Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c24455af-c0c2-3026-baae-d08d13fe5be8.roa
File: c24455af-c0c2-3026-baae-d08d13fe5be8.roa (raw, json)
Hash identifier: Z0utvfSc4cxYSGi5oPd90aIzxWsPVv/ZIiBcN7J6C88=
Subject key identifier: EA:EB:45:32:BA:98:D3:AB:95:45:EC:7A:A0:72:F8:4A:A6:5E:3E:DF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551C9968E4BDCDCBDA139B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c24455af-c0c2-3026-baae-d08d13fe5be8.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 162.40.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1c:99:68:e4:bd:cd:cb:da:13:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=dffed14a-202f-4535-b3db-239191073b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:55:2e:95:81:64:3f:30:d5:d2:d1:10:7b:9d:
2e:ef:de:8f:d9:04:0a:29:82:cc:58:94:c4:b4:ee:
6d:7c:0c:a0:fd:b5:6d:7a:d4:84:3a:24:3e:7b:ee:
d8:4d:f7:74:e7:92:88:3c:e7:e9:f2:25:9b:95:d9:
b0:5d:89:25:01:b1:05:89:ba:50:65:a2:d8:a0:1d:
fe:3a:d5:98:8d:c7:8d:e6:c4:e0:52:9b:67:8c:ad:
5f:b1:54:9f:87:de:f1:24:dd:e8:e6:87:f6:22:a9:
3b:26:53:a0:15:fd:c1:15:04:8e:76:7f:b2:81:50:
44:90:90:11:d1:09:bb:0d:7a:50:71:82:f5:da:2d:
24:bb:c0:f5:0d:1d:28:f8:b8:d4:8c:60:ea:2b:0a:
00:c2:2d:46:8f:bc:22:bf:20:85:89:98:1e:28:85:
43:92:4a:54:84:4f:d2:50:5f:89:7b:d5:a8:20:10:
5a:74:49:b7:b2:34:ea:11:77:73:15:56:85:7b:85:
92:a5:5c:90:4b:73:58:50:16:2d:9a:89:43:c8:88:
ea:97:cb:c7:1e:76:61:ac:bc:a8:5c:31:ac:b0:40:
5a:c5:f9:80:12:6b:7f:44:4b:e0:98:a3:26:94:29:
81:79:d3:50:61:b5:da:05:22:ff:09:de:15:57:84:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:45:32:BA:98:D3:AB:95:45:EC:7A:A0:72:F8:4A:A6:5E:3E:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c24455af-c0c2-3026-baae-d08d13fe5be8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
162.40.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:61:10:93:41:be:f3:46:aa:2f:24:4f:84:e2:d3:ba:0e:b0:
9b:11:28:ac:bf:7a:4b:36:92:75:de:f0:41:f3:bd:8a:b0:f4:
9b:6c:0e:ef:53:40:f6:68:c4:f7:28:3f:d3:21:f3:1c:0f:1c:
19:94:32:8e:f6:ea:31:86:61:cc:69:f9:b0:d9:a0:6d:6f:60:
6e:94:81:b8:6c:e2:ce:d5:39:4a:ca:fe:40:cd:9e:81:18:72:
2d:ae:91:89:64:f1:c1:60:4b:84:e0:97:d5:ff:32:77:e7:0a:
f2:ad:f2:56:9d:11:05:17:12:eb:89:70:ca:13:2f:2a:a1:4c:
42:e4:94:a6:d0:7d:26:3e:13:d3:8e:34:09:86:cb:09:51:4b:
b9:a0:4e:3a:7d:0f:e2:72:ba:36:3f:93:49:8b:ee:b4:3c:13:
01:32:76:3e:4f:74:4e:1c:42:67:cb:d1:8a:ce:f3:23:85:ce:
54:d1:77:39:34:53:22:11:ba:8a:e8:1b:c2:a9:46:ac:d7:ae:
c6:ac:cc:c9:09:ea:61:63:da:96:01:a8:ad:04:5b:fa:00:fb:
57:7d:f7:6e:8b:37:85:8a:71:88:9e:32:82:ec:00:ca:f6:05:
2d:f3:d9:8c:06:d3:20:61:1c:ec:9c:83:41:0a:7e:44:35:98:
8f:57:6c:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1VHJlo5L3Ny9oTm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMzA0MDAwMFoXDTI4MDMxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGZmZWQxNGEtMjAyZi00NTM1LWIzZGItMjM5MTkxMDczYjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lUulYFkPzDV0tEQe50u796P2QQKKYLMWJTE
tO5tfAyg/bVtetSEOiQ+e+7YTfd055KIPOfp8iWbldmwXYklAbEFibpQZaLYoB3+
OtWYjceN5sTgUptnjK1fsVSfh97xJN3o5of2Iqk7JlOgFf3BFQSOdn+ygVBEkJAR
0Qm7DXpQcYL12i0ku8D1DR0o+LjUjGDqKwoAwi1Gj7wivyCFiZgeKIVDkkpUhE/S
UF+Je9WoIBBadEm3sjTqEXdzFVaFe4WSpVyQS3NYUBYtmolDyIjql8vHHnZhrLyo
XDGssEBaxfmAEmt/REvgmKMmlCmBedNQYbXaBSL/Cd4VV4TEsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOrrRTK6mNOrlUXseqBy+EqmXj7fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzI0NDU1YWYtYzBjMi0z
MDI2LWJhYWUtZDA4ZDEzZmU1YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoigdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNhEJNBvvNGqi8kT4Ti07oOsJsRKKy/eks2knXe8EHzvYqw9JtsDu9T
QPZoxPcoP9Mh8xwPHBmUMo726jGGYcxp+bDZoG1vYG6Ugbhs4s7VOUrK/kDNnoEY
ci2ukYlk8cFgS4Tgl9X/MnfnCvKt8ladEQUXEuuJcMoTLyqhTELklKbQfSY+E9OO
NAmGywlRS7mgTjp9D+JyujY/k0mL7rQ8EwEydj5PdE4cQmfL0YrO8yOFzlTRdzk0
UyIRuoroG8KpRqzXrsaszMkJ6mFj2pYBqK0EW/oA+1d9926LN4WKcYieMoLsAMr2
BS3z2YwG0yBhHOycg0EKfkQ1mI9XbAA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:45 2025 by rpki-client