Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9db6fdb-a335-3c9d-9a5b-89d02a2eb387.roa
File: e9db6fdb-a335-3c9d-9a5b-89d02a2eb387.roa (raw, json)
Hash identifier: ehyGyqG/vuxW55ndC25AZa/Vf2lTUhJEFjMk891c1CM=
Subject key identifier: 34:A6:AF:1B:E0:7E:4B:9B:01:8F:ED:E6:67:CE:01:43:8C:37:03:E2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661D78CB4C2D5AEC77955E80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9db6fdb-a335-3c9d-9a5b-89d02a2eb387.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.19.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:78:cb:4c:2d:5a:ec:77:95:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=2e401b43-c770-4a4c-b88c-8c560519d240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:53:ad:93:cc:da:83:29:c9:3a:f3:45:2e:
2b:1f:fa:bb:cf:80:6a:ae:76:7a:13:68:eb:3e:bc:
50:bb:fa:a6:db:cc:79:bc:f9:76:29:ba:12:ab:cd:
dd:85:8e:4e:c4:2c:fd:92:cc:97:29:4e:4c:a1:84:
0b:b9:31:a5:fb:e7:fc:51:dd:29:84:c7:25:af:93:
05:a1:34:46:13:9b:25:e9:26:4d:6c:9d:8f:ab:a4:
3d:83:70:04:c6:bc:2a:90:2d:f9:36:bd:0e:be:70:
fb:82:0c:a2:2a:bb:da:e5:b1:ef:78:af:3e:50:e0:
dd:eb:a2:4f:ec:86:49:bc:21:33:70:2f:e7:96:ef:
e8:c6:d2:e9:26:6e:bc:ef:05:dc:80:21:33:c7:91:
4f:ae:0a:76:f3:93:3e:79:f4:8a:d7:47:57:36:35:
ff:b6:47:b7:a5:ea:55:35:4d:0e:5b:fc:04:31:f1:
19:24:ae:8b:e4:4b:62:1a:97:26:de:d1:90:68:24:
cd:bf:95:02:cd:5e:d1:c7:46:67:3a:6c:aa:0f:da:
d6:10:40:7f:bc:18:fb:c0:3b:00:0c:c1:f2:0a:13:
5b:77:04:4c:03:3d:fc:15:76:76:65:6a:f1:8c:e8:
e9:69:98:11:43:8b:a7:ed:d3:6b:41:41:db:75:17:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A6:AF:1B:E0:7E:4B:9B:01:8F:ED:E6:67:CE:01:43:8C:37:03:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9db6fdb-a335-3c9d-9a5b-89d02a2eb387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:81:b4:12:36:db:56:28:e6:e0:d1:d1:9d:6e:4b:b9:6f:fd:
b2:6a:53:82:a9:1f:2d:bd:72:93:f7:53:0e:f3:e8:95:6e:70:
26:69:00:7f:d3:91:53:0a:14:b5:5e:a1:9b:f0:a2:74:c1:66:
e5:ca:fd:81:dc:08:e4:7d:7b:81:29:1a:58:3b:6e:f5:09:b2:
20:dc:e5:e9:25:b0:2d:4b:d9:81:f7:b5:11:31:de:56:a7:23:
b9:94:0f:ab:e7:78:ff:4d:69:5d:53:73:66:e5:04:08:f8:c7:
42:cb:ba:6a:57:c0:a1:fc:22:72:f7:3b:79:83:73:a6:77:01:
6f:0b:9b:50:9f:7b:86:38:53:7c:11:dd:82:e5:a8:6d:ed:e9:
b9:d4:55:91:20:5f:5d:39:8f:44:db:32:8f:e3:90:fd:5c:ae:
9d:04:5c:29:58:19:80:f8:fb:9d:69:c1:73:3b:76:c4:10:5d:
13:a0:51:d4:e8:d6:73:a7:ab:be:54:d2:75:3d:28:84:bf:16:
68:3e:bf:3c:16:15:c8:ed:ff:41:6b:29:1d:32:e1:8e:51:69:
72:46:62:4d:6b:c4:54:b1:94:17:e1:f6:29:57:c8:5a:5b:98:
bd:34:1b:03:47:29:58:a1:90:5b:0b:a8:61:39:ac:cf:2f:bc:
30:ce:a0:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHXjLTC1a7HeVXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MmU0MDFiNDMtYzc3MC00YTRjLWI4OGMtOGM1NjA1MTlkMjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1dTrZPM2oMpyTrzRS4rH/q7z4BqrnZ6E2jr
PrxQu/qm28x5vPl2KboSq83dhY5OxCz9ksyXKU5MoYQLuTGl++f8Ud0phMclr5MF
oTRGE5sl6SZNbJ2Pq6Q9g3AExrwqkC35Nr0OvnD7ggyiKrva5bHveK8+UODd66JP
7IZJvCEzcC/nlu/oxtLpJm687wXcgCEzx5FPrgp285M+efSK10dXNjX/tke3pepV
NU0OW/wEMfEZJK6L5EtiGpcm3tGQaCTNv5UCzV7Rx0ZnOmyqD9rWEEB/vBj7wDsA
DMHyChNbdwRMAz38FXZ2ZWrxjOjpaZgRQ4un7dNrQUHbdRd1AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSmrxvgfkubAY/t5mfOAUOMNwPiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTlkYjZmZGItYTMzNS0z
YzlkLTlhNWItODlkMDJhMmViMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhNIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACmBtBI221Yo5uDR0Z1uS7lv/bJqU4KpHy29cpP3Uw7z6JVucCZpAH/T
kVMKFLVeoZvwonTBZuXK/YHcCOR9e4EpGlg7bvUJsiDc5eklsC1L2YH3tREx3lan
I7mUD6vneP9NaV1Tc2blBAj4x0LLumpXwKH8InL3O3mDc6Z3AW8Lm1Cfe4Y4U3wR
3YLlqG3t6bnUVZEgX105j0TbMo/jkP1crp0EXClYGYD4+51pwXM7dsQQXROgUdTo
1nOnq75U0nU9KIS/Fmg+vzwWFcjt/0FrKR0y4Y5RaXJGYk1rxFSxlBfh9ilXyFpb
mL00GwNHKVihkFsLqGE5rM8vvDDOoEE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:40 2025 by rpki-client