Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbb6678e-6d5d-3756-a47a-2eb47cdbb984.roa
File: dbb6678e-6d5d-3756-a47a-2eb47cdbb984.roa (raw, json)
Hash identifier: 0j4wG0Geq+bs+mWSg+w4jlke1/7E5Lthq6Ki3ilX08M=
Subject key identifier: 67:A1:80:5C:E3:F8:3D:C4:35:E2:7E:AB:94:BE:3D:95:EA:6D:E9:38
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6616E804AEDF94AB59EFA000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbb6678e-6d5d-3756-a47a-2eb47cdbb984.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 67.141.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:16:e8:04:ae:df:94:ab:59:ef:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=de339249-0b6f-4faa-8c67-a897d138b57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:9a:4b:e0:6d:84:45:7f:c2:77:1f:ec:4c:
88:8f:e0:5a:24:bf:37:6f:25:33:7f:25:43:6b:ea:
83:69:cb:57:1a:64:63:14:83:e5:f0:f7:8c:3c:2d:
df:f0:b9:75:a8:83:a4:ab:55:b5:9a:31:89:07:61:
d5:9c:20:4c:98:f7:ea:94:fc:7e:37:76:fd:ee:3c:
01:e4:75:8d:44:05:40:e2:0d:c2:cd:30:36:5c:0a:
ed:30:31:c8:42:60:8a:32:f1:7b:66:23:b4:93:ab:
f6:8c:fc:89:56:25:66:a5:0c:fd:0b:3e:9b:9b:df:
15:6d:5a:27:11:03:2b:e5:a3:f1:46:2f:3c:a5:85:
bc:d2:33:29:83:0c:ff:9c:9c:4b:26:69:96:63:80:
bb:b4:cb:03:19:0c:ae:e9:cb:05:44:86:b1:8e:6d:
b8:99:ac:c2:01:e2:f8:b4:af:fe:e9:81:4e:27:fc:
0d:2c:09:51:81:3b:28:c1:50:19:c4:b0:96:90:3c:
55:48:57:1c:5a:1c:5e:56:42:c6:cc:f8:14:5e:6a:
71:1a:73:79:1e:d3:52:25:b2:39:38:2c:e2:b0:50:
ef:c7:d2:36:41:13:4c:b8:a0:dc:30:74:07:c8:3a:
aa:d3:a3:44:d9:3c:b6:d5:76:f9:e4:70:53:66:a3:
0e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:80:5C:E3:F8:3D:C4:35:E2:7E:AB:94:BE:3D:95:EA:6D:E9:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dbb6678e-6d5d-3756-a47a-2eb47cdbb984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.141.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:63:5a:9c:de:bb:38:58:39:95:d5:a8:6f:6b:9c:d8:f0:d1:
c5:48:e3:fb:c9:66:f3:22:96:b0:5b:9d:6f:8d:fc:a0:7e:5a:
d0:d5:2c:1d:02:83:1e:ef:52:3a:01:41:c5:4d:34:9b:a9:7d:
23:f1:f7:44:c9:38:e3:04:60:b0:ee:a4:22:c2:7b:c8:09:33:
52:37:d2:14:7e:73:aa:93:77:63:57:fb:c7:6e:2f:4f:2d:9c:
8f:c7:ea:1f:44:7f:a5:e6:81:1c:a4:7a:94:5d:f3:f5:88:77:
d5:c3:2e:b3:8d:32:57:cc:fa:96:e8:8d:56:7e:42:a9:4d:d6:
2b:02:72:28:1c:2e:ce:6e:70:c4:83:78:ff:79:ae:15:98:da:
ef:b6:8e:a7:22:95:7b:b3:b0:f4:b0:9c:72:12:1e:fc:bf:1d:
d2:c3:e1:a8:e1:0e:37:7d:7a:ca:28:d4:5f:f7:3b:26:96:b3:
ba:d6:7f:cd:be:59:c1:3b:0c:87:5b:5d:96:3f:03:89:8d:b8:
7a:ab:42:e0:ff:08:52:db:6c:89:d4:b4:54:8e:f7:c0:fa:94:
73:73:2d:35:27:10:9e:11:e4:c1:00:41:e7:f5:01:1b:bf:70:
d2:66:a0:10:56:c9:f3:2d:6c:3c:dc:97:6c:fe:25:b6:13:7c:
97:8a:55:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mFugErt+Uq1nvoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGUzMzkyNDktMGI2Zi00ZmFhLThjNjctYTg5N2QxMzhiNTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls+aS+BthEV/wncf7EyIj+BaJL83byUzfyVD
a+qDactXGmRjFIPl8PeMPC3f8Ll1qIOkq1W1mjGJB2HVnCBMmPfqlPx+N3b97jwB
5HWNRAVA4g3CzTA2XArtMDHIQmCKMvF7ZiO0k6v2jPyJViVmpQz9Cz6bm98VbVon
EQMr5aPxRi88pYW80jMpgwz/nJxLJmmWY4C7tMsDGQyu6csFRIaxjm24mazCAeL4
tK/+6YFOJ/wNLAlRgTsowVAZxLCWkDxVSFccWhxeVkLGzPgUXmpxGnN5HtNSJbI5
OCzisFDvx9I2QRNMuKDcMHQHyDqq06NE2Ty21Xb55HBTZqMOdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGehgFzj+D3ENeJ+q5S+PZXqbek4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGJiNjY3OGUtNmQ1ZC0z
NzU2LWE0N2EtMmViNDdjZGJiOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ41gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9jWpzeuzhYOZXVqG9rnNjw0cVI4/vJZvMilrBbnW+N/KB+WtDVLB0C
gx7vUjoBQcVNNJupfSPx90TJOOMEYLDupCLCe8gJM1I30hR+c6qTd2NX+8duL08t
nI/H6h9Ef6XmgRykepRd8/WId9XDLrONMlfM+pbojVZ+QqlN1isCcigcLs5ucMSD
eP95rhWY2u+2jqcilXuzsPSwnHISHvy/HdLD4ajhDjd9esoo1F/3OyaWs7rWf82+
WcE7DIdbXZY/A4mNuHqrQuD/CFLbbInUtFSO98D6lHNzLTUnEJ4R5MEAQef1ARu/
cNJmoBBWyfMtbDzcl2z+JbYTfJeKVa8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:37 2025 by rpki-client