Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa
File: 54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa (raw, json)
Hash identifier: 5OVjMKUfs6mGjpHdtjYcz8czMCaCyyb2blJIqllx53U=
Subject key identifier: C6:6D:2E:61:01:15:F9:5D:8C:E8:C2:7D:0B:71:3C:47:F8:2F:D3:84
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F301C375A83836222C69780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa
Signing time: Tue 21 Jan 2025 20:37:21 +0000
ROA not before: Tue 21 Jan 2025 20:37:21 +0000
ROA not after: Mon 21 Apr 2025 19:37:21 +0000
asID: 7029
IP address blocks: 66.32.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:1c:37:5a:83:83:62:22:c6:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:37:21 2025 GMT
Not After : Apr 21 19:37:21 2025 GMT
Subject: CN=f50c4943-e206-42d6-88cb-8ba1183e7864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:c2:d6:9c:99:ac:91:ce:ed:41:82:ae:6e:
dc:45:8c:f4:e6:f3:2b:a0:40:3d:2e:ab:6e:c0:9c:
52:61:20:96:b6:83:0a:63:4b:43:a1:0f:17:70:66:
4c:71:56:ec:7c:4d:06:85:1b:c4:ca:e6:ab:6f:93:
fa:c4:3c:99:e3:5f:0b:75:ac:6c:ae:65:ac:33:7e:
52:f2:ca:9f:f8:fb:c2:68:9c:f7:0e:c2:f2:4e:3a:
de:a9:90:67:a8:18:51:b2:c5:c3:67:be:2b:9d:82:
fe:b5:b0:8e:7d:ce:d3:df:a9:62:67:ac:52:c7:c9:
68:31:18:55:26:54:df:20:a5:5a:b4:44:3f:89:b4:
2d:40:d9:76:84:23:70:0f:72:da:31:e1:eb:c1:78:
eb:dd:54:a8:64:07:be:bc:40:43:8c:55:cf:e4:b1:
54:78:df:6d:a9:e0:83:b5:24:77:c7:b1:53:65:0e:
7b:c3:14:e0:1e:bd:14:6b:7a:f3:95:fe:61:58:f9:
d3:33:5a:3b:1e:a0:36:52:92:ad:ae:94:d0:4f:33:
49:fe:fe:18:af:78:51:55:6f:7d:20:c2:f5:c8:85:
d9:42:24:a8:9e:61:da:03:27:f2:80:b4:5c:e8:a0:
31:51:0e:9c:b0:96:2f:88:b6:d4:3e:a5:b3:84:c6:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6D:2E:61:01:15:F9:5D:8C:E8:C2:7D:0B:71:3C:47:F8:2F:D3:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54f45230-5bf8-3d51-95dc-ccdaab9fac39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.32.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:2a:20:0c:96:c8:28:2c:5c:74:6e:1b:1b:a3:3d:be:9d:0b:
6d:c2:f2:d9:ac:2c:68:c6:0b:b5:e7:35:a8:ed:ae:7e:31:6d:
e6:1d:9e:8c:f4:d2:8f:d1:d7:9d:47:75:68:46:e8:94:de:ee:
d8:6b:e4:1c:8a:ff:ca:89:0d:b7:c1:98:6d:95:57:1f:2a:d0:
5a:0f:21:85:ca:ad:e2:fa:a8:b9:1b:6c:f5:1a:f9:e3:bc:51:
c0:d3:d2:83:24:d2:e6:6a:d0:0f:1d:59:9d:ed:7d:05:c4:8f:
d2:48:1a:31:80:67:36:28:c3:90:ad:fd:6b:28:cd:5a:0b:20:
03:a8:2a:91:8a:47:f4:d1:10:0a:e7:af:7d:86:26:d3:2b:73:
9c:c7:c1:01:64:74:11:05:35:81:7f:b9:9e:b1:c0:5e:05:c9:
ce:6b:3e:cb:fc:8b:51:c5:9f:91:4f:08:28:48:a1:5e:58:53:
8b:63:9f:0b:a1:58:27:8a:25:e6:98:bb:3e:83:15:08:a5:31:
02:f8:0f:e2:38:8c:3e:22:e7:75:25:69:be:7e:24:89:d0:21:
b4:16:44:ee:41:14:5a:f5:ab:db:d1:e9:56:16:ca:47:6d:84:
33:68:85:1e:15:4b:a0:07:26:2b:21:5e:54:69:eb:61:3f:09:
b6:7f:b0:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMBw3WoODYiLGl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDEyMTIwMzcyMVoXDTI1MDQyMTE5MzcyMVowLzEtMCsGA1UEAxMk
ZjUwYzQ5NDMtZTIwNi00MmQ2LTg4Y2ItOGJhMTE4M2U3ODY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkXC1pyZrJHO7UGCrm7cRYz05vMroEA9Lqtu
wJxSYSCWtoMKY0tDoQ8XcGZMcVbsfE0GhRvEyuarb5P6xDyZ418LdaxsrmWsM35S
8sqf+PvCaJz3DsLyTjreqZBnqBhRssXDZ74rnYL+tbCOfc7T36liZ6xSx8loMRhV
JlTfIKVatEQ/ibQtQNl2hCNwD3LaMeHrwXjr3VSoZAe+vEBDjFXP5LFUeN9tqeCD
tSR3x7FTZQ57wxTgHr0Ua3rzlf5hWPnTM1o7HqA2UpKtrpTQTzNJ/v4Yr3hRVW99
IML1yIXZQiSonmHaAyfygLRc6KAxUQ6csJYviLbUPqWzhMYCfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZtLmEBFfldjOjCfQtxPEf4L9OEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTRmNDUyMzAtNWJmOC0z
ZDUxLTk1ZGMtY2NkYWFiOWZhYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQiBQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI8qIAyWyCgsXHRuGxujPb6dC23C8tmsLGjGC7XnNajtrn4xbeYdnoz0
0o/R151HdWhG6JTe7thr5ByK/8qJDbfBmG2VVx8q0FoPIYXKreL6qLkbbPUa+eO8
UcDT0oMk0uZq0A8dWZ3tfQXEj9JIGjGAZzYow5Ct/WsozVoLIAOoKpGKR/TREArn
r32GJtMrc5zHwQFkdBEFNYF/uZ6xwF4Fyc5rPsv8i1HFn5FPCChIoV5YU4tjnwuh
WCeKJeaYuz6DFQilMQL4D+I4jD4i53Ulab5+JInQIbQWRO5BFFr1q9vR6VYWykdt
hDNohR4VS6AHJishXlRp62E/CbZ/sFk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:29:23 2025 by rpki-client