Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4025419a-68e6-35c9-9aa5-d4ce49691d7a.roa
File: 4025419a-68e6-35c9-9aa5-d4ce49691d7a.roa (raw, json)
Hash identifier: cyTHFw+q23mcKl0jcqOYJW/wDVH2ED55dDWgXPvO3u4=
Subject key identifier: F9:0F:CA:68:0F:35:3B:21:B4:CA:24:89:51:7E:00:03:45:8B:DD:5C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F4E7BDC6BE1F9B0FC180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4025419a-68e6-35c9-9aa5-d4ce49691d7a.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 173.186.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f4:e7:bd:c6:be:1f:9b:0f:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=055a598e-45bf-4bf2-abce-c57626dfa78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:d7:07:e6:f3:60:e5:93:6b:d5:d8:9e:af:
54:55:bb:da:f4:7d:17:71:32:9b:18:d7:df:45:34:
d6:ef:af:0c:23:36:89:b8:13:db:16:1f:7d:c5:8a:
4d:31:c2:ad:1a:f5:17:6b:b5:83:0b:51:9f:8e:a3:
d4:a1:b7:fa:1f:d0:73:92:00:10:d9:60:43:2f:cb:
50:26:24:bd:94:18:86:d6:c8:b9:81:92:08:3b:5f:
34:de:bf:65:5a:89:ab:45:a6:77:2f:fc:2b:f5:90:
1a:79:f3:45:cc:65:07:f6:30:52:54:05:1d:f2:d4:
a7:c2:76:3c:72:db:12:4b:d0:04:36:23:2a:95:6b:
7e:1f:c7:08:df:82:ba:27:ba:a3:ac:e8:dc:e4:4a:
26:1c:85:1d:10:86:ae:8d:81:7f:5a:2f:7f:56:0c:
ee:1f:a4:80:ad:39:f6:3b:91:fa:d4:b7:94:e9:31:
e7:30:60:17:ec:e4:9c:d8:00:53:7a:e3:a8:a1:9b:
a4:07:84:6e:81:98:b3:58:f4:74:dc:65:d8:58:2d:
fb:d5:18:04:8c:cb:91:44:6c:a6:58:fa:6b:dd:e7:
ab:01:f6:a1:34:f0:0a:48:cf:9d:31:2e:08:e3:e6:
d5:14:fa:78:d7:33:04:7f:96:ab:d3:95:b1:58:6a:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0F:CA:68:0F:35:3B:21:B4:CA:24:89:51:7E:00:03:45:8B:DD:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4025419a-68e6-35c9-9aa5-d4ce49691d7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.186.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:d9:1b:7d:f5:21:72:51:b1:db:45:b0:35:35:fa:78:b2:1c:
54:80:88:fd:fa:b8:1a:f3:05:0a:e4:0d:dd:33:af:12:e7:a2:
1c:de:c1:0d:17:61:ef:f9:fc:99:45:4d:23:a2:5d:f7:b8:3f:
00:cf:32:fd:04:19:f0:bf:03:d9:75:44:cf:74:1c:4b:fb:d7:
95:76:2e:28:97:c9:7a:b0:dc:90:86:51:02:9e:c3:1f:58:9a:
fc:2b:90:7d:4b:af:1d:66:d0:fd:7a:05:90:95:52:25:a5:50:
c5:4a:2b:2c:9a:af:ce:3c:0f:87:4b:80:41:7d:09:68:57:da:
5e:23:34:cc:9c:69:26:08:01:cc:6e:17:16:09:f3:42:eb:08:
ea:0a:d0:06:df:56:72:af:14:31:c4:91:59:33:36:5e:4a:b6:
0c:9d:47:40:4a:bd:00:40:2f:3b:23:d0:2a:48:44:90:ed:70:
e0:d7:58:91:83:80:13:dc:6c:9b:dd:2e:c9:96:bd:cd:7d:b6:
c5:10:19:19:b2:a9:e7:b0:91:ab:3a:fa:4b:66:50:b8:3e:32:
64:b6:52:bd:5b:24:35:fb:53:09:91:35:c6:0c:1a:1a:69:d6:
f8:6d:83:a2:3d:2b:bb:46:11:11:f4:e0:0c:eb:42:0c:a3:ec:
1b:fe:d0:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPTnvca+H5sPwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
MDU1YTU5OGUtNDViZi00YmYyLWFiY2UtYzU3NjI2ZGZhNzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunPXB+bzYOWTa9XYnq9UVbva9H0XcTKbGNff
RTTW768MIzaJuBPbFh99xYpNMcKtGvUXa7WDC1GfjqPUobf6H9BzkgAQ2WBDL8tQ
JiS9lBiG1si5gZIIO1803r9lWomrRaZ3L/wr9ZAaefNFzGUH9jBSVAUd8tSnwnY8
ctsSS9AENiMqlWt+H8cI34K6J7qjrOjc5EomHIUdEIaujYF/Wi9/VgzuH6SArTn2
O5H61LeU6THnMGAX7OSc2ABTeuOooZukB4RugZizWPR03GXYWC371RgEjMuRRGym
WPpr3eerAfahNPAKSM+dMS4I4+bVFPp41zMEf5ar05WxWGqVywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPkPymgPNTshtMokiVF+AANFi91cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDAyNTQxOWEtNjhlNi0z
NWM5LTlhYTUtZDRjZTQ5NjkxZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErboAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbZG331IXJRsdtFsDU1+niyHFSAiP36uBrzBQrkDd0zrxLnohzewQ0X
Ye/5/JlFTSOiXfe4PwDPMv0EGfC/A9l1RM90HEv715V2LiiXyXqw3JCGUQKewx9Y
mvwrkH1Lrx1m0P16BZCVUiWlUMVKKyyar848D4dLgEF9CWhX2l4jNMycaSYIAcxu
FxYJ80LrCOoK0AbfVnKvFDHEkVkzNl5KtgydR0BKvQBALzsj0CpIRJDtcODXWJGD
gBPcbJvdLsmWvc19tsUQGRmyqeewkas6+ktmULg+MmS2Ur1bJDX7UwmRNcYMGhpp
1vhtg6I9K7tGERH04AzrQgyj7Bv+0Mw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:07 2025 by rpki-client