Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b49c4f9a-efdd-3c46-9470-756dbc320952.roa
File: b49c4f9a-efdd-3c46-9470-756dbc320952.roa (raw, json)
Hash identifier: iIzUjg77Uy8TZvcLKCNs8nUt/GWdqvDKgaui4LbIOIg=
Subject key identifier: 0D:6D:81:74:1A:41:D0:72:FC:A7:B7:A5:82:81:C2:34:98:1C:42:11
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB785B0560CBCC2E889BC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b49c4f9a-efdd-3c46-9470-756dbc320952.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 207.81.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:78:5b:05:60:cb:cc:2e:88:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=5ac7ed79-c754-4466-936c-1019ab8cde1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:1e:d2:a5:5f:84:05:7c:38:a6:03:0f:15:
1d:d2:e6:9a:a8:c0:58:0d:9d:5f:f0:f2:ab:d8:f5:
cc:c9:63:38:18:23:9f:c9:06:4b:a9:f4:80:8a:74:
22:77:66:ad:7f:ae:ec:e5:ca:5f:c7:92:d8:b1:d9:
cf:49:a5:cf:69:e7:e5:79:4a:83:d6:ad:32:fb:29:
76:91:4e:bb:95:d3:fe:8a:a6:05:e0:58:d4:3d:5b:
54:97:bf:7a:5e:0a:97:c9:71:28:99:e4:95:6a:b3:
03:6e:b4:ab:31:7d:0d:35:68:27:2e:13:75:46:1b:
d2:44:2a:ef:93:a5:c3:eb:3e:ad:b0:f9:d5:3d:95:
4b:e2:bb:ac:88:88:2a:69:bd:dc:c6:42:22:11:c9:
2e:c7:92:5b:d3:65:6a:24:d8:a2:43:53:1b:50:86:
11:9b:53:80:fc:65:ad:95:06:c0:4d:aa:fe:a4:0d:
7d:2a:25:99:f2:91:49:ba:34:ab:a0:3c:e6:75:68:
5e:70:07:60:97:c6:0c:5c:59:75:1d:c8:9e:25:7a:
2e:98:38:9d:7f:43:15:86:cb:db:ec:1e:6e:2b:99:
a0:3f:30:be:b1:9f:dc:63:46:d5:d0:17:2c:96:9d:
71:bf:5a:f7:cc:52:d6:9b:75:c6:b5:a1:a5:c0:c5:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6D:81:74:1A:41:D0:72:FC:A7:B7:A5:82:81:C2:34:98:1C:42:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b49c4f9a-efdd-3c46-9470-756dbc320952.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
207.81.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:bc:e5:ac:a1:6d:97:0b:52:e5:34:9e:5b:08:01:96:a3:80:
70:29:1a:93:70:7c:a4:1b:58:d8:08:62:b2:5f:9a:10:ca:53:
5f:d4:2a:b1:f7:66:b4:ad:3a:49:d6:24:eb:75:b5:33:2b:53:
4e:58:d2:9e:9a:44:c7:3b:45:32:fe:e1:0c:8c:c3:de:be:a4:
da:ab:65:65:7c:47:eb:9f:d9:f8:cd:f6:11:dd:2a:13:d5:4b:
68:8a:9b:42:7a:d7:29:dc:f1:d5:5a:e1:97:b8:11:cd:35:c0:
e3:d9:a5:7d:ea:5a:9b:65:48:11:7e:2a:1e:82:59:88:5c:26:
9b:c2:20:60:3b:69:71:5f:76:f7:c0:c8:df:a0:9d:9d:f6:97:
3a:7e:aa:7e:94:0d:a7:f6:99:7f:54:27:e2:53:e7:50:17:28:
b4:f7:87:22:96:fa:91:75:98:30:bc:69:5a:80:9a:4d:03:36:
c3:76:e7:9e:4e:93:99:d7:c1:1f:03:4f:81:b3:83:e9:69:08:
3c:47:0f:05:f2:9f:68:65:3c:09:00:8f:00:aa:64:72:59:b7:
92:dd:c6:06:fa:1c:ef:90:86:0f:61:a5:47:fa:7d:e4:d3:df:
20:32:83:b8:6e:b7:79:e0:d4:fe:c5:d9:9b:14:dc:0e:8d:d2:
dd:ec:57:a7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi7u3hbBWDLzC6Im8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
NWFjN2VkNzktYzc1NC00NDY2LTkzNmMtMTAxOWFiOGNkZTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloQe0qVfhAV8OKYDDxUd0uaaqMBYDZ1f8PKr
2PXMyWM4GCOfyQZLqfSAinQid2atf67s5cpfx5LYsdnPSaXPaefleUqD1q0y+yl2
kU67ldP+iqYF4FjUPVtUl796XgqXyXEomeSVarMDbrSrMX0NNWgnLhN1RhvSRCrv
k6XD6z6tsPnVPZVL4rusiIgqab3cxkIiEckux5Jb02VqJNiiQ1MbUIYRm1OA/GWt
lQbATar+pA19KiWZ8pFJujSroDzmdWhecAdgl8YMXFl1HcieJXoumDidf0MVhsvb
7B5uK5mgPzC+sZ/cY0bV0Bcslp1xv1r3zFLWm3XGtaGlwMXIswIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA1tgXQaQdBy/Ke3pYKBwjSYHEIRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjQ5YzRmOWEtZWZkZC0z
YzQ2LTk0NzAtNzU2ZGJjMzIwOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz1EwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdbzlrKFtlwtS5TSeWwgBlqOAcCkak3B8pBtY2Ahisl+aEMpTX9Qqsfdm
tK06SdYk63W1MytTTljSnppExztFMv7hDIzD3r6k2qtlZXxH65/Z+M32Ed0qE9VL
aIqbQnrXKdzx1Vrhl7gRzTXA49mlfepam2VIEX4qHoJZiFwmm8IgYDtpcV9298DI
36CdnfaXOn6qfpQNp/aZf1Qn4lPnUBcotPeHIpb6kXWYMLxpWoCaTQM2w3bnnk6T
mdfBHwNPgbOD6WkIPEcPBfKfaGU8CQCPAKpkclm3kt3GBvoc75CGD2GlR/p95NPf
IDKDuG63eeDU/sXZmxTcDo3S3exXpw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:09 2025 by rpki-client