Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa
File: 8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa (raw, json)
Hash identifier: +nxnN/4GAHnfn2iF36DPy5d8mAgzOFd2DVO8NnxKtI0=
Subject key identifier: 6D:5A:0F:A2:6D:4C:33:F8:0F:A7:D2:68:13:9C:D6:63:EA:11:D0:76
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858489F30D24109915F8E9C2C5B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa
Signing time: Tue 21 Jan 2025 20:38:47 +0000
ROA not before: Tue 21 Jan 2025 20:38:47 +0000
ROA not after: Mon 21 Apr 2025 19:38:47 +0000
asID: 7029
IP address blocks: 216.96.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:30:d2:41:09:91:5f:8e:9c:2c:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 21 20:38:47 2025 GMT
Not After : Apr 21 19:38:47 2025 GMT
Subject: CN=52dee2dd-d72c-4ee9-a6fa-d108d7221f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:aa:0f:a7:5d:1c:48:6e:90:53:e9:64:9a:
13:c5:50:b0:a8:c2:03:60:e2:96:c6:2c:0a:51:5b:
c7:27:57:3c:3d:4d:b1:46:54:c3:2b:e9:a0:11:12:
27:c8:e3:60:ef:6a:99:d9:38:05:9f:15:58:95:f9:
17:e8:10:29:41:ba:ea:fd:dd:60:58:02:41:ac:cc:
96:c3:5d:80:ed:ae:a4:0c:22:1b:83:dd:93:f1:69:
ca:63:9c:e8:6f:ce:15:e0:f2:42:b7:41:1a:de:9b:
87:82:89:21:59:44:3d:e5:31:96:e5:fa:4a:52:5a:
88:ad:98:12:8c:26:59:d9:8d:1e:45:92:64:96:14:
36:5e:93:b1:b1:77:bb:18:59:da:48:1f:d1:4a:4a:
07:c4:13:c2:33:c6:1a:df:59:a7:b5:47:62:22:9f:
16:fe:d2:0a:e6:8f:d7:d2:e5:66:d0:47:03:bf:4c:
ee:72:6b:35:2d:3f:da:f4:cc:41:ca:39:58:52:b9:
83:e0:4b:da:77:09:81:62:d8:cd:08:7e:e7:67:b7:
a1:4c:f7:34:7a:e1:b8:43:0b:a1:da:1d:62:5d:1b:
a6:6c:ca:5c:4f:64:68:8a:0d:66:34:6b:e7:29:03:
96:80:00:14:ff:1c:5f:87:ab:ad:9d:b6:a5:90:4b:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5A:0F:A2:6D:4C:33:F8:0F:A7:D2:68:13:9C:D6:63:EA:11:D0:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8038d7b0-bb58-3798-a6e0-7ab83bcb27f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.96.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:54:8d:b9:1f:b1:01:4c:cb:e4:79:50:26:74:70:ee:d5:53:
c3:4f:5a:aa:e4:d4:6b:96:01:91:3a:1e:b5:88:db:15:11:ff:
cd:39:66:00:36:17:d5:8b:e2:61:b0:67:fc:67:34:39:9a:cf:
ee:16:a7:64:f6:de:5c:84:6d:9f:40:8a:1b:81:d8:9d:15:26:
73:ad:0b:dd:3d:5b:bf:a9:07:11:8b:de:47:d8:06:8a:c9:29:
17:2f:94:fe:d8:37:fe:e1:d8:15:07:e5:db:d1:d1:06:99:37:
cd:43:ad:bc:dc:9b:52:97:82:fc:1f:d8:49:89:cd:27:be:4a:
59:2b:73:b5:f3:bb:c9:76:1a:f3:71:99:5c:53:d2:57:f1:c6:
84:5d:81:af:15:32:6c:ba:8f:5c:33:a5:c3:38:06:78:40:6a:
a1:b7:cd:ad:64:d5:ef:a2:1d:a6:97:1e:97:6b:36:88:08:ac:
5d:ec:ed:06:19:64:b8:77:62:0c:1c:1e:81:2f:1c:2e:77:15:
af:96:e8:06:3a:b7:47:d7:a1:09:5e:68:d5:b7:ea:00:9b:be:
26:d6:55:75:35:4c:5a:32:f6:79:3b:8b:c9:b9:2b:b8:ea:04:
3a:a2:00:6e:84:11:3d:11:20:ec:29:ef:47:34:7d:12:b4:5f:
9c:d9:75:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMNJBCZFfjpwsWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDEyMTIwMzg0N1oXDTI1MDQyMTE5Mzg0N1owLzEtMCsGA1UEAxMk
NTJkZWUyZGQtZDcyYy00ZWU5LWE2ZmEtZDEwOGQ3MjIxZjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzWqD6ddHEhukFPpZJoTxVCwqMIDYOKWxiwK
UVvHJ1c8PU2xRlTDK+mgERInyONg72qZ2TgFnxVYlfkX6BApQbrq/d1gWAJBrMyW
w12A7a6kDCIbg92T8WnKY5zob84V4PJCt0Ea3puHgokhWUQ95TGW5fpKUlqIrZgS
jCZZ2Y0eRZJklhQ2XpOxsXe7GFnaSB/RSkoHxBPCM8Ya31mntUdiIp8W/tIK5o/X
0uVm0EcDv0zucms1LT/a9MxByjlYUrmD4EvadwmBYtjNCH7nZ7ehTPc0euG4Qwuh
2h1iXRumbMpcT2Roig1mNGvnKQOWgAAU/xxfh6utnbalkEu7gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1aD6JtTDP4D6fSaBOc1mPqEdB2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODAzOGQ3YjAtYmI1OC0z
Nzk4LWE2ZTAtN2FiODNiY2IyN2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdUjbkfsQFMy+R5UCZ0cO7VU8NPWqrk1GuWAZE6HrWI2xUR/805ZgA2
F9WL4mGwZ/xnNDmaz+4Wp2T23lyEbZ9AihuB2J0VJnOtC909W7+pBxGL3kfYBorJ
KRcvlP7YN/7h2BUH5dvR0QaZN81Drbzcm1KXgvwf2EmJzSe+Slkrc7Xzu8l2GvNx
mVxT0lfxxoRdga8VMmy6j1wzpcM4BnhAaqG3za1k1e+iHaaXHpdrNogIrF3s7QYZ
ZLh3YgwcHoEvHC53Fa+W6AY6t0fXoQleaNW36gCbvibWVXU1TFoy9nk7i8m5K7jq
BDqiAG6EET0RIOwp70c0fRK0X5zZdSg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:28 2025 by rpki-client