Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e1289b1-ca0b-3c79-8f85-52e6789c1932.roa
File: 8e1289b1-ca0b-3c79-8f85-52e6789c1932.roa (raw, json)
Hash identifier: YDl2Z9S4WAc5/WGuo0xN8uTMJWV7J3YaqWUqIWKBkJU=
Subject key identifier: F0:50:71:A6:A6:96:DD:4A:28:92:B9:D4:1A:E0:84:E3:66:3E:86:06
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB6668B37519E8813396AD0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e1289b1-ca0b-3c79-8f85-52e6789c1932.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7896
IP address blocks: 40.135.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b6:66:8b:37:51:9e:88:13:39:6a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=8b22de8d-548f-4474-8e29-0434d8828c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:64:69:c6:a7:25:15:44:f1:ab:69:22:bb:
53:57:aa:82:e7:e5:2c:60:ba:2f:9c:6e:b6:18:3d:
5e:37:6d:42:13:fd:3f:d8:6a:1c:85:c1:0e:7e:40:
dd:d1:67:fa:5c:d1:b6:f6:e4:68:8d:50:fe:8b:71:
c9:64:9c:60:d4:fa:0e:f8:74:47:e8:55:a1:ef:de:
ab:5b:67:b7:82:a0:5d:d9:9c:0e:09:41:82:ae:4e:
e3:c6:29:60:53:75:d9:d9:06:05:86:53:19:24:7d:
b3:53:46:0b:cb:61:7c:ae:d3:ad:60:e3:ec:e7:d8:
66:12:e0:61:d4:f1:97:0d:0b:63:33:4a:3b:37:d3:
f9:62:2c:1c:6f:31:aa:fe:63:c7:5e:54:dd:a8:e7:
48:05:ec:9a:52:57:ba:d9:e7:bd:ac:07:cf:df:1e:
f9:d4:a4:91:33:1a:ad:f7:46:77:f1:d9:1e:81:07:
0e:f5:07:b5:51:6e:c0:db:fc:d2:07:92:81:80:cb:
09:4a:0b:09:7f:71:b3:28:c1:10:60:0d:fe:cd:6c:
5d:93:c6:d0:bb:3c:5a:97:72:f8:aa:2b:5c:bb:93:
04:3f:45:3f:ff:ef:a0:c3:a0:3b:c0:8a:8d:31:a6:
f2:bc:0f:fc:95:71:65:d2:55:27:f4:f6:1a:83:4d:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:71:A6:A6:96:DD:4A:28:92:B9:D4:1A:E0:84:E3:66:3E:86:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e1289b1-ca0b-3c79-8f85-52e6789c1932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.135.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:ce:7e:03:a6:14:53:6b:d9:af:5c:e4:b4:90:e3:29:b6:1b:
44:ae:a2:49:a0:c5:4b:fc:4c:89:f1:7b:b6:1b:74:80:a0:d5:
2f:bb:33:e1:2c:25:ce:91:d8:25:25:11:a3:32:6d:10:8b:8c:
de:8d:5f:15:f2:9e:fa:c0:11:47:2b:d6:73:54:6b:fe:44:3d:
54:30:94:9e:ab:3c:f1:f5:62:b4:07:0d:f5:4a:62:43:9f:66:
b7:ad:1f:62:9b:99:41:c0:4a:c7:53:d0:0c:c2:93:c9:9a:37:
80:71:09:b2:53:35:b5:ec:5c:40:3c:37:1c:23:14:b5:53:1a:
ac:3d:f3:d4:40:0a:13:76:a0:68:af:b4:3a:75:43:fc:68:86:
10:a1:da:bf:c5:dd:37:22:7c:7b:00:cb:ff:c7:0f:fd:1c:83:
1e:51:d0:26:fc:fb:98:ee:e5:33:f7:76:85:eb:fa:c2:20:86:
8b:aa:cd:d3:4a:67:a8:f2:77:ba:d7:b8:a1:96:5a:1e:55:5f:
f3:b0:ec:18:1c:8c:b7:fa:28:b5:55:ad:ed:f9:ba:f0:ff:4b:
66:9b:cc:7f:d1:d1:27:6d:64:d5:5e:99:6d:f2:d9:e7:a1:81:
4a:08:b3:cd:39:36:c0:78:6d:31:ae:7f:28:34:f7:69:a6:19:
fe:8d:bc:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1PtmaLN1GeiBM5atAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMTA0MDAwMFoXDTI4MDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
OGIyMmRlOGQtNTQ4Zi00NDc0LThlMjktMDQzNGQ4ODI4YzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzlkacanJRVE8atpIrtTV6qC5+UsYLovnG62
GD1eN21CE/0/2GochcEOfkDd0Wf6XNG29uRojVD+i3HJZJxg1PoO+HRH6FWh796r
W2e3gqBd2ZwOCUGCrk7jxilgU3XZ2QYFhlMZJH2zU0YLy2F8rtOtYOPs59hmEuBh
1PGXDQtjM0o7N9P5YiwcbzGq/mPHXlTdqOdIBeyaUle62ee9rAfP3x751KSRMxqt
90Z38dkegQcO9Qe1UW7A2/zSB5KBgMsJSgsJf3GzKMEQYA3+zWxdk8bQuzxal3L4
qitcu5MEP0U//++gw6A7wIqNMabyvA/8lXFl0lUn9PYag00eOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBQcaamlt1KKJK51BrghONmPoYGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGUxMjg5YjEtY2EwYi0z
Yzc5LThmODUtNTJlNjc4OWMxOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIcZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILOfgOmFFNr2a9c5LSQ4ym2G0SuokmgxUv8TInxe7YbdICg1S+7M+Es
Jc6R2CUlEaMybRCLjN6NXxXynvrAEUcr1nNUa/5EPVQwlJ6rPPH1YrQHDfVKYkOf
ZretH2KbmUHASsdT0AzCk8maN4BxCbJTNbXsXEA8NxwjFLVTGqw989RAChN2oGiv
tDp1Q/xohhCh2r/F3TcifHsAy//HD/0cgx5R0Cb8+5ju5TP3doXr+sIghouqzdNK
Z6jyd7rXuKGWWh5VX/Ow7BgcjLf6KLVVre35uvD/S2abzH/R0SdtZNVemW3y2eeh
gUoIs805NsB4bTGufyg092mmGf6NvCU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:27 2025 by rpki-client