Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7671e670-ddc3-34f7-81dd-dfc49e6c04a1.roa
File: 7671e670-ddc3-34f7-81dd-dfc49e6c04a1.roa (raw, json)
Hash identifier: FXsqbYpy9G9oNbz8VMphedKLYSih7nYH0pnkZqOnwYc=
Subject key identifier: E3:0E:95:BC:62:5E:2D:3F:D7:68:73:2E:5B:DF:6A:64:79:E7:75:D0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F30BFDAC2BDBBA1305ADB00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7671e670-ddc3-34f7-81dd-dfc49e6c04a1.roa
Signing time: Tue 21 Jan 2025 20:38:38 +0000
ROA not before: Tue 21 Jan 2025 20:38:38 +0000
ROA not after: Mon 21 Apr 2025 19:38:38 +0000
asID: 7029
IP address blocks: 174.131.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:bf:da:c2:bd:bb:a1:30:5a:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:38:38 2025 GMT
Not After : Apr 21 19:38:38 2025 GMT
Subject: CN=f9f83829-64fe-4352-8178-c29680426cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:a3:d7:20:64:03:fd:39:e0:b5:3b:a6:b1:
82:dc:d6:89:aa:d8:3e:cf:13:80:e1:d8:dd:6d:bc:
dd:38:b8:9b:f9:57:46:7e:05:09:f7:fe:c3:08:b6:
65:a3:26:3b:50:90:7e:9f:4c:68:f6:6b:67:ad:9f:
f7:3b:56:d4:6d:4e:2b:2d:5b:7d:91:f5:8b:07:fc:
bc:7c:b3:60:62:bb:5e:68:30:80:ca:44:5e:b6:9c:
c6:07:20:ef:0d:04:1c:45:5b:1f:f2:ad:ca:af:bf:
1f:0d:05:70:d5:b6:a1:b1:5c:c9:df:d0:ab:7e:a5:
37:a9:43:fd:be:76:33:35:e3:37:b0:04:b5:0f:d1:
71:2e:18:58:30:39:c1:67:1f:76:8a:43:42:71:68:
46:43:8a:08:f8:a7:99:3f:a6:be:15:1f:dc:2f:44:
e9:fc:7a:3f:2c:b2:2c:e3:41:96:6d:1b:67:97:76:
35:f7:0f:7d:44:fe:9a:ff:39:3a:80:38:0e:c9:79:
e0:a2:92:d6:ec:08:45:a6:77:66:5f:c1:4c:fc:ff:
30:d1:b9:a2:77:b3:b1:91:ae:a1:6e:12:b9:39:d6:
8e:da:80:0a:2d:3f:12:6f:d7:07:79:c2:6e:41:51:
e9:ef:21:c2:23:44:fb:5a:64:b5:9c:b5:f9:5f:96:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0E:95:BC:62:5E:2D:3F:D7:68:73:2E:5B:DF:6A:64:79:E7:75:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7671e670-ddc3-34f7-81dd-dfc49e6c04a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.131.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:f6:0a:de:68:00:1f:9a:23:f6:78:36:7d:e1:9c:ce:ec:b2:
dd:f5:ec:b6:2e:4d:56:46:cc:bf:a8:28:ce:15:d6:43:ca:de:
34:bf:bc:35:02:cc:08:8d:10:9f:a9:84:1b:64:75:c2:e8:91:
f7:75:8d:5f:20:1e:93:36:4a:a9:94:01:8c:eb:55:7f:cf:c8:
78:c1:58:aa:43:fc:24:67:bd:6a:41:ed:2b:b2:52:8d:b5:e9:
5c:7a:14:2c:c9:7f:65:b9:ec:2d:1f:f6:a9:db:20:34:f4:6c:
b0:23:8b:a3:7b:34:a8:82:28:22:30:ab:8b:2c:ae:d6:36:19:
09:7a:a3:b4:aa:39:bb:04:6a:79:18:40:e9:8c:b9:ff:a1:f4:
e5:10:b3:22:0c:be:cb:77:e9:95:45:b0:92:05:d1:07:82:aa:
46:c9:bd:a4:be:eb:da:4b:18:9a:1d:fd:14:17:2e:78:37:05:
c8:4b:94:2b:e8:04:b3:4b:9b:8c:0e:93:c3:b3:1f:a0:93:85:
ff:f7:29:f9:c1:76:79:05:f9:c7:69:b4:76:14:6d:6f:22:ca:
e8:af:d2:2e:df:2f:7a:31:c0:ae:b2:3b:c4:b6:2f:ab:34:a6:
77:2f:fe:97:a2:ab:bf:1f:d4:db:c7:de:bf:44:97:7a:44:fd:
90:de:b3:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifML/awr27oTBa2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDEyMTIwMzgzOFoXDTI1MDQyMTE5MzgzOFowLzEtMCsGA1UEAxMk
ZjlmODM4MjktNjRmZS00MzUyLTgxNzgtYzI5NjgwNDI2Y2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqByj1yBkA/054LU7prGC3NaJqtg+zxOA4djd
bbzdOLib+VdGfgUJ9/7DCLZloyY7UJB+n0xo9mtnrZ/3O1bUbU4rLVt9kfWLB/y8
fLNgYrteaDCAykRetpzGByDvDQQcRVsf8q3Kr78fDQVw1bahsVzJ39CrfqU3qUP9
vnYzNeM3sAS1D9FxLhhYMDnBZx92ikNCcWhGQ4oI+KeZP6a+FR/cL0Tp/Ho/LLIs
40GWbRtnl3Y19w99RP6a/zk6gDgOyXngopLW7AhFpndmX8FM/P8w0bmid7Oxka6h
bhK5OdaO2oAKLT8Sb9cHecJuQVHp7yHCI0T7WmS1nLX5X5bSXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMOlbxiXi0/12hzLlvfamR553XQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzY3MWU2NzAtZGRjMy0z
NGY3LTgxZGQtZGZjNDllNmMwNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroP5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGT2Ct5oAB+aI/Z4Nn3hnM7sst317LYuTVZGzL+oKM4V1kPK3jS/vDUC
zAiNEJ+phBtkdcLokfd1jV8gHpM2SqmUAYzrVX/PyHjBWKpD/CRnvWpB7SuyUo21
6Vx6FCzJf2W57C0f9qnbIDT0bLAji6N7NKiCKCIwq4ssrtY2GQl6o7SqObsEankY
QOmMuf+h9OUQsyIMvst36ZVFsJIF0QeCqkbJvaS+69pLGJod/RQXLng3BchLlCvo
BLNLm4wOk8OzH6CThf/3KfnBdnkF+cdptHYUbW8iyuiv0i7fL3oxwK6yO8S2L6s0
pncv/peiq78f1NvH3r9El3pE/ZDes7k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:34 2025 by rpki-client