Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa
File: 6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa (raw, json)
Hash identifier: 4SwaklSHeewQusP6xUvgrhGR6PGLYGE7hpSLfKxd2FM=
Subject key identifier: 58:3A:7E:5E:D7:BF:43:83:CC:43:9C:6E:2E:9B:1A:02:31:21:32:82
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858488AE0B3B082223C857FD0B200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 7029
IP address blocks: 72.16.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:b3:b0:82:22:3c:85:7f:d0:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=7d1d76f6-3c9a-4109-9bc7-2fbf978659f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:bc:29:33:40:94:5d:ef:8a:c2:fb:ea:52:
cb:7f:06:35:5d:60:6a:db:f1:c9:e4:94:a2:fb:86:
de:74:dd:59:6f:7a:96:09:87:f7:30:d7:c3:a9:cb:
cb:41:dd:20:8e:6d:a5:63:cf:cf:fe:78:f4:03:c8:
75:f8:71:01:d4:5f:31:38:d3:aa:b2:fc:77:8b:c7:
5a:0a:72:78:f8:39:8e:18:f0:7c:78:10:8e:11:a1:
ff:a1:b6:2d:cf:ac:e6:0a:cb:e1:98:5c:3e:44:a4:
42:da:19:b0:8a:fa:1c:39:8f:3c:09:b8:b0:12:87:
1f:40:c8:79:c8:5f:40:07:5f:35:7d:e5:16:eb:16:
69:a5:fd:08:78:bb:90:7c:f0:2b:b4:23:bf:db:00:
9a:78:e9:5d:1c:27:1d:c5:62:c9:27:4e:b5:cf:90:
42:ed:26:77:73:a4:0a:3c:bf:af:08:30:aa:f1:8b:
59:8e:80:90:24:06:3f:03:cb:0b:f7:09:da:dd:42:
5f:d1:01:c3:29:b5:14:6c:92:93:d9:c8:ef:64:fa:
ef:c9:2f:32:5c:0c:ec:d5:53:26:01:aa:35:a2:18:
71:c3:8c:32:cf:d8:ee:fe:38:16:79:5e:3d:df:1f:
1f:b3:5b:58:a9:48:b5:a1:0b:23:88:3d:78:3c:ee:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3A:7E:5E:D7:BF:43:83:CC:43:9C:6E:2E:9B:1A:02:31:21:32:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.16.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:c6:c1:d0:10:83:6c:70:aa:fe:14:f5:05:8f:3d:d0:41:ea:
4a:2d:32:07:c8:80:4e:95:cd:88:5a:b5:fa:a8:b6:1b:f4:b8:
f6:65:31:91:fc:b5:1a:b4:99:95:c0:34:5b:e1:77:a9:d3:1c:
ad:2e:e4:a9:8d:11:5f:2e:4e:f7:5d:6c:0c:68:fb:60:c9:72:
63:3c:65:2b:c0:27:69:4f:c6:11:23:bd:18:fb:76:f0:f8:19:
6d:a3:e5:4b:5d:97:a4:a9:01:f3:aa:ea:1f:c0:01:46:ab:53:
c3:17:3f:2a:4e:e3:0f:99:f3:96:45:49:6e:30:0e:c3:8d:87:
53:7c:f9:66:ac:45:a6:c8:4f:1e:8c:3e:ca:a0:6f:86:74:4f:
6f:c9:15:c0:a1:3c:23:f3:e6:e3:4c:d9:a6:d7:47:7b:02:58:
f9:c9:39:53:2c:5a:d1:26:79:8e:57:99:d1:6e:68:dd:13:2e:
fc:19:bd:d2:37:b7:e6:8d:90:1e:4a:b1:dd:34:50:43:75:8c:
d5:c5:8e:20:c8:5d:c9:75:ff:89:4d:67:a8:64:30:39:37:4d:
2b:fc:11:ca:af:2e:82:ad:33:8d:04:44:3c:5f:00:36:d2:a3:
e7:54:50:f1:56:e6:62:0a:8a:02:fd:d1:ea:16:0c:6e:1f:b6:
d6:70:44:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LOwgiI8hX/QsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
N2QxZDc2ZjYtM2M5YS00MTA5LTliYzctMmZiZjk3ODY1OWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7+8KTNAlF3visL76lLLfwY1XWBq2/HJ5JSi
+4bedN1Zb3qWCYf3MNfDqcvLQd0gjm2lY8/P/nj0A8h1+HEB1F8xONOqsvx3i8da
CnJ4+DmOGPB8eBCOEaH/obYtz6zmCsvhmFw+RKRC2hmwivocOY88CbiwEocfQMh5
yF9AB181feUW6xZppf0IeLuQfPArtCO/2wCaeOldHCcdxWLJJ061z5BC7SZ3c6QK
PL+vCDCq8YtZjoCQJAY/A8sL9wna3UJf0QHDKbUUbJKT2cjvZPrvyS8yXAzs1VMm
Aao1ohhxw4wyz9ju/jgWeV493x8fs1tYqUi1oQsjiD14PO5bXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFg6fl7Xv0ODzEOcbi6bGgIxITKCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjg3MGQ4YzctNGU2YS0z
YjY0LThkZjgtYTNkYzdkMjZmMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBB4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnGwdAQg2xwqv4U9QWPPdBB6kotMgfIgE6VzYhatfqothv0uPZlMZH8
tRq0mZXANFvhd6nTHK0u5KmNEV8uTvddbAxo+2DJcmM8ZSvAJ2lPxhEjvRj7dvD4
GW2j5Utdl6SpAfOq6h/AAUarU8MXPypO4w+Z85ZFSW4wDsONh1N8+WasRabITx6M
Psqgb4Z0T2/JFcChPCPz5uNM2abXR3sCWPnJOVMsWtEmeY5XmdFuaN0TLvwZvdI3
t+aNkB5Ksd00UEN1jNXFjiDIXcl1/4lNZ6hkMDk3TSv8EcqvLoKtM40ERDxfADbS
o+dUUPFW5mIKigL90eoWDG4fttZwRLk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:48 2025 by rpki-client