Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa
File: 4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa (raw, json)
Hash identifier: gd0w/vzhDbUtUfhoaoB8euljSo1VXZZp4Ldgp6MiqUo=
Subject key identifier: B8:DA:05:B4:0A:83:83:52:F1:D5:C8:32:F6:8D:6E:DB:E7:17:2C:8F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488AE0B819286F45D890DFDC00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 69.66.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:b8:19:28:6f:45:d8:90:df:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=02875908-9e96-4d4c-89ef-a22795289a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:0d:6e:fb:c7:64:1f:d0:28:0e:f7:09:fe:
40:6d:bd:f8:f6:fe:5d:9c:76:13:79:0e:3d:36:f4:
6b:60:52:68:78:55:ee:d9:af:8f:22:44:1a:c7:fb:
12:05:3f:8e:0b:ab:fb:70:bc:3f:f5:e6:18:04:8d:
ec:1d:6b:ef:a9:f6:fd:d4:c2:09:93:fa:b0:cf:ea:
23:08:f5:a8:dc:9f:62:9f:33:69:b2:20:66:0b:36:
d3:6f:46:28:fb:0f:4d:98:48:d2:2c:cc:f5:12:e7:
3f:bf:12:16:62:55:ec:5e:2d:cb:43:6c:f1:ea:2d:
2c:d4:64:b1:c8:e1:5f:50:8f:ea:fb:f8:e1:92:14:
53:0b:95:32:6e:16:1d:0b:83:05:9f:e9:e3:d9:18:
5e:32:8f:fa:f8:c9:26:47:71:59:2d:9c:1e:33:4a:
c7:16:2e:2e:56:a6:26:e6:22:06:ae:8e:a0:04:2e:
f2:a7:e5:92:10:5a:a3:32:7e:52:c4:50:96:e3:60:
c1:50:6b:b0:d6:5f:66:4a:0d:65:63:0f:fc:7c:9e:
3f:5a:3f:39:75:7b:34:03:e5:ce:39:77:97:7e:d5:
4b:ff:d1:cc:15:56:17:a9:89:65:c1:78:0a:97:00:
1c:88:a4:23:1c:3c:0a:80:e1:32:19:ff:5f:e1:81:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DA:05:B4:0A:83:83:52:F1:D5:C8:32:F6:8D:6E:DB:E7:17:2C:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4067fc7f-b703-3c62-828d-ce6a2ee2cf93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.66.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:80:9b:a0:b5:99:6a:12:33:86:ee:2d:17:b1:04:8e:1d:4e:
32:31:5d:e2:c3:fd:58:a5:dc:e4:4f:fc:2e:a7:ff:b8:f6:c0:
bf:df:c7:6d:33:3a:73:f1:57:c3:19:b8:2d:40:10:aa:9e:f0:
fb:12:27:59:9c:1c:79:5a:1a:48:36:96:bb:b1:c9:01:a1:16:
54:4e:95:d3:94:39:b2:af:67:31:b1:61:e7:da:a3:64:bf:56:
b7:9b:50:84:49:3c:c7:f5:c2:36:50:d3:85:9f:59:96:1c:b7:
16:a0:14:f1:40:2f:dc:a8:41:07:0a:28:5d:40:08:35:0e:b6:
53:30:c8:87:a8:cd:34:45:9c:54:f4:3d:9f:25:95:80:19:04:
01:ca:e1:66:37:76:1d:24:99:ad:7c:18:ce:3e:79:c4:26:09:
91:e8:fe:1f:56:69:3f:fc:ec:45:81:48:9f:f6:c5:65:4f:10:
56:44:f2:d9:0f:62:bb:dc:4d:42:7c:12:7e:c1:4c:bc:65:6f:
27:92:32:ef:a7:3a:1a:ba:5b:0b:df:65:1f:00:ae:ec:b0:66:
22:88:19:47:29:74:4e:27:fe:9c:fa:a0:86:25:d3:f6:77:49:
38:3b:70:62:38:29:ef:a5:47:9f:df:1a:11:1f:d4:a9:d5:26:
83:5e:31:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LgZKG9F2JDf3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
MDI4NzU5MDgtOWU5Ni00ZDRjLTg5ZWYtYTIyNzk1Mjg5YTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDgNbvvHZB/QKA73Cf5Abb349v5dnHYTeQ49
NvRrYFJoeFXu2a+PIkQax/sSBT+OC6v7cLw/9eYYBI3sHWvvqfb91MIJk/qwz+oj
CPWo3J9inzNpsiBmCzbTb0Yo+w9NmEjSLMz1Euc/vxIWYlXsXi3LQ2zx6i0s1GSx
yOFfUI/q+/jhkhRTC5UybhYdC4MFn+nj2RheMo/6+MkmR3FZLZweM0rHFi4uVqYm
5iIGro6gBC7yp+WSEFqjMn5SxFCW42DBUGuw1l9mSg1lYw/8fJ4/Wj85dXs0A+XO
OXeXftVL/9HMFVYXqYllwXgKlwAciKQjHDwKgOEyGf9f4YEPFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLjaBbQKg4NS8dXIMvaNbtvnFyyPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDA2N2ZjN2YtYjcwMy0z
YzYyLTgyOGQtY2U2YTJlZTJjZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqAm6C1mWoSM4buLRexBI4dTjIxXeLD/Vil3ORP/C6n/7j2wL/fx20z
OnPxV8MZuC1AEKqe8PsSJ1mcHHlaGkg2lruxyQGhFlROldOUObKvZzGxYefao2S/
VrebUIRJPMf1wjZQ04WfWZYctxagFPFAL9yoQQcKKF1ACDUOtlMwyIeozTRFnFT0
PZ8llYAZBAHK4WY3dh0kma18GM4+ecQmCZHo/h9WaT/87EWBSJ/2xWVPEFZE8tkP
YrvcTUJ8En7BTLxlbyeSMu+nOhq6WwvfZR8AruywZiKIGUcpdE4n/pz6oIYl0/Z3
STg7cGI4Ke+lR5/fGhEf1KnVJoNeMTk=
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:28:46 2025 by rpki-client