Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8460ef81-99f6-31d9-be0a-707d816202e1.roa
File: 8460ef81-99f6-31d9-be0a-707d816202e1.roa (raw, json)
Hash identifier: 9geRPKj34A6WQSJZ7KxFfqNVg8dPVrPuI7P8B3nVeIM=
Subject key identifier: 48:F0:BD:A6:04:D8:FC:98:BB:E4:A3:B2:C9:77:64:77:DD:D5:FB:8F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F5823164D1E539189330C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8460ef81-99f6-31d9-be0a-707d816202e1.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 199.35.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:58:23:16:4d:1e:53:91:89:33:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=72352ad2-1446-443b-9fb2-30e7459fcb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:ec:fd:0c:c6:4d:4b:84:37:f3:a8:97:5d:
d1:21:ef:b2:ef:74:fe:d9:ea:8f:76:a8:65:a0:6b:
bf:70:fe:bf:6e:ef:1a:6a:88:df:36:79:66:72:c9:
70:ef:80:a8:d4:0c:90:c7:40:27:c5:63:fe:56:0b:
8e:3e:11:8d:f2:31:ce:b8:73:c1:20:7e:66:1b:28:
76:6c:86:b9:1d:61:58:bd:55:4f:0c:74:32:f9:49:
65:9a:9e:26:da:ff:3f:cd:dd:5e:d1:e7:40:57:7c:
8a:cd:cf:9c:a6:df:97:2e:2a:c0:aa:63:f5:6b:92:
53:80:04:46:3e:87:6b:fe:fe:fa:41:f5:1e:cb:80:
46:75:a1:a4:c9:ed:9f:5e:f1:74:5c:fb:52:1b:b1:
4f:5c:5b:7e:7e:87:68:34:c6:00:ef:10:8a:fc:5f:
2a:4a:15:42:e0:35:04:0a:ff:ee:bb:ca:11:2e:c8:
6c:b8:19:96:2c:4f:0a:e9:21:14:e4:b6:b8:8c:a6:
26:3f:51:61:3a:60:ab:4a:ae:b2:a3:2f:30:0b:ff:
1d:f9:30:19:34:e4:f9:c9:f6:af:08:32:69:b0:a8:
f1:d3:23:ec:69:49:ca:22:30:67:1f:e2:88:14:b6:
6c:b5:a2:19:67:00:f5:64:31:4b:78:19:c6:65:4b:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F0:BD:A6:04:D8:FC:98:BB:E4:A3:B2:C9:77:64:77:DD:D5:FB:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8460ef81-99f6-31d9-be0a-707d816202e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.35.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:02:7d:44:dc:9a:68:69:96:bf:75:8c:8f:8e:8a:5e:e6:c8:
77:ca:7f:f9:2e:00:99:01:20:a5:96:2a:6b:bf:45:2f:4e:e4:
10:ad:9b:db:11:14:fa:f7:06:68:76:5d:d5:81:e3:57:8e:f7:
60:02:76:23:ff:c2:2e:02:98:cd:82:e9:e0:85:7f:5d:8c:8e:
0e:c7:7d:b5:8b:a2:70:54:9d:d2:af:8d:1e:b4:cd:e5:60:43:
53:5d:6d:27:5a:99:fa:ba:c3:f5:d5:a9:10:a2:20:2d:d7:9c:
17:81:ef:a4:60:9f:5d:8b:09:f8:a4:43:a6:8a:e3:61:e9:56:
57:2a:ea:71:df:20:cf:cc:fb:09:23:b5:24:06:0f:4e:b9:1a:
a3:3b:a5:00:cf:18:13:77:d9:da:32:2b:51:91:52:c7:3a:3f:
2c:79:df:7b:4e:d2:71:49:f1:b9:f6:f1:bb:80:be:cb:9d:36:
ea:f0:91:c3:c6:b0:ff:9d:91:94:96:85:46:45:34:7b:60:0f:
01:a0:3b:4e:89:be:2d:4e:94:03:bb:61:a9:09:c7:30:bb:72:
55:19:69:05:56:27:a6:a1:c9:98:70:a8:3c:c4:8b:a2:7e:fc:
ee:f1:a3:5f:2d:44:f4:7d:1d:5c:a8:c9:db:56:54:86:bb:7d:
66:c7:ce:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0/WCMWTR5TkYkzDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMxNTA0MDAwMFoXDTI4MDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk
NzIzNTJhZDItMTQ0Ni00NDNiLTlmYjItMzBlNzQ1OWZjYjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBPs/QzGTUuEN/Ool13RIe+y73T+2eqPdqhl
oGu/cP6/bu8aaojfNnlmcslw74Co1AyQx0AnxWP+VguOPhGN8jHOuHPBIH5mGyh2
bIa5HWFYvVVPDHQy+Ullmp4m2v8/zd1e0edAV3yKzc+cpt+XLirAqmP1a5JTgARG
Podr/v76QfUey4BGdaGkye2fXvF0XPtSG7FPXFt+fodoNMYA7xCK/F8qShVC4DUE
Cv/uu8oRLshsuBmWLE8K6SEU5La4jKYmP1FhOmCrSq6yoy8wC/8d+TAZNOT5yfav
CDJpsKjx0yPsaUnKIjBnH+KIFLZstaIZZwD1ZDFLeBnGZUs4awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjwvaYE2PyYu+Sjssl3ZHfd1fuPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQ2MGVmODEtOTlmNi0z
MWQ5LWJlMGEtNzA3ZDgxNjIwMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExyMwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkCfUTcmmhplr91jI+Oil7myHfKf/kuAJkBIKWWKmu/RS9O5BCtm9sR
FPr3Bmh2XdWB41eO92ACdiP/wi4CmM2C6eCFf12Mjg7HfbWLonBUndKvjR60zeVg
Q1NdbSdamfq6w/XVqRCiIC3XnBeB76Rgn12LCfikQ6aK42HpVlcq6nHfIM/M+wkj
tSQGD065GqM7pQDPGBN32doyK1GRUsc6Pyx533tO0nFJ8bn28buAvsudNurwkcPG
sP+dkZSWhUZFNHtgDwGgO06Jvi1OlAO7YakJxzC7clUZaQVWJ6ahyZhwqDzEi6J+
/O7xo18tRPR9HVyoydtWVIa7fWbHzkQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:23 2025 by rpki-client