Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa
File: 6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa (raw, json)
Hash identifier: rbmXYXRF/Hvsj4ArDhlebih3IC5D2XOHLxJy/i6fIGE=
Subject key identifier: 7A:2C:6F:66:E9:E4:C8:3F:64:F2:D7:D9:60:23:E0:3D:CB:36:FD:C9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21101D17E1CABC78BA01300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 25660
IP address blocks: 64.198.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:01:d1:7e:1c:ab:c7:8b:a0:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=af7fab03-be29-46dc-a7f1-abeb65be01ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:d2:59:f7:75:04:34:52:39:14:c9:5b:73:
4e:dc:f1:13:2f:20:3f:c8:d9:81:a4:3e:bf:1c:91:
e6:a2:9a:8a:87:d9:97:5c:e8:13:26:00:f0:59:18:
87:96:12:d1:d2:e6:ce:5e:d6:29:fc:a8:75:d3:8e:
e2:d2:f5:e2:94:30:2f:05:41:a0:8d:2d:ec:d5:2c:
72:b7:ea:20:81:bc:2d:36:7e:bc:74:ea:da:e2:27:
00:4c:0d:e8:4e:2b:c2:f9:10:d7:b3:81:d8:95:73:
0f:63:be:db:fb:97:a6:7a:20:6d:e9:a3:7e:f6:18:
4e:22:53:18:87:3e:db:36:87:ee:17:fd:20:04:9d:
79:1f:54:db:0c:31:92:8f:87:11:e6:60:92:ed:6c:
9c:31:3a:d8:94:2d:c3:4b:1d:26:cb:77:d8:43:58:
08:70:0f:2d:bb:c4:83:04:f8:e3:e7:aa:76:61:81:
e3:73:78:36:79:7a:7d:ab:32:10:e5:8d:a2:80:81:
eb:cd:f4:72:88:5b:de:3a:cb:2a:cf:7d:42:7d:ba:
f5:eb:f2:53:3b:94:1e:e9:cd:e0:9d:a1:8a:7f:cf:
ff:f8:98:7d:78:d3:68:3e:8c:9b:51:39:c7:6a:7e:
78:10:2b:42:58:2d:ed:fe:c1:f4:a8:f2:4f:e4:f1:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2C:6F:66:E9:E4:C8:3F:64:F2:D7:D9:60:23:E0:3D:CB:36:FD:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.198.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:9a:7e:cf:3a:46:ed:65:18:bd:89:ec:d9:a6:49:55:cc:b3:
20:1a:ac:60:b3:00:96:d1:0a:ca:34:be:37:1f:e2:1a:e7:65:
d1:3d:f5:4f:90:91:1a:7f:7e:22:bc:36:a5:b3:6f:41:e2:bc:
e1:4f:86:ea:70:3b:4a:3d:0e:0c:e9:e5:a3:d0:13:10:c6:2a:
23:60:e5:4f:40:e5:84:a5:59:1a:41:5f:8d:34:a3:36:4e:61:
22:8c:84:f3:cc:e2:19:24:87:8b:e1:e1:c5:53:43:74:e8:f4:
5b:95:d6:2b:8e:68:e3:dd:3c:58:eb:68:de:b7:a9:ac:96:ab:
bc:e8:aa:6f:54:fe:36:d5:43:97:7a:8d:84:7a:b3:cb:f7:fa:
2c:8f:e4:c4:6e:49:ef:df:a3:d0:a4:3a:bb:b4:64:de:ed:1e:
1a:18:4c:b4:0e:9c:96:89:a6:08:84:2e:72:97:57:b2:3a:ab:
8d:fa:f7:a8:e0:cf:3a:65:e9:0f:f9:47:78:34:95:fe:f0:fe:
b1:c9:11:6e:6d:98:e6:b2:b0:d3:c5:8f:44:d7:a3:bf:ce:04:
c3:00:43:74:df:34:64:70:67:b7:10:51:db:ac:f4:0b:49:c3:
e6:5d:85:81:c5:e5:72:b7:8e:80:4f:3f:47:47:a4:3c:8c:39:
29:55:b9:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQHRfhyrx4ugEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
YWY3ZmFiMDMtYmUyOS00NmRjLWE3ZjEtYWJlYjY1YmUwMWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6nSWfd1BDRSORTJW3NO3PETLyA/yNmBpD6/
HJHmopqKh9mXXOgTJgDwWRiHlhLR0ubOXtYp/Kh1047i0vXilDAvBUGgjS3s1Sxy
t+oggbwtNn68dOra4icATA3oTivC+RDXs4HYlXMPY77b+5emeiBt6aN+9hhOIlMY
hz7bNofuF/0gBJ15H1TbDDGSj4cR5mCS7WycMTrYlC3DSx0my3fYQ1gIcA8tu8SD
BPjj56p2YYHjc3g2eXp9qzIQ5Y2igIHrzfRyiFveOssqz31Cfbr16/JTO5Qe6c3g
naGKf8//+Jh9eNNoPoybUTnHan54ECtCWC3t/sH0qPJP5PESpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHosb2bp5Mg/ZPLX2WAj4D3LNv3JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmVmNmI1ZjAtNGE5NS0z
YWM0LWIzZWUtZjVhN2YwNmFiZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMbdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmafs86Ru1lGL2J7NmmSVXMsyAarGCzAJbRCso0vjcf4hrnZdE99U+Q
kRp/fiK8NqWzb0HivOFPhupwO0o9Dgzp5aPQExDGKiNg5U9A5YSlWRpBX400ozZO
YSKMhPPM4hkkh4vh4cVTQ3To9FuV1iuOaOPdPFjraN63qayWq7zoqm9U/jbVQ5d6
jYR6s8v3+iyP5MRuSe/fo9CkOru0ZN7tHhoYTLQOnJaJpgiELnKXV7I6q43696jg
zzpl6Q/5R3g0lf7w/rHJEW5tmOaysNPFj0TXo7/OBMMAQ3TfNGRwZ7cQUdus9AtJ
w+ZdhYHF5XK3joBPP0dHpDyMOSlVuf4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:53:06 2025 by rpki-client