Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/819fdee1-624b-3836-9a50-084be1c63804.roa
File: 819fdee1-624b-3836-9a50-084be1c63804.roa (raw, json)
Hash identifier: CZndc2w5TZyDY8y26/1hzfT0lRZCQuHZRgKOfx0TSqU=
Subject key identifier: 72:A2:7B:A9:76:34:0F:4D:7B:87:19:6E:3E:18:F6:0E:06:17:1C:1B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CB942D6048A49D665236CB20
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/819fdee1-624b-3836-9a50-084be1c63804.roa
Signing time: Thu 06 Feb 2025 18:14:32 +0000
ROA not before: Thu 06 Feb 2025 18:14:32 +0000
ROA not after: Wed 07 May 2025 17:14:32 +0000
asID: 7029
IP address blocks: 75.90.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:94:2d:60:48:a4:9d:66:52:36:cb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 6 18:14:32 2025 GMT
Not After : May 7 17:14:32 2025 GMT
Subject: CN=8fa5c3e6-6350-4428-b63f-3c29e8c72b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:95:8e:35:09:bd:ef:d1:aa:2a:47:44:39:8c:
31:ec:c3:a1:51:4d:59:64:e8:cf:be:67:23:34:be:
dd:f3:56:89:0b:62:4e:7b:4c:7a:f7:e6:67:5c:77:
49:6d:9c:67:66:2a:0b:62:aa:3e:87:49:d8:3b:0a:
b0:f2:f0:0b:d4:bb:c8:f4:cb:fa:fc:3a:ae:71:f3:
7f:e4:72:b7:c3:e5:0f:39:ff:3a:9f:28:e0:47:74:
8d:ae:5f:f6:87:3a:c8:20:38:c8:60:a9:b3:c2:02:
e3:1c:8d:b6:4f:29:bf:c3:d5:c5:62:be:a3:ef:19:
b9:10:df:eb:58:59:f3:b9:52:e0:9b:36:7f:a7:6c:
05:a4:b2:6f:cd:1d:d2:68:30:b4:c3:d4:29:b7:89:
e6:a1:22:16:c3:54:c0:c0:60:00:0d:0e:4b:a7:88:
c0:5c:32:fd:8f:36:14:0c:04:6d:54:84:ea:27:eb:
68:56:6b:15:f1:b0:ea:d7:42:b8:96:d6:72:88:04:
d4:88:67:fe:a6:fe:13:48:3a:72:52:2a:f2:81:81:
90:18:b6:f3:d5:f3:d4:53:b0:3a:22:6e:2b:8e:e3:
de:67:df:85:b1:a8:76:ca:14:67:29:80:2a:0d:96:
45:fc:1f:e4:df:b7:50:e9:8c:e5:07:1d:43:df:a1:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A2:7B:A9:76:34:0F:4D:7B:87:19:6E:3E:18:F6:0E:06:17:1C:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/819fdee1-624b-3836-9a50-084be1c63804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.90.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:b2:a2:24:96:19:21:b8:2f:c7:69:3c:d8:0f:cc:cd:bd:7b:
f2:7b:06:28:ed:02:92:11:5a:db:c6:b6:b0:ea:0f:4a:a4:48:
f5:ca:b2:2c:26:b5:83:38:ad:33:98:1d:e4:02:51:ec:30:ac:
f3:52:6b:18:07:1d:64:8b:10:42:2b:cb:29:30:86:4d:cc:82:
5f:68:c8:79:76:23:4c:e6:47:c5:98:45:4e:e3:56:c9:e9:dd:
e1:71:5a:a0:1d:5e:7d:b7:ac:13:8a:1e:a8:7b:af:63:47:d0:
73:1a:e7:9e:91:ae:f9:5b:da:69:8a:8c:ec:d5:d9:46:18:9f:
d5:c3:ed:f1:8a:c3:54:a7:74:80:aa:b1:75:87:27:e7:d0:e0:
84:ae:0a:f3:48:76:85:62:bf:7e:9d:1c:77:53:f3:10:23:b2:
7a:50:32:66:74:61:b2:2b:71:46:f6:ca:86:76:a0:d4:0d:8a:
42:c4:46:18:f4:a1:a5:8c:a8:c0:2c:92:4e:13:40:c7:af:1c:
aa:6e:4d:b2:db:cc:e3:46:00:ed:f6:8d:a8:d1:4f:46:88:59:
2c:06:f2:99:d7:11:c1:ee:a9:9f:94:9c:51:9b:43:7a:27:eb:
d8:66:b3:e1:ae:4b:b2:f0:bc:de:06:1e:d3:28:37:b4:31:87:
1b:84:7d:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLlC1gSKSdZlI2yyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwNjE4MTQzMloXDTI1MDUwNzE3MTQzMlowLzEtMCsGA1UEAxMk
OGZhNWMzZTYtNjM1MC00NDI4LWI2M2YtM2MyOWU4YzcyYjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZWONQm979GqKkdEOYwx7MOhUU1ZZOjPvmcj
NL7d81aJC2JOe0x69+ZnXHdJbZxnZioLYqo+h0nYOwqw8vAL1LvI9Mv6/DqucfN/
5HK3w+UPOf86nyjgR3SNrl/2hzrIIDjIYKmzwgLjHI22Tym/w9XFYr6j7xm5EN/r
WFnzuVLgmzZ/p2wFpLJvzR3SaDC0w9Qpt4nmoSIWw1TAwGAADQ5Lp4jAXDL9jzYU
DARtVITqJ+toVmsV8bDq10K4ltZyiATUiGf+pv4TSDpyUirygYGQGLbz1fPUU7A6
Im4rjuPeZ9+Fsah2yhRnKYAqDZZF/B/k37dQ6YzlBx1D36ETvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHKie6l2NA9Ne4cZbj4Y9g4GFxwbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODE5ZmRlZTEtNjI0Yi0z
ODM2LTlhNTAtMDg0YmUxYzYzODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1qcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWyoiSWGSG4L8dpPNgPzM29e/J7BijtApIRWtvGtrDqD0qkSPXKsiwm
tYM4rTOYHeQCUewwrPNSaxgHHWSLEEIryykwhk3Mgl9oyHl2I0zmR8WYRU7jVsnp
3eFxWqAdXn23rBOKHqh7r2NH0HMa556Rrvlb2mmKjOzV2UYYn9XD7fGKw1SndICq
sXWHJ+fQ4ISuCvNIdoViv36dHHdT8xAjsnpQMmZ0YbIrcUb2yoZ2oNQNikLERhj0
oaWMqMAskk4TQMevHKpuTbLbzONGAO32jajRT0aIWSwG8pnXEcHuqZ+UnFGbQ3on
69hms+GuS7LwvN4GHtMoN7QxhxuEfTk=
-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:51 2025 by rpki-client