Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9a53384-24a0-3e63-b6bb-eecc9ce4cc86.roa
File: a9a53384-24a0-3e63-b6bb-eecc9ce4cc86.roa (raw, json)
Hash identifier: XGXGjC1VLYEb/b3ze1Kf1MG7hQeqP3U+ZrEXz6qFsbg=
Subject key identifier: F7:AE:B6:3C:7B:AC:9B:FC:0F:4C:B2:72:F1:81:AC:A8:F2:43:DC:1D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F55F88E9F66A7414BF10
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9a53384-24a0-3e63-b6bb-eecc9ce4cc86.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 173.189.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f5:5f:88:e9:f6:6a:74:14:bf:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=6b4cb061-add8-4973-a23d-ef3d03e8c677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:33:9b:06:7b:96:c9:e2:e4:17:2e:4b:49:
5c:7f:6a:80:56:8c:7d:15:cc:78:2d:ba:0d:ea:4f:
0a:f6:5b:95:bc:7c:20:77:22:35:39:e9:48:8f:f0:
7b:c5:d6:15:f8:b7:2b:6b:ce:6b:b8:73:1b:5f:09:
51:0e:b3:91:c1:a9:01:d2:c5:cc:c8:a0:35:d0:c4:
a0:6f:94:c7:1f:27:a8:e6:f7:3d:17:83:6f:cb:71:
cd:4a:3f:07:92:da:52:8d:8b:47:6c:69:21:af:41:
17:a7:da:f5:ad:e4:af:10:00:32:79:02:43:23:12:
d9:85:03:0a:59:d5:bb:dd:9d:13:5e:05:e5:fd:ed:
8b:c6:c2:ff:a6:a9:a5:3e:46:9c:23:1d:cc:eb:0e:
f6:f6:a3:94:be:e7:ee:f4:4c:07:96:21:1a:7b:29:
0a:92:cf:7a:ba:eb:41:fe:cf:bf:d8:af:7d:3c:0f:
17:c3:b0:66:f4:5e:62:d1:4f:43:34:ef:9e:09:b4:
56:53:af:5f:3d:50:aa:8b:ef:40:89:35:0b:d4:79:
35:8d:5d:f1:5a:05:c1:03:73:6a:0f:95:1b:d0:4a:
df:b7:0a:d7:11:0a:be:2a:18:32:29:4d:13:8e:b9:
14:35:00:bc:16:2a:5e:d4:c3:ba:14:52:7d:43:78:
18:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AE:B6:3C:7B:AC:9B:FC:0F:4C:B2:72:F1:81:AC:A8:F2:43:DC:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9a53384-24a0-3e63-b6bb-eecc9ce4cc86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:e9:16:49:b3:51:30:c4:76:66:26:d8:27:c4:f3:da:50:3d:
40:ee:e1:4a:de:7e:64:77:bf:80:2c:8b:c2:54:01:5e:a3:3c:
00:0e:28:11:c1:4a:d3:3a:e4:9a:8c:8b:4a:86:0a:fe:b1:47:
03:e1:41:aa:5c:cc:70:b4:14:31:17:45:39:24:9a:63:1e:04:
c7:07:04:78:88:6b:0e:7f:75:8e:c0:e2:e6:7b:5c:73:5f:15:
d7:dd:ef:d5:85:87:ca:6e:19:09:fb:bc:9b:f6:8c:42:80:4c:
04:ce:f9:ab:1a:bd:71:34:a4:80:56:3b:8a:96:32:e6:71:79:
c1:9f:44:80:63:16:bb:04:92:76:ef:af:f0:82:50:a1:57:0e:
a0:a8:f3:83:36:6e:b2:25:43:76:21:ca:81:7c:31:d5:e7:a8:
85:ce:2b:56:73:6a:30:af:e6:98:b4:ca:4c:48:5d:9f:5d:08:
70:57:8f:db:f3:d2:2f:58:a5:53:63:a3:9a:85:6b:d0:d8:60:
be:3e:a9:69:ab:12:d4:d0:5b:76:5f:be:c6:d6:76:82:7d:dd:
57:0f:dc:4a:72:11:1c:e6:14:68:e0:18:bb:a5:66:08:3c:08:
60:56:6c:79:55:96:14:52:56:41:54:06:4d:79:f6:45:b7:c2:
ef:26:e9:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPVfiOn2anQUvxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
NmI0Y2IwNjEtYWRkOC00OTczLWEyM2QtZWYzZDAzZThjNjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFEzmwZ7lsni5BcuS0lcf2qAVox9Fcx4LboN
6k8K9luVvHwgdyI1OelIj/B7xdYV+Lcra85ruHMbXwlRDrORwakB0sXMyKA10MSg
b5THHyeo5vc9F4Nvy3HNSj8HktpSjYtHbGkhr0EXp9r1reSvEAAyeQJDIxLZhQMK
WdW73Z0TXgXl/e2LxsL/pqmlPkacIx3M6w729qOUvufu9EwHliEaeykKks96uutB
/s+/2K99PA8Xw7Bm9F5i0U9DNO+eCbRWU69fPVCqi+9AiTUL1Hk1jV3xWgXBA3Nq
D5Ub0ErftwrXEQq+KhgyKU0TjrkUNQC8Fipe1MO6FFJ9Q3gYowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPeutjx7rJv8D0yycvGBrKjyQ9wdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlhNTMzODQtMjRhMC0z
ZTYzLWI2YmItZWVjYzljZTRjYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb3QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHpFkmzUTDEdmYm2CfE89pQPUDu4UrefmR3v4Asi8JUAV6jPAAOKBHB
StM65JqMi0qGCv6xRwPhQapczHC0FDEXRTkkmmMeBMcHBHiIaw5/dY7A4uZ7XHNf
Fdfd79WFh8puGQn7vJv2jEKATATO+asavXE0pIBWO4qWMuZxecGfRIBjFrsEknbv
r/CCUKFXDqCo84M2brIlQ3YhyoF8MdXnqIXOK1ZzajCv5pi0ykxIXZ9dCHBXj9vz
0i9YpVNjo5qFa9DYYL4+qWmrEtTQW3ZfvsbWdoJ93VcP3EpyERzmFGjgGLulZgg8
CGBWbHlVlhRSVkFUBk159kW3wu8m6TM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:42 2025 by rpki-client