Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd06b437-700f-3b72-a4ee-8555c8263896.roa
File: fd06b437-700f-3b72-a4ee-8555c8263896.roa (raw, json)
Hash identifier: bAu7DZxZPRt2FuSVefby/rEMHZIUYgi5LTqPQ4dY2tI=
Subject key identifier: B8:17:8A:E5:F8:89:68:A4:71:5D:D5:04:91:1D:7E:87:67:35:8B:E9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848F2AA72083CF2FBBF4B6C7E60
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd06b437-700f-3b72-a4ee-8555c8263896.roa
Signing time: Thu 20 Feb 2025 18:15:56 +0000
ROA not before: Thu 20 Feb 2025 18:15:56 +0000
ROA not after: Wed 21 May 2025 17:15:56 +0000
asID: 7029
IP address blocks: 173.184.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:aa:72:08:3c:f2:fb:bf:4b:6c:7e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 20 18:15:56 2025 GMT
Not After : May 21 17:15:56 2025 GMT
Subject: CN=d9cb4186-77bd-4574-ba62-75c9ec21ede1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:4d:be:fd:5b:ad:0b:81:b2:a1:60:a0:09:
5b:2e:e3:18:8f:a2:90:b7:3e:38:ed:70:2c:4a:64:
fe:dd:e1:ba:75:d3:22:e1:de:9d:ee:bd:9d:ca:47:
01:49:00:97:bc:44:92:59:06:71:dc:8a:13:c2:9e:
92:ff:ed:22:59:f0:46:53:b4:b2:0e:ef:f4:c8:ff:
5c:90:b9:65:30:45:da:fc:c7:e6:03:a4:17:95:b6:
2b:2d:97:11:f1:c7:17:b1:3e:68:ee:e5:e6:03:11:
05:ce:13:02:69:93:55:a1:f6:c5:85:9c:c0:3f:fb:
d1:74:f6:e9:22:20:bd:f6:a4:26:ca:29:24:7f:fa:
08:0c:36:d2:34:6e:83:50:9e:5b:fd:6e:12:1c:df:
3a:f5:4f:7d:99:8a:ae:81:c9:57:ae:61:7f:e6:6e:
1d:e3:06:2b:f5:08:a3:36:42:1a:fa:9b:cd:9b:a3:
36:b3:4d:9c:c4:0e:7e:6d:5c:f2:b0:47:d2:c7:c7:
22:f6:bc:ef:4f:31:c0:5b:76:05:ea:d4:f7:4d:e1:
da:d4:50:e6:be:d1:59:3a:21:d7:08:dc:e5:69:22:
85:08:0d:82:67:3e:f6:92:b6:46:8f:5a:41:fa:53:
78:5b:33:bb:ca:1a:90:b0:b5:c8:3f:d9:ab:79:d2:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:8A:E5:F8:89:68:A4:71:5D:D5:04:91:1D:7E:87:67:35:8B:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fd06b437-700f-3b72-a4ee-8555c8263896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.184.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:c0:27:37:51:38:c1:a0:99:3e:01:17:63:29:9a:03:c2:9f:
29:12:2e:27:10:bc:ec:a6:1c:0e:47:b6:36:9f:b9:53:77:04:
71:09:c4:50:c8:e7:10:68:91:48:e3:08:a6:28:4c:95:c6:9c:
aa:18:3a:f0:c9:37:e3:d9:c2:55:2d:1d:f3:7d:d0:9e:9e:6a:
eb:a9:0d:94:c1:ff:e1:67:52:73:e3:8a:52:2b:3c:0a:b3:78:
88:06:da:84:d3:f9:4a:37:d6:80:a2:0f:1b:49:4e:b7:6b:0d:
32:b7:62:3c:64:d1:6e:2b:74:26:ce:9d:9c:d9:39:c4:88:e3:
a4:cf:a0:aa:d4:7a:28:35:57:00:2b:35:22:9e:13:29:62:85:
70:81:27:9f:b4:df:f0:9b:4e:2d:32:c1:b6:2a:86:c3:e0:d1:
32:7c:f0:c6:a0:fd:d0:f1:22:18:69:f4:0e:99:9a:03:00:b9:
70:2f:de:ce:11:2f:2c:68:ad:2b:06:62:a3:53:6b:2d:2f:d6:
a9:95:b7:74:99:55:30:85:e9:2b:94:4d:60:ca:66:8d:05:f6:
f6:23:b6:75:d8:8e:13:9e:3d:47:db:02:18:6e:4f:77:e3:65:
7f:64:42:23:93:5f:fd:bb:42:f7:6f:73:cb:3a:c2:0c:2d:e1:
04:9c:e2:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqnIIPPL7v0tsfmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIyMDE4MTU1NloXDTI1MDUyMTE3MTU1NlowLzEtMCsGA1UEAxMk
ZDljYjQxODYtNzdiZC00NTc0LWJhNjItNzVjOWVjMjFlZGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1hNvv1brQuBsqFgoAlbLuMYj6KQtz447XAs
SmT+3eG6ddMi4d6d7r2dykcBSQCXvESSWQZx3IoTwp6S/+0iWfBGU7SyDu/0yP9c
kLllMEXa/MfmA6QXlbYrLZcR8ccXsT5o7uXmAxEFzhMCaZNVofbFhZzAP/vRdPbp
IiC99qQmyikkf/oIDDbSNG6DUJ5b/W4SHN869U99mYqugclXrmF/5m4d4wYr9Qij
NkIa+pvNm6M2s02cxA5+bVzysEfSx8ci9rzvTzHAW3YF6tT3TeHa1FDmvtFZOiHX
CNzlaSKFCA2CZz72krZGj1pB+lN4WzO7yhqQsLXIP9mredKoIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLgXiuX4iWikcV3VBJEdfodnNYvpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmQwNmI0MzctNzAwZi0z
YjcyLWE0ZWUtODU1NWM4MjYzODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbjIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPAJzdROMGgmT4BF2MpmgPCnykSLicQvOymHA5HtjafuVN3BHEJxFDI
5xBokUjjCKYoTJXGnKoYOvDJN+PZwlUtHfN90J6eauupDZTB/+FnUnPjilIrPAqz
eIgG2oTT+Uo31oCiDxtJTrdrDTK3Yjxk0W4rdCbOnZzZOcSI46TPoKrUeig1VwAr
NSKeEylihXCBJ5+03/CbTi0ywbYqhsPg0TJ88Mag/dDxIhhp9A6ZmgMAuXAv3s4R
LyxorSsGYqNTay0v1qmVt3SZVTCF6SuUTWDKZo0F9vYjtnXYjhOePUfbAhhuT3fj
ZX9kQiOTX/27Qvdvc8s6wgwt4QSc4uM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:46 2025 by rpki-client