Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5dfdcf0-a3f5-3572-9051-f26ded17ebd3.roa
File: b5dfdcf0-a3f5-3572-9051-f26ded17ebd3.roa (raw, json)
Hash identifier: GlAT72ZK21EPmoi1TSefVHZkto7+cqTbTLR0FfJWDfc=
Subject key identifier: 23:B7:AA:43:15:F9:3D:9B:EE:F8:EC:C3:ED:EB:8B:59:5D:E3:76:26
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661F294DD901CA61485B2500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5dfdcf0-a3f5-3572-9051-f26ded17ebd3.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.184.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1f:29:4d:d9:01:ca:61:48:5b:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=9052976f-88e3-4b0b-ba69-da7203ece445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:b4:17:f0:e1:5a:15:9b:5a:66:cb:68:4f:
10:f8:98:b6:0c:7b:6e:17:84:e8:c9:54:7a:98:16:
aa:a3:ff:78:97:45:ce:08:ce:45:ff:ad:78:7e:86:
3a:b8:e3:72:e5:09:d1:71:d2:84:bc:df:0d:80:09:
e0:39:a5:87:07:0f:b5:27:33:18:72:94:2e:01:35:
4f:33:5f:6c:cc:5c:76:12:58:94:11:31:1e:56:8e:
90:6e:1f:44:5f:d8:7b:72:bc:8d:7f:0c:5e:58:51:
9c:f0:04:48:f2:b8:f5:48:2b:67:fa:9f:d6:cc:e7:
40:80:58:86:a4:90:f0:ec:3c:63:ad:eb:a7:6d:7b:
db:7e:95:f1:84:d9:0b:2b:22:a6:f5:2d:2b:09:87:
4b:c1:e9:39:fe:77:a6:24:0b:5d:79:bc:d2:68:67:
b4:bc:22:67:c0:5f:bb:53:8c:73:88:e3:5c:09:e7:
59:1b:ed:8e:1a:3e:76:49:c4:2d:61:9e:2b:de:d0:
9c:37:c0:8b:23:57:7f:e5:d4:20:dc:df:a3:f6:dc:
6a:61:64:7c:ce:c3:85:dd:97:b3:39:83:8c:26:40:
26:7b:b5:fc:36:1a:2e:b6:0d:64:2a:27:82:3c:02:
20:14:65:ab:76:b1:a2:16:ac:a7:69:d9:35:d1:75:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B7:AA:43:15:F9:3D:9B:EE:F8:EC:C3:ED:EB:8B:59:5D:E3:76:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5dfdcf0-a3f5-3572-9051-f26ded17ebd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.184.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:e1:80:7c:3a:84:3d:bd:a8:44:38:d0:53:69:54:82:a3:7a:
16:52:23:f0:10:17:1d:d5:60:59:2b:d5:03:69:38:1c:a7:f2:
cb:d3:dd:b0:e8:0b:c5:68:84:27:41:ae:77:bf:9b:1f:98:e1:
c2:8f:3a:23:f4:7f:bb:60:37:7e:c9:d4:94:3e:28:68:ea:c9:
05:70:9d:9d:2d:40:7b:5d:5b:3a:b1:75:c0:9c:92:98:5e:78:
65:82:d3:95:dc:ae:91:c8:fc:7c:0c:10:c4:95:9f:fb:92:f6:
14:dc:70:f5:d7:dc:58:82:c9:9f:24:02:65:a7:0f:52:74:4d:
08:5a:87:ee:09:f4:d6:1e:b1:12:d6:32:b7:e9:ad:30:85:73:
76:1a:31:d7:be:74:50:b7:8b:a7:45:40:da:05:87:49:2a:d9:
7e:7d:60:1c:d0:d7:20:b1:fd:82:60:1a:47:4f:99:6c:02:7c:
99:f0:81:c2:6b:fe:f5:a7:b6:77:19:2d:9e:46:91:79:1f:78:
30:fb:cd:1b:29:06:c6:7b:a0:c8:af:af:0e:20:bb:38:c9:11:
01:cc:0f:71:4c:77:11:81:29:52:24:83:f4:57:ec:47:cd:27:
30:fc:cc:5e:aa:23:1c:45:c3:33:80:59:d0:7b:47:ad:9d:99:
ef:30:6f:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHylN2QHKYUhbJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
OTA1Mjk3NmYtODhlMy00YjBiLWJhNjktZGE3MjAzZWNlNDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7m0F/DhWhWbWmbLaE8Q+Ji2DHtuF4ToyVR6
mBaqo/94l0XOCM5F/614foY6uONy5QnRcdKEvN8NgAngOaWHBw+1JzMYcpQuATVP
M19szFx2EliUETEeVo6Qbh9EX9h7cryNfwxeWFGc8ARI8rj1SCtn+p/WzOdAgFiG
pJDw7DxjreunbXvbfpXxhNkLKyKm9S0rCYdLwek5/nemJAtdebzSaGe0vCJnwF+7
U4xziONcCedZG+2OGj52ScQtYZ4r3tCcN8CLI1d/5dQg3N+j9txqYWR8zsOF3Zez
OYOMJkAme7X8Nhoutg1kKieCPAIgFGWrdrGiFqynadk10XW/bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCO3qkMV+T2b7vjsw+3ri1ld43YmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjVkZmRjZjAtYTNmNS0z
NTcyLTkwNTEtZjI2ZGVkMTdlYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbgQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADThgHw6hD29qEQ40FNpVIKjehZSI/AQFx3VYFkr1QNpOByn8svT3bDo
C8VohCdBrne/mx+Y4cKPOiP0f7tgN37J1JQ+KGjqyQVwnZ0tQHtdWzqxdcCckphe
eGWC05XcrpHI/HwMEMSVn/uS9hTccPXX3FiCyZ8kAmWnD1J0TQhah+4J9NYesRLW
MrfprTCFc3YaMde+dFC3i6dFQNoFh0kq2X59YBzQ1yCx/YJgGkdPmWwCfJnwgcJr
/vWntncZLZ5GkXkfeDD7zRspBsZ7oMivrw4guzjJEQHMD3FMdxGBKVIkg/RX7EfN
JzD8zF6qIxxFwzOAWdB7R62dme8wbwE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:42 2025 by rpki-client