Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa
File: d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa (raw, json)
Hash identifier: gI5bBOxAIVDJX3R+p5y6wEnGZtYzVujE+zBDAER8vHs=
Subject key identifier: DF:A7:71:DD:87:FE:9A:DB:5D:F3:90:B4:FA:1B:E9:39:F0:5B:E3:86
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D21107A44536EBD3D7EA0100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 395464
IP address blocks: 71.31.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:07:a4:45:36:eb:d3:d7:ea:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=771c326a-c5c6-491c-89b0-c7c5023d6be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:25:bf:ae:a1:56:cd:ed:63:45:31:8d:52:
ec:1d:af:68:cc:66:97:af:a2:02:cc:ee:51:47:a0:
0c:43:3c:95:5a:f4:6d:ba:35:67:f4:06:63:90:09:
30:e4:25:62:d1:ec:07:14:46:20:0b:58:f8:b0:2c:
2d:86:d2:6c:0c:c5:99:81:74:a1:b7:01:e9:df:d3:
9f:bf:34:44:93:5d:7a:a6:42:f3:b8:a0:69:21:50:
50:e0:12:9a:44:09:fa:f0:5b:54:5f:77:5c:53:3f:
7a:0c:50:33:56:6c:f5:79:e0:9f:dd:e2:b2:4c:19:
e7:95:f1:b1:73:02:fd:b2:5f:cb:79:31:db:39:e7:
0e:4e:06:b7:54:cd:6f:58:a1:f3:43:8e:8c:38:5b:
39:d3:76:fe:1a:27:a4:c0:55:d5:d2:22:e6:a7:0e:
1f:df:28:87:75:b8:61:8b:44:bd:80:f0:14:b6:69:
4a:00:7a:36:6c:13:b1:2b:4e:6a:c1:93:4a:f7:1a:
20:55:54:89:fc:90:e3:21:0d:80:c7:70:8d:e9:bc:
32:c4:8d:6c:ec:8b:29:5a:20:cb:d2:51:04:78:b4:
a8:3c:7a:c8:43:6c:90:b1:03:73:dc:70:a0:c6:64:
5a:0a:44:4b:85:cd:d7:86:24:9c:ef:25:45:82:19:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:71:DD:87:FE:9A:DB:5D:F3:90:B4:FA:1B:E9:39:F0:5B:E3:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:b3:b8:f4:3a:26:0d:00:f2:6b:6e:fc:cc:d1:17:b1:8e:6b:
a8:33:ca:f9:1f:f2:ff:79:ea:af:06:33:f0:0e:cc:98:b9:3f:
e2:f1:cc:24:ad:21:0b:6c:88:5d:8c:8c:b1:0d:c1:89:18:22:
df:8d:d4:c0:28:2f:87:f9:54:9c:5f:bf:07:f8:71:33:cb:f8:
d3:2b:0b:0d:83:91:9b:dd:5b:79:c4:d9:fd:29:1c:06:7d:0d:
83:f8:c2:6a:a5:ee:8c:cb:f6:30:4d:a7:84:80:98:98:19:41:
2a:26:0e:83:fc:49:ad:ef:4a:f6:68:36:99:83:66:85:cf:22:
4c:07:cb:10:72:95:0f:13:30:43:e5:00:d0:92:c6:20:6a:6f:
82:12:a9:c5:46:23:a5:22:37:a5:12:b8:58:ab:37:8b:45:63:
0a:3f:93:d2:8e:5f:cd:06:12:f7:88:fc:46:01:dc:65:e7:27:
62:3d:87:14:46:5c:ef:75:fc:5f:e3:74:63:6c:46:4c:29:e2:
76:6b:6a:9b:f7:35:3a:50:4a:7a:51:46:11:72:17:d8:a7:99:
93:09:39:9c:f4:45:f5:b5:e0:a0:39:b8:6a:d4:53:a1:99:ec:
99:57:de:0b:86:a7:6a:3f:53:ed:b6:9a:e9:ac:8f:f4:2a:1b:
75:bf:20:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQekRTbr09fqAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
NzcxYzMyNmEtYzVjNi00OTFjLTg5YjAtYzdjNTAyM2Q2YmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LIlv66hVs3tY0UxjVLsHa9ozGaXr6ICzO5R
R6AMQzyVWvRtujVn9AZjkAkw5CVi0ewHFEYgC1j4sCwthtJsDMWZgXShtwHp39Of
vzREk116pkLzuKBpIVBQ4BKaRAn68FtUX3dcUz96DFAzVmz1eeCf3eKyTBnnlfGx
cwL9sl/LeTHbOecOTga3VM1vWKHzQ46MOFs503b+GiekwFXV0iLmpw4f3yiHdbhh
i0S9gPAUtmlKAHo2bBOxK05qwZNK9xogVVSJ/JDjIQ2Ax3CN6bwyxI1s7IspWiDL
0lEEeLSoPHrIQ2yQsQNz3HCgxmRaCkRLhc3XhiSc7yVFghlMWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN+ncd2H/prbXfOQtPob6TnwW+OGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI1YTdhY2YtMWQ0Ni0z
ZTFhLTg2M2YtOTE1ZjBmYWVlOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx8eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACezuPQ6Jg0A8mtu/MzRF7GOa6gzyvkf8v956q8GM/AOzJi5P+LxzCSt
IQtsiF2MjLENwYkYIt+N1MAoL4f5VJxfvwf4cTPL+NMrCw2DkZvdW3nE2f0pHAZ9
DYP4wmql7ozL9jBNp4SAmJgZQSomDoP8Sa3vSvZoNpmDZoXPIkwHyxBylQ8TMEPl
ANCSxiBqb4ISqcVGI6UiN6USuFirN4tFYwo/k9KOX80GEveI/EYB3GXnJ2I9hxRG
XO91/F/jdGNsRkwp4nZrapv3NTpQSnpRRhFyF9inmZMJOZz0RfW14KA5uGrUU6GZ
7JlX3guGp2o/U+22mumsj/QqG3W/IC8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:47:51 2025 by rpki-client