Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c67d5cc3-9727-3301-b01c-8bbe588bcd6c.roa
File: c67d5cc3-9727-3301-b01c-8bbe588bcd6c.roa (raw, json)
Hash identifier: U+ahA27gvnlPbrtt+90F4jFweOXDoJls4G90dw8gJqE=
Subject key identifier: 7E:5A:72:90:54:AA:83:DE:A8:53:D2:D7:7B:65:70:EB:CF:7A:BD:90
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551DD78D11B8A9E9A1BD8B20
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c67d5cc3-9727-3301-b01c-8bbe588bcd6c.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 204.8.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1d:d7:8d:11:b8:a9:e9:a1:bd:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=7a244a8e-abc9-4dba-8f36-17d29b7ccb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:f7:47:41:a9:dd:64:be:74:01:5a:8f:9f:
12:01:4a:25:61:95:d5:a6:7e:9e:58:c1:48:b8:0d:
8b:17:9d:71:69:ca:2b:51:76:22:db:fe:11:43:9c:
7a:b0:1f:5e:c7:16:15:32:23:95:1e:d2:90:9b:ba:
be:63:fc:c8:0e:64:83:43:db:83:cc:fa:41:32:60:
2a:36:a7:5e:12:87:ae:c5:53:98:58:9f:61:e8:15:
5a:39:48:fe:c2:70:fc:89:df:d8:b7:9b:02:66:6e:
76:55:40:ea:86:94:66:1a:9d:87:de:22:7d:97:07:
92:d2:18:55:22:a3:34:6a:9c:1c:7b:b6:ab:9f:05:
a4:12:80:24:00:ff:6d:01:74:f6:38:09:08:9a:c6:
50:04:93:ce:59:1f:24:6f:b4:30:56:f4:ea:c1:0f:
eb:0d:85:a4:13:4d:bb:b3:7c:56:f5:4e:42:c7:a7:
6e:ec:6c:7d:41:64:59:00:2f:e1:a9:32:0c:83:f5:
46:3b:f1:28:1e:32:55:83:f1:d3:dd:b8:ce:c4:7b:
d0:83:f9:d1:8f:b9:17:8f:3d:d0:18:db:f8:d9:84:
68:64:10:d5:30:af:0e:2b:9e:52:20:45:fc:83:c5:
c4:17:f6:6a:19:77:b0:76:83:a1:5f:a8:7e:1c:9f:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5A:72:90:54:AA:83:DE:A8:53:D2:D7:7B:65:70:EB:CF:7A:BD:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c67d5cc3-9727-3301-b01c-8bbe588bcd6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:53:89:d2:d6:48:df:a6:47:d8:e0:28:5d:89:ca:92:60:7d:
8c:c1:53:5d:bc:d2:e9:86:97:44:ec:8f:e1:0a:e2:58:19:b4:
84:33:58:c3:6c:89:98:8f:13:33:ea:41:e2:61:b4:99:1d:61:
5d:35:aa:40:54:9f:92:52:54:37:32:10:7d:0b:4e:81:45:31:
79:00:c3:d3:03:e8:5d:19:4d:2e:ed:73:03:68:63:05:37:e4:
29:35:43:ad:a9:aa:52:f7:cf:43:09:41:c1:2f:20:3a:b7:7c:
73:03:b4:71:a7:c9:09:46:d5:c4:fd:2d:f3:3a:5f:45:e7:41:
64:c1:9a:ba:24:2e:97:a5:03:2d:64:86:cd:3c:11:ab:73:a3:
f9:31:11:a9:aa:91:37:e4:ab:27:46:9d:78:1b:dd:98:e3:76:
7e:72:fe:15:03:39:9d:25:9f:fb:2c:7e:5d:79:5d:05:99:53:
10:ba:45:cd:ca:6a:85:05:0c:9a:aa:e8:93:be:c5:15:91:8a:
f8:d2:6c:55:fd:fa:58:84:1d:83:a2:d6:03:89:cf:3b:52:00:
6a:5b:07:aa:a1:fe:2a:c3:ba:a9:17:e9:61:2f:83:3a:16:8f:
40:b3:a9:86:bd:51:f4:a6:c4:af:03:b1:eb:b9:fe:de:23:4a:
da:b6:ac:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1VHdeNEbip6aG9iyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMzA0MDAwMFoXDTI4MDMxNTA0MDAwMFowLzEtMCsGA1UEAxMk
N2EyNDRhOGUtYWJjOS00ZGJhLThmMzYtMTdkMjliN2NjYjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+T3R0Gp3WS+dAFaj58SAUolYZXVpn6eWMFI
uA2LF51xacorUXYi2/4RQ5x6sB9exxYVMiOVHtKQm7q+Y/zIDmSDQ9uDzPpBMmAq
NqdeEoeuxVOYWJ9h6BVaOUj+wnD8id/Yt5sCZm52VUDqhpRmGp2H3iJ9lweS0hhV
IqM0apwce7arnwWkEoAkAP9tAXT2OAkImsZQBJPOWR8kb7QwVvTqwQ/rDYWkE027
s3xW9U5Cx6du7Gx9QWRZAC/hqTIMg/VGO/EoHjJVg/HT3bjOxHvQg/nRj7kXjz3Q
GNv42YRoZBDVMK8OK55SIEX8g8XEF/ZqGXewdoOhX6h+HJ/PfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5acpBUqoPeqFPS13tlcOvPer2QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzY3ZDVjYzMtOTcyNy0z
MzAxLWIwMWMtOGJiZTU4OGJjZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAh4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRTidLWSN+mR9jgKF2JypJgfYzBU1280umGl0Tsj+EK4lgZtIQzWMNs
iZiPEzPqQeJhtJkdYV01qkBUn5JSVDcyEH0LToFFMXkAw9MD6F0ZTS7tcwNoYwU3
5Ck1Q62pqlL3z0MJQcEvIDq3fHMDtHGnyQlG1cT9LfM6X0XnQWTBmrokLpelAy1k
hs08Eatzo/kxEamqkTfkqydGnXgb3Zjjdn5y/hUDOZ0ln/ssfl15XQWZUxC6Rc3K
aoUFDJqq6JO+xRWRivjSbFX9+liEHYOi1gOJzztSAGpbB6qh/irDuqkX6WEvgzoW
j0CzqYa9UfSmxK8Dseu5/t4jStq2rK4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:13 2025 by rpki-client