6f:22:a1:67:7d:e6:32:52:af:12:08:dd:
5b:25:5d:0b:6e:bf:49:d1:e2:05:4e:a9:00:ab:95:
de:9f:cf:7e:23:73:35:0b:b0:8c:86:7c:9b:44:90:
ba:b1:2b:c4:a6:4f:9b:ae:15:c1:bf:02:56:05:b9:
fd:7e:63:63:c6:41:08:b9:95:95:1a:58:6f:17:f6:
95:ff:47:41:4b:f3:83:a1:cb:dd:a7:ae:5b:a6:9e:
ca:b8:15:2c:6d:d7:16:c7:80:30:17:75:f9:9c:6d:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2A:67:A4:5F:1C:61:A0:08:26:D5:45:2C:C4:7E:58:2E:47:93:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38621503-4c5c-3498-a0be-2d35dfa7a799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:89:45:cd:44:36:42:3b:9a:10:2b:f7:bb:0f:3a:f1:8c:c5:
a9:8c:c8:5b:d8:0a:c9:7d:af:63:2a:09:0c:2d:19:74:2b:80:
6f:f7:c5:59:3b:90:1d:6d:f9:d0:78:46:b8:7c:79:dc:54:46:
46:cd:2c:14:6e:38:ee:a0:d0:67:64:fa:85:24:c0:cb:bb:50:
fc:7b:f3:f5:0c:5a:21:9f:e1:79:c1:62:f2:e2:c3:fd:db:c8:
99:ef:7e:e9:6b:d0:e5:b9:40:b2:29:11:70:98:50:c6:41:aa:
dc:69:b7:42:68:4c:46:5c:d0:39:04:39:dd:12:38:e4:42:52:
91:8f:73:5f:80:5f:69:54:61:92:34:4b:94:ec:eb:85:7a:8d:
fc:f6:0e:00:11:90:38:15:cb:85:5e:2a:cb:d5:2d:6d:41:12:
41:4c:57:b9:69:60:28:31:24:f9:ca:2b:01:d6:ea:5c:a5:2a:
0c:79:db:11:87:8a:be:c6:d6:b0:ae:43:3c:34:16:81:48:a1:
0e:70:27:67:4c:a4:a5:05:e7:16:8e:3d:06:ce:d2:69:64:35:
11:5e:c3:04:36:33:e6:a8:35:e6:d2:d9:4a:0e:49:47:b4:66:
42:1a:18:a5:ab:cf:d3:64:12:5f:6b:2f:7b:ba:38:6d:fb:b3:
2b:cc:b3:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER870uv11B5VPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
MjRiNDQ3OWItNzQwOS00ZjI1LThlNTItZDRiZGUxZWQxZGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn99x+rziat2g10YImmxYVFhl3rwThbQn2sLM
tXGcpVRz8Ge/h9S8zuL+GJPNGRj24MxEOnjZGjES7iXUcvivGjOeLo3r0wNPoDLc
3vwpDZQ4Z8MCb/IyxR/DW/7Lc+P9jfw43VflJ8PqsQfAEKlsJZujtun/hHDCqvTp
JvUWpNDXIt8kFxBOHVkvPZnJoHQYqAVlXywUc7lvIqFnfeYyUq8SCN1bJV0Lbr9J
0eIFTqkAq5Xen89+I3M1C7CMhnybRJC6sSvEpk+brhXBvwJWBbn9fmNjxkEIuZWV
GlhvF/aV/0dBS/ODocvdp65bpp7KuBUsbdcWx4AwF3X5nG1qCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgqZ6RfHGGgCCbVRSzEflguR5OOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzg2MjE1MDMtNGM1Yy0z
NDk4LWEwYmUtMmQzNWRmYTdhNzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1m4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABiJRc1ENkI7mhAr97sPOvGMxamMyFvYCsl9r2MqCQwtGXQrgG/3xVk7
kB1t+dB4Rrh8edxURkbNLBRuOO6g0Gdk+oUkwMu7UPx78/UMWiGf4XnBYvLiw/3b
yJnvfulr0OW5QLIpEXCYUMZBqtxpt0JoTEZc0DkEOd0SOORCUpGPc1+AX2lUYZI0
S5Ts64V6jfz2DgARkDgVy4VeKsvVLW1BEkFMV7lpYCgxJPnKKwHW6lylKgx52xGH
ir7G1rCuQzw0FoFIoQ5wJ2dMpKUF5xaOPQbO0mlkNRFewwQ2M+aoNebS2UoOSUe0
ZkIaGKWrz9NkEl9rL3u6OG37syvMs+Q=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:15:03 2025 by rpki-client