Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4eb2d6e5-6dcf-3008-a232-4e3c5a59ba7f.roa
File: 4eb2d6e5-6dcf-3008-a232-4e3c5a59ba7f.roa (raw, json)
Hash identifier: FBD7ZVnPh/SRLqTpiDYifUc1yJCbmDQFeB1Z/LpGpJ8=
Subject key identifier: CC:2D:D4:34:7D:5A:EB:3F:AB:9F:29:7E:B8:F2:00:FB:32:94:E0:D1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F45A43F438D045A4A200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4eb2d6e5-6dcf-3008-a232-4e3c5a59ba7f.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 162.40.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f4:5a:43:f4:38:d0:45:a4:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=8475d782-dc31-49ea-b831-6b07adf9191c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:24:e6:06:45:4f:a1:d1:00:eb:20:e0:95:
39:8f:e2:35:f7:cf:7f:fd:5c:74:ae:35:41:78:4a:
1d:a0:46:76:f3:54:0d:d5:e3:5b:bd:83:72:cf:33:
9d:03:85:42:86:08:29:80:b2:a1:eb:fb:76:6f:c9:
0a:26:f0:c9:5e:92:16:db:c7:d1:93:35:6d:2d:07:
d3:8c:92:d5:00:a2:f9:95:2c:97:b2:ef:90:21:c6:
50:52:34:d2:30:73:06:27:2d:1c:d4:04:09:ad:6d:
08:60:3d:7f:f9:e3:77:ee:41:f3:b9:8b:43:6c:c4:
79:bb:35:1f:2f:92:b0:8a:1f:9b:25:79:f4:4e:47:
45:fd:25:50:0b:57:a1:d7:d2:fe:e9:5a:12:65:3c:
00:fd:79:29:1d:bd:20:e4:59:60:cd:90:6f:74:76:
d8:d4:f4:bf:9b:cb:de:18:97:73:d9:2d:40:a5:52:
7b:0d:72:73:6d:6e:f6:a2:f7:76:04:38:66:dc:ba:
50:d6:54:50:7c:7f:a2:c5:dd:b4:17:70:25:81:88:
52:39:10:c1:fa:9d:f2:c7:70:7a:e1:a2:97:5f:0b:
6c:2f:38:79:9c:99:e4:95:02:65:fd:6f:0e:c5:b6:
f7:11:6d:8e:ca:21:92:71:da:f4:f7:48:94:0f:5e:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:D4:34:7D:5A:EB:3F:AB:9F:29:7E:B8:F2:00:FB:32:94:E0:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4eb2d6e5-6dcf-3008-a232-4e3c5a59ba7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
162.40.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:28:b5:86:f6:4e:6d:1e:23:93:9c:cf:c1:a7:99:7f:c1:6c:
96:ee:28:01:0c:18:ba:d2:55:57:5a:88:e2:ce:c0:e8:d9:78:
12:13:ef:e0:6a:aa:8f:88:48:4c:e6:9d:8d:fc:af:c4:3c:cf:
a5:23:25:22:31:00:b6:b1:d1:64:88:5b:34:2a:b2:29:5f:a4:
a8:22:c1:42:5a:48:5b:a8:e2:7c:d8:0d:4f:75:13:df:ba:8d:
1b:85:99:39:e3:7a:e1:8a:ca:c9:b3:25:3f:da:92:e5:e1:d5:
db:d1:34:7a:c8:dd:d0:83:9b:33:ac:9f:c4:e9:14:f0:55:a1:
0b:33:61:22:cd:05:a5:f6:15:0a:9f:2a:7c:03:0e:cf:0b:3a:
73:24:ae:ef:2c:ff:45:50:c6:df:a4:16:b1:01:d3:9e:07:da:
28:87:70:3f:fc:ca:ae:eb:7d:1c:2e:df:61:b1:22:bf:cc:64:
59:e8:24:db:79:cb:e0:54:9a:f9:97:57:bb:6e:16:14:2c:26:
4c:1d:95:f3:79:08:70:62:63:dd:8b:94:40:51:e6:ad:df:bc:
59:1c:2f:a6:7d:30:e0:cd:3e:6a:8b:b1:3e:48:61:27:1c:2b:
da:39:88:c0:b5:64:6e:26:39:87:aa:38:f1:70:2c:c8:04:d9:
08:24:ac:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPRaQ/Q40EWkogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
ODQ3NWQ3ODItZGMzMS00OWVhLWI4MzEtNmIwN2FkZjkxOTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAok5gZFT6HRAOsg4JU5j+I1989//Vx0rjVB
eEodoEZ281QN1eNbvYNyzzOdA4VChggpgLKh6/t2b8kKJvDJXpIW28fRkzVtLQfT
jJLVAKL5lSyXsu+QIcZQUjTSMHMGJy0c1AQJrW0IYD1/+eN37kHzuYtDbMR5uzUf
L5Kwih+bJXn0TkdF/SVQC1eh19L+6VoSZTwA/XkpHb0g5FlgzZBvdHbY1PS/m8ve
GJdz2S1ApVJ7DXJzbW72ovd2BDhm3LpQ1lRQfH+ixd20F3AlgYhSORDB+p3yx3B6
4aKXXwtsLzh5nJnklQJl/W8Oxbb3EW2OyiGScdr090iUD158+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwt1DR9Wus/q58pfrjyAPsylODRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGViMmQ2ZTUtNmRjZi0z
MDA4LWEyMzItNGUzYzVhNTliYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoigdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4otYb2Tm0eI5Ocz8GnmX/BbJbuKAEMGLrSVVdaiOLOwOjZeBIT7+Bq
qo+ISEzmnY38r8Q8z6UjJSIxALax0WSIWzQqsilfpKgiwUJaSFuo4nzYDU91E9+6
jRuFmTnjeuGKysmzJT/akuXh1dvRNHrI3dCDmzOsn8TpFPBVoQszYSLNBaX2FQqf
KnwDDs8LOnMkru8s/0VQxt+kFrEB054H2iiHcD/8yq7rfRwu32GxIr/MZFnoJNt5
y+BUmvmXV7tuFhQsJkwdlfN5CHBiY92LlEBR5q3fvFkcL6Z9MODNPmqLsT5IYScc
K9o5iMC1ZG4mOYeqOPFwLMgE2QgkrME=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:07 2025 by rpki-client