Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62f0b57b-daef-3027-8cda-e48512f11a8b.roa
File: 62f0b57b-daef-3027-8cda-e48512f11a8b.roa (raw, json)
Hash identifier: ZujF7/csW2609R4UpExApAGvo9ieAsN1NCFK/UEWxqg=
Subject key identifier: D2:18:3F:71:E3:4D:D8:5C:4C:AC:A0:05:8E:23:B9:FA:30:EB:C1:39
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CB93C9F27A487DB509E1CF60
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62f0b57b-daef-3027-8cda-e48512f11a8b.roa
Signing time: Thu 06 Feb 2025 18:13:46 +0000
ROA not before: Thu 06 Feb 2025 18:13:46 +0000
ROA not after: Wed 07 May 2025 17:13:46 +0000
asID: 7029
IP address blocks: 69.66.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:93:c9:f2:7a:48:7d:b5:09:e1:cf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 6 18:13:46 2025 GMT
Not After : May 7 17:13:46 2025 GMT
Subject: CN=b7ac4773-c834-49f6-9b1b-9433a7ced784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:55:b4:b9:2a:bc:70:c5:38:69:70:c6:96:
76:07:28:22:e1:ca:78:eb:51:6a:19:a9:32:6f:15:
d4:07:a8:43:ef:e5:1f:71:56:be:f8:d6:14:13:5f:
6b:17:27:8b:3e:89:cb:a5:3d:0a:71:62:fc:c2:92:
00:1f:02:63:8c:4a:24:32:d6:37:d0:0c:fe:7b:3c:
e6:2c:3f:3a:99:61:c4:8c:8e:9c:f5:24:cd:4a:a6:
0d:8c:c8:9a:d4:2f:35:2e:63:7f:e9:a8:49:fe:96:
93:7a:37:36:d3:14:ef:3a:5b:b3:20:c1:fa:e7:e9:
30:99:40:af:3e:79:9a:0a:12:b4:36:0c:f7:2c:2b:
a3:5e:33:41:46:3d:2d:e7:b5:62:d0:93:c8:9a:2c:
a6:20:78:c4:b9:ec:7e:49:ff:41:1c:8a:0f:d0:54:
6f:15:38:e9:9e:dd:a9:86:42:85:3f:8f:5c:07:5a:
0e:d8:c8:ed:a4:66:4e:26:0c:22:9a:0c:c2:51:11:
fb:9b:42:4e:f0:92:9c:af:0f:52:64:67:7f:60:76:
c3:57:36:b9:49:f0:92:97:a9:8d:cf:b8:c0:9f:bc:
5b:86:8d:2e:bf:73:a6:59:05:8b:7b:00:2c:8d:e1:
4d:f2:11:81:66:ec:0b:fb:de:f3:f8:1b:51:39:a5:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:18:3F:71:E3:4D:D8:5C:4C:AC:A0:05:8E:23:B9:FA:30:EB:C1:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62f0b57b-daef-3027-8cda-e48512f11a8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.66.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:90:cf:51:e7:89:9d:7c:f3:08:89:04:d6:54:fb:2f:5a:6e:
41:00:85:36:de:69:a5:96:64:4c:75:9d:56:e3:87:33:9a:d6:
e5:00:00:3e:ab:9c:c0:ef:f5:74:bd:da:de:b5:95:df:86:78:
08:ff:96:c0:63:f9:0c:2f:55:22:13:0d:ea:ea:42:45:bc:ea:
ac:87:e0:4c:24:97:e8:9f:c8:6b:04:9c:78:f4:dd:ad:97:45:
c3:e5:ed:c0:2a:c6:87:74:df:b1:3f:ef:12:c7:76:66:3c:98:
c5:2e:20:2e:24:92:b2:42:19:6d:d5:62:a1:1b:88:96:c7:bb:
cf:86:fd:42:7f:87:38:e8:5d:55:ed:8c:5b:e8:bc:59:a5:e6:
ce:ad:6e:2b:87:f4:7b:b1:d1:c4:23:25:db:9c:cf:46:56:07:
a2:72:81:05:5b:db:86:47:11:b0:78:d7:81:15:1e:ae:50:1f:
37:d7:f7:e3:4e:fe:a0:12:7a:c2:e4:1c:ff:07:24:73:cd:85:
74:6f:9c:c9:ee:44:0c:40:f8:c9:c3:f6:40:3e:65:f1:06:11:
44:28:84:6f:42:f7:8b:1d:7c:36:2b:de:3a:de:c3:bc:ca:8d:
59:37:db:f2:6d:f8:30:c0:66:fb:91:a9:c2:89:d7:fe:39:4e:
a8:8a:19:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk8nyekh9tQnhz2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwNjE4MTM0NloXDTI1MDUwNzE3MTM0NlowLzEtMCsGA1UEAxMk
YjdhYzQ3NzMtYzgzNC00OWY2LTliMWItOTQzM2E3Y2VkNzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/ZVtLkqvHDFOGlwxpZ2Bygi4cp461FqGaky
bxXUB6hD7+UfcVa++NYUE19rFyeLPonLpT0KcWL8wpIAHwJjjEokMtY30Az+ezzm
LD86mWHEjI6c9STNSqYNjMia1C81LmN/6ahJ/paTejc20xTvOluzIMH65+kwmUCv
PnmaChK0Ngz3LCujXjNBRj0t57Vi0JPImiymIHjEuex+Sf9BHIoP0FRvFTjpnt2p
hkKFP49cB1oO2MjtpGZOJgwimgzCURH7m0JO8JKcrw9SZGd/YHbDVza5SfCSl6mN
z7jAn7xbho0uv3OmWQWLewAsjeFN8hGBZuwL+97z+BtROaVn1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNIYP3HjTdhcTKygBY4jufow68E5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjJmMGI1N2ItZGFlZi0z
MDI3LThjZGEtZTQ4NTEyZjExYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRUKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAiQz1HniZ188wiJBNZU+y9abkEAhTbeaaWWZEx1nVbjhzOa1uUAAD6r
nMDv9XS92t61ld+GeAj/lsBj+QwvVSITDerqQkW86qyH4Ewkl+ifyGsEnHj03a2X
RcPl7cAqxod037E/7xLHdmY8mMUuIC4kkrJCGW3VYqEbiJbHu8+G/UJ/hzjoXVXt
jFvovFml5s6tbiuH9Hux0cQjJducz0ZWB6JygQVb24ZHEbB414EVHq5QHzfX9+NO
/qASesLkHP8HJHPNhXRvnMnuRAxA+MnD9kA+ZfEGEUQohG9C94sdfDYr3jrew7zK
jVk32/Jt+DDAZvuRqcKJ1/45TqiKGX4=
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:07:32 2025 by rpki-client