Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46aed7aa-f96a-3704-8ba5-da4308b5b0ac.roa
File: 46aed7aa-f96a-3704-8ba5-da4308b5b0ac.roa (raw, json)
Hash identifier: y4ilRMwixlmRLyRtmvyBIv7m6lFMH28Q8E31OtbmT40=
Subject key identifier: 20:25:C8:50:D1:41:4D:7E:AE:39:35:00:A0:3D:04:C2:EC:A3:6A:79
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F30B6B4E0EB63844EAE5D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46aed7aa-f96a-3704-8ba5-da4308b5b0ac.roa
Signing time: Tue 21 Jan 2025 20:38:34 +0000
ROA not before: Tue 21 Jan 2025 20:38:34 +0000
ROA not after: Mon 21 Apr 2025 19:38:34 +0000
asID: 7029
IP address blocks: 174.131.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:b6:b4:e0:eb:63:84:4e:ae:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:38:34 2025 GMT
Not After : Apr 21 19:38:34 2025 GMT
Subject: CN=99646d2e-df42-4111-a9fc-00df8871f163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:bd:87:fd:56:d1:58:1f:3e:60:57:18:79:
f2:0d:27:34:47:88:2d:07:7d:68:ac:80:7c:02:95:
bd:ac:46:f4:2f:39:9d:97:bb:d7:a9:8b:09:64:c9:
47:92:58:1a:43:a6:01:f8:79:21:e2:11:95:d1:5b:
8e:d7:83:75:10:d5:04:17:3f:c6:9b:16:d9:69:e7:
b5:66:78:67:71:6c:5b:ff:93:fb:82:3c:0f:fa:3a:
12:2a:93:c2:ba:2f:24:b4:a8:97:89:6e:6b:c1:87:
87:bb:a2:c2:2d:7f:18:20:15:2d:a1:84:e8:84:7d:
9f:4c:0e:5a:22:e0:ad:7b:bf:65:20:4c:2c:59:b2:
64:dc:4f:cd:6e:0f:9b:5d:cd:02:15:65:3c:8b:98:
bc:fc:d1:51:a6:1a:c3:2c:a9:f2:af:b9:55:a1:53:
76:63:f9:7f:9a:fc:dd:6e:24:22:6a:ff:a9:60:b7:
61:c7:7e:9b:ca:14:15:1b:3d:55:30:e9:91:f0:a0:
9c:db:00:42:6c:47:89:68:33:7c:ea:b9:0e:ce:7a:
98:98:0c:4e:6f:58:55:8a:bb:8e:5b:f3:6d:a1:f5:
06:db:27:b5:69:b7:9c:9f:c3:89:90:4e:43:45:1c:
a3:63:27:45:a8:fe:f4:1c:eb:fe:a9:b3:6e:a5:eb:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:25:C8:50:D1:41:4D:7E:AE:39:35:00:A0:3D:04:C2:EC:A3:6A:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46aed7aa-f96a-3704-8ba5-da4308b5b0ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.131.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:01:5f:9f:a5:7d:39:a2:b2:74:74:99:e5:a8:7d:bc:c3:1a:
45:8b:44:d4:5b:79:67:82:ce:b8:8f:1b:3c:1f:38:5f:1f:1b:
2c:6e:2e:2c:f9:29:ba:64:93:1f:c6:5d:52:a7:e6:15:10:b2:
5f:e4:77:bc:e2:7f:b7:bb:4f:06:87:ed:01:c7:cb:84:cd:7a:
00:c6:7b:e9:90:5b:6c:8d:7d:c9:3e:6d:9b:62:ca:a9:9d:0b:
bf:a8:c8:02:1a:50:b0:c6:38:a5:ee:d0:c4:47:1b:c1:a8:c4:
d6:79:34:81:51:79:b0:a2:1d:62:57:02:a9:0e:12:74:56:72:
61:78:5d:a7:25:bd:0c:80:74:a4:99:56:f7:cb:70:4d:36:d7:
39:91:ae:1b:dd:b1:e3:db:48:77:06:0d:92:aa:f2:5c:55:91:
ff:19:6f:f7:54:0a:de:77:b0:b3:13:8a:c9:b7:af:d2:ec:97:
df:2c:56:6c:ab:fa:c6:8f:73:54:1f:a9:3c:e2:d4:8f:1d:b4:
9f:cf:b1:87:11:83:db:6a:fd:79:e1:ac:dd:22:7f:a0:f5:00:
df:fd:19:9a:93:c3:a5:4e:d6:fc:68:4b:3d:94:bf:97:55:4f:
57:d2:0a:e8:40:81:94:5a:68:70:0b:cf:cb:91:9f:fa:ee:7e:
a3:57:a8:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMLa04OtjhE6uXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDEyMTIwMzgzNFoXDTI1MDQyMTE5MzgzNFowLzEtMCsGA1UEAxMk
OTk2NDZkMmUtZGY0Mi00MTExLWE5ZmMtMDBkZjg4NzFmMTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqe9h/1W0VgfPmBXGHnyDSc0R4gtB31orIB8
ApW9rEb0Lzmdl7vXqYsJZMlHklgaQ6YB+Hkh4hGV0VuO14N1ENUEFz/GmxbZaee1
ZnhncWxb/5P7gjwP+joSKpPCui8ktKiXiW5rwYeHu6LCLX8YIBUtoYTohH2fTA5a
IuCte79lIEwsWbJk3E/Nbg+bXc0CFWU8i5i8/NFRphrDLKnyr7lVoVN2Y/l/mvzd
biQiav+pYLdhx36byhQVGz1VMOmR8KCc2wBCbEeJaDN86rkOznqYmAxOb1hViruO
W/NtofUG2ye1abecn8OJkE5DRRyjYydFqP70HOv+qbNupeuHkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAlyFDRQU1+rjk1AKA9BMLso2p5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDZhZWQ3YWEtZjk2YS0z
NzA0LThiYTUtZGE0MzA4YjViMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroP4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUBX5+lfTmisnR0meWofbzDGkWLRNRbeWeCzriPGzwfOF8fGyxuLiz5
Kbpkkx/GXVKn5hUQsl/kd7zif7e7TwaH7QHHy4TNegDGe+mQW2yNfck+bZtiyqmd
C7+oyAIaULDGOKXu0MRHG8GoxNZ5NIFRebCiHWJXAqkOEnRWcmF4XaclvQyAdKSZ
VvfLcE021zmRrhvdsePbSHcGDZKq8lxVkf8Zb/dUCt53sLMTism3r9Lsl98sVmyr
+saPc1QfqTzi1I8dtJ/PsYcRg9tq/XnhrN0if6D1AN/9GZqTw6VO1vxoSz2Uv5dV
T1fSCuhAgZRaaHALz8uRn/rufqNXqHI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:47 2025 by rpki-client