Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecac8720-7107-3764-bdb9-fdedf82928e3.roa
File: ecac8720-7107-3764-bdb9-fdedf82928e3.roa (raw, json)
Hash identifier: 1nshw+qYwg9IPsiiuwy+ep0I7b2sJkRRRUEZVYXXKMM=
Subject key identifier: 21:6B:B6:EF:8E:84:A5:47:5A:55:06:0F:33:1A:53:61:3B:B2:70:64
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661ED06DD69F4B0E51532300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecac8720-7107-3764-bdb9-fdedf82928e3.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 151.213.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1e:d0:6d:d6:9f:4b:0e:51:53:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=68abe8d1-56c2-4bb8-a2d2-6056b033f515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:c1:dd:d0:59:de:93:d4:14:55:79:b0:24:
b7:3a:cf:77:94:85:e8:db:6d:db:22:9a:d7:29:8e:
96:d4:10:1f:46:a9:ef:c2:84:7c:65:03:73:44:b0:
89:36:26:ff:f4:1c:8b:92:a6:26:8d:3f:ad:8b:24:
d0:37:05:ba:86:dd:c3:1f:c3:39:19:22:14:12:4f:
80:50:58:6e:f5:1c:a2:cb:3d:5e:20:af:3f:ea:56:
dc:b1:ca:1b:9c:69:c0:99:5d:d3:4a:45:57:70:43:
e2:02:f0:8e:a6:2e:3e:bd:7e:90:ba:3c:99:fe:02:
d9:a4:46:de:9a:e3:a6:4a:31:5a:9f:a5:22:2e:0d:
94:73:9f:3c:bf:3b:80:dc:a7:71:80:d0:14:d4:ae:
a1:67:8a:15:83:0c:bf:59:94:f5:d0:0d:31:a0:04:
53:11:77:a8:ae:58:a7:0b:89:d9:f4:a5:3c:30:20:
45:5b:e6:01:a2:e9:04:d0:53:b3:22:1e:89:5f:2f:
9b:7d:ba:b0:bb:35:7c:1d:7e:29:90:68:4c:21:14:
cc:a3:c3:92:be:2d:c3:48:3c:df:5b:f3:a3:a6:16:
76:82:e9:5a:a6:b8:48:41:80:8d:17:88:dd:be:e7:
77:27:34:5f:be:30:bc:a2:e3:57:e9:92:0b:f2:4a:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6B:B6:EF:8E:84:A5:47:5A:55:06:0F:33:1A:53:61:3B:B2:70:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecac8720-7107-3764-bdb9-fdedf82928e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
151.213.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:9b:1c:d0:c9:9f:d1:a0:07:91:82:d6:36:3b:33:51:64:2b:
2f:33:ee:b9:5f:f3:96:5a:b6:ae:eb:ea:fb:be:a5:65:8a:5e:
89:80:c4:37:75:d3:fe:9d:ef:cf:bb:a4:bd:8b:fb:43:cf:b2:
52:bc:22:1c:f1:49:86:bd:a2:be:36:fe:c1:b2:c5:b2:45:33:
9e:09:0f:ba:9a:79:e0:fd:01:06:67:01:3d:6e:20:67:63:50:
6f:c7:a6:4b:1d:29:26:aa:5b:2e:9b:11:3c:e0:ca:62:5c:3e:
6f:a1:a8:73:f9:a1:2c:a4:4e:f5:24:af:80:ca:bf:48:71:b5:
37:1b:62:5e:65:03:eb:16:a4:c7:91:9d:c1:b4:95:ce:53:e1:
74:d6:61:d1:8a:a8:17:81:6c:a3:d7:96:8b:56:c9:22:82:95:
2b:36:af:ea:60:d9:5b:53:6a:30:8a:84:c3:6d:80:78:f5:a0:
28:06:b2:70:a0:ae:64:55:5c:58:91:44:23:38:df:85:00:39:
75:41:8c:dc:ba:fb:8e:77:e6:3b:88:9e:ea:0a:9d:05:2a:d2:
75:0b:e3:15:f0:79:d2:1b:94:95:74:30:a9:38:a9:d2:0a:8e:
9b:8a:39:86:b6:6f:c1:fd:17:20:56:b2:25:86:26:43:c1:b5:
f0:84:61:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHtBt1p9LDlFTIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjhhYmU4ZDEtNTZjMi00YmI4LWEyZDItNjA1NmIwMzNmNTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlPB3dBZ3pPUFFV5sCS3Os93lIXo223bIprX
KY6W1BAfRqnvwoR8ZQNzRLCJNib/9ByLkqYmjT+tiyTQNwW6ht3DH8M5GSIUEk+A
UFhu9Ryiyz1eIK8/6lbcscobnGnAmV3TSkVXcEPiAvCOpi4+vX6QujyZ/gLZpEbe
muOmSjFan6UiLg2Uc588vzuA3KdxgNAU1K6hZ4oVgwy/WZT10A0xoARTEXeorlin
C4nZ9KU8MCBFW+YBoukE0FOzIh6JXy+bfbqwuzV8HX4pkGhMIRTMo8OSvi3DSDzf
W/OjphZ2gulaprhIQYCNF4jdvud3JzRfvjC8ouNX6ZIL8kpezwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCFrtu+OhKVHWlUGDzMaU2E7snBkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNhYzg3MjAtNzEwNy0z
NzY0LWJkYjktZmRlZGY4MjkyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9UoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGibHNDJn9GgB5GC1jY7M1FkKy8z7rlf85Zatq7r6vu+pWWKXomAxDd1
0/6d78+7pL2L+0PPslK8IhzxSYa9or42/sGyxbJFM54JD7qaeeD9AQZnAT1uIGdj
UG/HpksdKSaqWy6bETzgymJcPm+hqHP5oSykTvUkr4DKv0hxtTcbYl5lA+sWpMeR
ncG0lc5T4XTWYdGKqBeBbKPXlotWySKClSs2r+pg2VtTajCKhMNtgHj1oCgGsnCg
rmRVXFiRRCM434UAOXVBjNy6+4535juInuoKnQUq0nUL4xXwedIblJV0MKk4qdIK
jpuKOYa2b8H9FyBWsiWGJkPBtfCEYWo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:13 2025 by rpki-client