Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa
File: 8439542b-538e-3386-9782-0bb9b565da7c.roa (raw, json)
Hash identifier: mhZsTPfPH4WsaZXl9jS6DKXQlPS6A4xusBOyXp6Q0Eg=
Subject key identifier: FE:4A:4F:49:09:CE:78:21:01:1F:C9:6D:0C:72:C2:0E:E9:60:F5:07
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D0ABBFD09A5D8A12CB7A1D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 7029
IP address blocks: 174.131.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:bf:d0:9a:5d:8a:12:cb:7a:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=0401623a-ac79-49e6-84db-e90dac5e49ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:3a:60:46:c8:5d:a0:ee:d5:2c:25:5f:59:
42:8d:d5:45:60:e6:3f:7b:54:95:7a:c4:1d:e3:29:
51:54:5a:13:6f:d2:22:11:52:f3:16:c0:13:49:b7:
70:3d:1d:7d:b6:e8:b2:ed:a9:f7:f1:87:d3:5b:1f:
95:49:7d:83:f1:e3:31:4c:b8:1c:e1:6a:cf:03:a5:
d4:52:2f:ba:4f:f5:35:4c:f5:54:26:1e:15:06:10:
15:a0:c4:51:dd:11:b7:ef:b1:6e:e6:2d:4e:a3:b1:
79:83:1e:f4:58:d5:fc:86:a3:e9:86:86:99:8c:1d:
5d:ec:5b:af:b2:cd:e1:b5:e5:f0:ac:87:4b:0a:bb:
36:3a:48:79:9f:76:5e:cc:6b:16:a9:83:0e:e4:83:
5e:01:c1:b7:22:00:60:dd:f3:37:1c:b8:40:cc:b9:
91:f2:61:6e:a2:35:13:51:a0:34:b1:e3:80:07:b7:
c8:0b:b7:d2:9c:3e:c6:b0:32:82:8d:c3:1d:02:a1:
e9:13:7e:bb:83:a8:17:74:b5:eb:b7:78:f2:e8:43:
60:d4:f6:01:e0:dd:13:9b:dc:4f:31:7f:57:6d:45:
1d:e9:63:f8:ce:b0:c2:06:25:08:cf:02:8b:3a:de:
5d:36:c5:45:c5:eb:29:83:5a:b4:33:8e:09:f1:86:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4A:4F:49:09:CE:78:21:01:1F:C9:6D:0C:72:C2:0E:E9:60:F5:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.131.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:4a:3f:2c:7c:8d:55:3c:18:1c:cc:d0:08:0e:7b:8b:71:3c:
f5:eb:26:41:f6:72:66:88:92:9d:12:41:54:51:57:de:a6:b6:
54:7c:c4:97:e9:1d:0f:9f:75:c0:c0:57:db:d5:1c:0a:99:48:
02:40:de:67:cb:74:37:68:99:64:4c:5a:11:d7:10:b9:93:a6:
b6:ac:e6:be:87:82:da:45:1f:1d:11:02:14:44:ad:3f:aa:40:
8c:1d:bd:59:40:07:ae:07:a8:d4:38:3c:b4:2d:7e:8b:39:fe:
c7:4f:40:9b:ca:a8:74:81:5f:e1:2e:7b:6f:83:8f:0a:e0:be:
13:92:c2:86:1f:ca:bf:d4:c1:1a:5b:ee:e9:8c:5b:1d:9b:bb:
a6:8f:66:bf:24:58:cb:21:39:e2:42:a8:05:f7:16:95:a0:dc:
75:b2:34:45:fd:02:89:0e:58:47:bd:a8:f2:cb:0c:29:a6:d3:
5d:f0:2e:0a:40:18:22:e2:d2:7c:34:63:73:37:78:12:e6:5a:
bd:60:7a:a0:0e:8f:85:39:ac:93:38:67:67:48:3c:1d:20:50:
7c:4a:ac:0e:93:b7:3e:79:86:cf:af:9c:3f:87:37:82:76:4f:
d8:fd:cb:5e:97:17:c8:b3:78:30:8a:35:c9:95:84:95:73:0d:
60:04:03:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7/Qml2KEst6HYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk
MDQwMTYyM2EtYWM3OS00OWU2LTg0ZGItZTkwZGFjNWU0OWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreo6YEbIXaDu1SwlX1lCjdVFYOY/e1SVesQd
4ylRVFoTb9IiEVLzFsATSbdwPR19tuiy7an38YfTWx+VSX2D8eMxTLgc4WrPA6XU
Ui+6T/U1TPVUJh4VBhAVoMRR3RG377Fu5i1Oo7F5gx70WNX8hqPphoaZjB1d7Fuv
ss3hteXwrIdLCrs2Okh5n3ZezGsWqYMO5INeAcG3IgBg3fM3HLhAzLmR8mFuojUT
UaA0seOAB7fIC7fSnD7GsDKCjcMdAqHpE367g6gXdLXrt3jy6ENg1PYB4N0Tm9xP
MX9XbUUd6WP4zrDCBiUIzwKLOt5dNsVFxespg1q0M44J8YaNhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5KT0kJznghAR/JbQxywg7pYPUHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQzOTU0MmItNTM4ZS0z
Mzg2LTk3ODItMGJiOWI1NjVkYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroPoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZKPyx8jVU8GBzM0AgOe4txPPXrJkH2cmaIkp0SQVRRV96mtlR8xJfp
HQ+fdcDAV9vVHAqZSAJA3mfLdDdomWRMWhHXELmTpras5r6HgtpFHx0RAhRErT+q
QIwdvVlAB64HqNQ4PLQtfos5/sdPQJvKqHSBX+Eue2+DjwrgvhOSwoYfyr/UwRpb
7umMWx2bu6aPZr8kWMshOeJCqAX3FpWg3HWyNEX9AokOWEe9qPLLDCmm013wLgpA
GCLi0nw0Y3M3eBLmWr1geqAOj4U5rJM4Z2dIPB0gUHxKrA6Ttz55hs+vnD+HN4J2
T9j9y16XF8izeDCKNcmVhJVzDWAEA0Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:27 2025 by rpki-client