Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d06c84-b559-3558-9143-54febd856d0b.roa
File: 96d06c84-b559-3558-9143-54febd856d0b.roa (raw, json)
Hash identifier: hsSpECrfM/IhxqesWlG2isb8h1kflj75lk9S5aDvFHs=
Subject key identifier: 75:38:97:BF:CA:BC:E8:15:74:1F:61:83:20:8F:36:F8:01:CA:C0:FC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112D8F1C404406E2FA9540
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d06c84-b559-3558-9143-54febd856d0b.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 22944
IP address blocks: 173.191.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2d:8f:1c:40:44:06:e2:fa:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=0a0ed734-b0f0-4c85-a3ec-50414aa455b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:62:9b:1b:ac:c1:84:3c:a8:01:34:5a:fd:ea:
dd:1e:c8:a3:05:fa:02:4c:eb:d6:ac:97:ab:ca:99:
a2:0a:12:01:b5:f0:a1:f1:83:ff:0c:2b:4e:35:0f:
29:da:96:f0:74:77:45:0a:9f:1b:3f:bb:c9:23:25:
16:ef:46:16:7f:d2:be:6c:f1:55:ca:5a:25:f8:50:
d8:7a:7f:12:a3:ba:4d:5b:57:be:c2:79:07:de:34:
d7:67:e4:4b:04:4c:f4:d5:91:d3:8c:cb:bb:62:fd:
9f:21:9d:f0:fd:c9:05:b5:44:4a:71:13:6c:3e:2b:
3e:74:e1:ac:20:ba:0e:4e:71:56:a4:39:09:f2:b8:
ac:08:21:cc:07:f9:86:fc:5a:3b:83:7f:3c:fd:32:
85:66:4c:7a:60:c6:2f:1a:7a:1f:75:aa:e9:14:c2:
ae:ee:dd:83:60:30:02:b5:97:ab:6e:31:76:81:ee:
73:bf:ed:10:5f:c2:17:2f:92:7f:e2:9d:65:c2:d0:
0f:19:10:58:3c:58:bc:b1:db:84:fa:00:5b:60:51:
82:45:b2:ed:a7:96:dd:db:20:76:8a:d1:96:21:e6:
57:25:eb:ce:3b:1a:8c:0c:1e:2b:6d:bc:0a:32:0a:
ad:e4:25:d9:df:d1:ce:c0:52:85:25:3c:e9:5a:8e:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:38:97:BF:CA:BC:E8:15:74:1F:61:83:20:8F:36:F8:01:CA:C0:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d06c84-b559-3558-9143-54febd856d0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:31:5b:f4:43:77:c0:43:3d:16:d6:0d:7d:92:c5:04:01:65:
24:28:7b:08:ab:f1:1c:9e:0b:c8:11:b2:67:9d:3e:ee:e2:fc:
7c:e5:2a:46:ac:42:78:75:84:31:8c:43:2d:40:74:d1:10:2c:
10:7a:46:f8:a9:74:07:06:55:e9:e1:a4:9b:bf:35:e1:a7:eb:
cf:a8:e3:03:9b:61:52:9e:2a:12:ea:0d:6c:b0:53:57:b1:82:
22:49:90:ab:65:13:ad:cb:6f:42:ce:db:8c:61:93:85:da:00:
39:cb:42:e9:8b:f5:d9:e9:00:3e:ae:e8:18:b3:88:d4:0c:89:
c0:1c:42:47:0a:80:07:4f:09:ac:20:24:fe:d8:76:4b:5d:a1:
0a:7d:8f:be:34:a9:38:d6:35:d3:b9:6f:cb:d2:3f:8a:e6:67:
ec:12:40:39:db:0e:f3:4d:2a:00:28:2d:e0:24:fa:7f:b8:17:
25:1b:d6:d9:26:0c:19:97:bf:aa:d2:d4:ee:2f:40:06:14:93:
4d:b5:53:22:6a:19:85:1b:7e:0e:76:6e:93:9e:a4:3c:fd:d8:
ba:6b:be:78:96:09:33:67:5d:4e:60:98:de:bb:e4:45:cc:2c:
a0:66:26:9d:83:29:c6:65:00:8e:d9:93:f2:f3:bd:f1:b0:4d:
d6:04:64:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSES2PHEBEBuL6lUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
MGEwZWQ3MzQtYjBmMC00Yzg1LWEzZWMtNTA0MTRhYTQ1NWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WKbG6zBhDyoATRa/erdHsijBfoCTOvWrJer
ypmiChIBtfCh8YP/DCtONQ8p2pbwdHdFCp8bP7vJIyUW70YWf9K+bPFVylol+FDY
en8So7pNW1e+wnkH3jTXZ+RLBEz01ZHTjMu7Yv2fIZ3w/ckFtURKcRNsPis+dOGs
ILoOTnFWpDkJ8risCCHMB/mG/Fo7g388/TKFZkx6YMYvGnofdarpFMKu7t2DYDAC
tZerbjF2ge5zv+0QX8IXL5J/4p1lwtAPGRBYPFi8sduE+gBbYFGCRbLtp5bd2yB2
itGWIeZXJevOOxqMDB4rbbwKMgqt5CXZ39HOwFKFJTzpWo6UvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHU4l7/KvOgVdB9hgyCPNvgBysD8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTZkMDZjODQtYjU1OS0z
NTU4LTkxNDMtNTRmZWJkODU2ZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrb90MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0xW/RDd8BDPRbWDX2SxQQBZSQoewir8RyeC8gRsmedPu7i/HzlKkas
Qnh1hDGMQy1AdNEQLBB6RvipdAcGVenhpJu/NeGn68+o4wObYVKeKhLqDWywU1ex
giJJkKtlE63Lb0LO24xhk4XaADnLQumL9dnpAD6u6BiziNQMicAcQkcKgAdPCawg
JP7YdktdoQp9j740qTjWNdO5b8vSP4rmZ+wSQDnbDvNNKgAoLeAk+n+4FyUb1tkm
DBmXv6rS1O4vQAYUk021UyJqGYUbfg52bpOepDz92LprvniWCTNnXU5gmN675EXM
LKBmJp2DKcZlAI7Zk/LzvfGwTdYEZFc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:16:46 2025 by rpki-client