Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7d44d620-1071-3219-bac9-6c5406353f44.roa
File: 7d44d620-1071-3219-bac9-6c5406353f44.roa (raw, json)
Hash identifier: 3//Bwx4I/YnT6cMSZL0uVVfAzekqK58GZX3coyAPy+A=
Subject key identifier: E5:37:37:AA:C1:EE:1F:A3:85:D9:29:28:8F:39:BA:96:CB:69:F1:A3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F303C310F347381664AE080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7d44d620-1071-3219-bac9-6c5406353f44.roa
Signing time: Tue 21 Jan 2025 20:37:36 +0000
ROA not before: Tue 21 Jan 2025 20:37:36 +0000
ROA not after: Mon 21 Apr 2025 19:37:36 +0000
asID: 7029
IP address blocks: 75.90.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:3c:31:0f:34:73:81:66:4a:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:37:36 2025 GMT
Not After : Apr 21 19:37:36 2025 GMT
Subject: CN=69cb3d0c-4e87-4d79-b622-ec1cb4571ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:16:a2:bb:59:bd:76:4d:9d:f0:8d:1a:b2:
2b:5a:d7:d6:03:55:28:eb:a3:fb:01:34:49:e0:25:
20:ba:39:ec:3f:31:2d:10:41:6c:da:6c:a6:42:00:
f7:38:b9:4c:8f:35:37:23:75:a6:f8:ca:5c:60:e1:
64:6f:de:ee:d8:41:e5:76:85:d9:0e:4b:49:de:f1:
49:91:eb:1a:07:87:54:fd:55:0d:a6:a3:64:75:9c:
b7:a1:47:59:6b:aa:c2:18:cc:9e:7c:a9:dc:85:8d:
ff:62:b3:bd:b6:6e:4b:a3:5a:b4:57:84:a0:15:b9:
68:15:5a:6d:78:5f:38:ac:c7:6d:6b:ae:97:53:5f:
66:4e:92:36:6c:93:2d:5c:1b:9e:e3:6b:b7:aa:fa:
30:79:bb:7f:74:21:c4:04:79:7c:37:66:f9:aa:c8:
9d:90:c9:1b:87:ea:2b:28:5c:85:b4:09:fa:29:6f:
6b:be:c2:2c:66:07:42:f3:ef:04:a6:55:89:9e:21:
ba:fa:b6:36:7c:10:03:b0:2b:b2:f5:56:c1:b7:79:
a1:e2:e6:12:ea:90:e6:62:20:f1:5d:7c:93:32:cb:
35:9e:f2:42:b4:ca:d1:21:f2:d2:f0:15:f7:4e:83:
fc:38:ac:e3:6d:92:fe:74:6f:44:c2:7d:25:59:b5:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:37:37:AA:C1:EE:1F:A3:85:D9:29:28:8F:39:BA:96:CB:69:F1:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7d44d620-1071-3219-bac9-6c5406353f44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.90.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:99:89:71:84:f7:10:d0:e0:71:98:88:73:fd:78:c9:1e:06:
8c:e0:1a:7a:df:84:ac:2b:bb:aa:4c:ec:0a:e5:01:59:64:f5:
51:ef:77:a4:a5:c8:b4:f4:27:7b:a3:23:c4:05:80:bb:ca:ec:
c1:c6:ac:31:97:25:a7:d8:5c:c1:25:03:ec:c3:85:e5:7b:10:
88:f9:bd:09:94:ac:ea:bd:95:5c:92:f9:21:e4:eb:cc:25:ca:
fa:5f:4f:d6:45:5c:ab:99:99:44:dd:41:f8:a9:e4:6e:4c:3c:
5f:e6:30:34:b4:fc:6e:61:d7:b7:e1:88:ba:e4:32:12:9f:0f:
fc:5b:60:4c:66:25:a1:1b:9e:96:a1:b5:22:7d:94:d1:d0:50:
20:58:54:6f:63:8f:ca:58:db:a1:b8:bd:24:7a:5d:9a:c8:5d:
de:0e:41:c4:8f:e1:3b:27:38:cc:b4:a6:a1:9e:bf:91:2f:07:
05:7b:04:33:cf:f1:48:ee:cd:e7:98:8f:84:44:c4:04:22:23:
7b:ff:4a:8b:0b:9d:ea:ff:cf:f8:af:5f:a1:4a:0e:f5:c8:dc:
96:61:6d:a0:29:14:6d:af:4b:31:56:5f:8f:c4:8a:0a:88:e4:
fd:6e:69:b5:f5:e9:d5:9a:39:01:e9:0e:da:ca:2a:f5:a5:ef:
23:93:d8:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMDwxDzRzgWZK4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDEyMTIwMzczNloXDTI1MDQyMTE5MzczNlowLzEtMCsGA1UEAxMk
NjljYjNkMGMtNGU4Ny00ZDc5LWI2MjItZWMxY2I0NTcxZWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG0WortZvXZNnfCNGrIrWtfWA1Uo66P7ATRJ
4CUgujnsPzEtEEFs2mymQgD3OLlMjzU3I3Wm+MpcYOFkb97u2EHldoXZDktJ3vFJ
kesaB4dU/VUNpqNkdZy3oUdZa6rCGMyefKnchY3/YrO9tm5Lo1q0V4SgFbloFVpt
eF84rMdta66XU19mTpI2bJMtXBue42u3qvowebt/dCHEBHl8N2b5qsidkMkbh+or
KFyFtAn6KW9rvsIsZgdC8+8EplWJniG6+rY2fBADsCuy9VbBt3mh4uYS6pDmYiDx
XXyTMss1nvJCtMrRIfLS8BX3ToP8OKzjbZL+dG9Ewn0lWbUL4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOU3N6rB7h+jhdkpKI85upbLafGjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2Q0NGQ2MjAtMTA3MS0z
MjE5LWJhYzktNmM1NDA2MzUzZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1oIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJSZiXGE9xDQ4HGYiHP9eMkeBozgGnrfhKwru6pM7ArlAVlk9VHvd6Sl
yLT0J3ujI8QFgLvK7MHGrDGXJafYXMElA+zDheV7EIj5vQmUrOq9lVyS+SHk68wl
yvpfT9ZFXKuZmUTdQfip5G5MPF/mMDS0/G5h17fhiLrkMhKfD/xbYExmJaEbnpah
tSJ9lNHQUCBYVG9jj8pY26G4vSR6XZrIXd4OQcSP4TsnOMy0pqGev5EvBwV7BDPP
8UjuzeeYj4RExAQiI3v/SosLner/z/ivX6FKDvXI3JZhbaApFG2vSzFWX4/EigqI
5P1uabX16dWaOQHpDtrKKvWl7yOT2Ok=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:48 2025 by rpki-client