Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/082f8543-b760-3b91-8c3a-d0c6c65d7040.roa
File: 082f8543-b760-3b91-8c3a-d0c6c65d7040.roa (raw, json)
Hash identifier: gkvY3qPnQikyBkWeFxxUnFEqrfUVoVkEfla1XYQQnGk=
Subject key identifier: 30:84:B2:D7:FE:A5:01:A4:4E:EC:16:CD:BA:BF:40:EA:A0:01:77:47
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10F5A9111FDCCBAAEFDD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/082f8543-b760-3b91-8c3a-d0c6c65d7040.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 71.57.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:f5:a9:11:1f:dc:cb:aa:ef:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=44b36ca6-c542-4ce1-a9ac-c4cf918d70e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:ea:de:6b:5b:71:d5:1d:a5:62:16:42:1d:
1d:28:fb:d5:4c:15:34:57:8f:bc:d3:e4:50:5f:94:
f4:6b:84:8b:e1:9f:3f:aa:2a:97:a8:86:e8:04:c1:
50:6b:1b:a0:ba:55:08:cb:43:96:54:59:f7:89:ff:
87:40:60:a5:6a:a7:65:22:32:c4:dd:09:2f:e3:a8:
74:8b:ac:55:63:7c:a8:13:2e:74:a2:e5:b2:a9:05:
33:54:0d:5b:d1:36:23:db:b6:80:51:e8:32:68:ec:
9a:8f:ff:91:d1:2f:ef:7d:de:4e:20:b1:fe:71:4e:
c8:ff:54:ea:4f:af:ce:34:a2:91:68:d5:e2:dc:bd:
3a:47:c6:f6:8d:29:18:34:5d:98:78:d5:54:56:c5:
6a:5f:0e:66:07:99:7e:23:98:9d:db:ae:82:38:26:
14:08:39:8e:91:a2:43:5c:13:6c:9e:db:c9:2a:55:
8f:37:25:40:25:49:07:5a:52:ad:92:47:ed:1a:e8:
5e:c2:42:19:d6:03:fe:ec:04:fb:55:d8:c6:ba:83:
2a:c8:71:fe:31:a9:29:65:b8:80:f4:b0:71:14:be:
cd:b1:e0:f2:fd:4a:40:3c:e2:9a:04:0d:f1:a6:94:
c8:8e:b6:36:7b:aa:f4:a6:4d:6c:5e:05:34:21:6a:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:84:B2:D7:FE:A5:01:A4:4E:EC:16:CD:BA:BF:40:EA:A0:01:77:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/082f8543-b760-3b91-8c3a-d0c6c65d7040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.57.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:14:99:d6:10:34:33:37:c3:38:ee:53:53:50:ff:6e:90:f9:
7e:12:f5:48:37:8d:1e:b0:d1:6d:f5:55:2a:42:7b:6d:76:53:
82:44:bd:11:29:14:fd:55:73:05:14:9a:3f:08:80:cd:e3:72:
32:e3:98:a0:91:59:22:8e:96:43:4d:35:ea:a2:82:b0:cd:bb:
c9:88:92:b4:ad:b9:5d:6d:fe:b5:18:78:e4:b0:0b:9d:bb:04:
ed:21:7e:b4:89:70:3b:89:1e:63:f9:b1:05:f3:76:c4:3d:c4:
8c:e4:77:56:22:ab:3f:94:c8:a9:90:a7:fd:c9:7b:5d:9b:ad:
f1:1a:ce:b0:3e:f3:8e:a7:8d:d3:3b:51:34:1e:6d:8f:91:0f:
e6:54:11:cb:65:86:05:97:63:fe:64:5a:d3:b1:d5:b3:11:36:
b7:c7:38:a9:7a:08:06:1b:c2:8e:e7:3a:be:19:38:5e:fe:e7:
ae:8c:a1:48:5c:a9:66:a6:58:0a:7e:a6:b5:c5:de:21:06:1e:
71:12:db:9d:96:73:9e:84:93:9e:cd:b9:1f:bb:6f:95:fd:27:
06:cf:b0:ed:c0:32:67:59:38:41:a1:c4:34:c1:96:2a:0c:a9:
67:b2:90:bd:83:a3:6c:1c:be:27:10:b1:37:27:b1:5e:b4:31:
1f:f9:f3:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEPWpER/cy6rv3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NDRiMzZjYTYtYzU0Mi00Y2UxLWE5YWMtYzRjZjkxOGQ3MGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvPq3mtbcdUdpWIWQh0dKPvVTBU0V4+80+RQ
X5T0a4SL4Z8/qiqXqIboBMFQaxugulUIy0OWVFn3if+HQGClaqdlIjLE3Qkv46h0
i6xVY3yoEy50ouWyqQUzVA1b0TYj27aAUegyaOyaj/+R0S/vfd5OILH+cU7I/1Tq
T6/ONKKRaNXi3L06R8b2jSkYNF2YeNVUVsVqXw5mB5l+I5id266COCYUCDmOkaJD
XBNsntvJKlWPNyVAJUkHWlKtkkftGuhewkIZ1gP+7AT7VdjGuoMqyHH+MakpZbiA
9LBxFL7NseDy/UpAPOKaBA3xppTIjrY2e6r0pk1sXgU0IWqL7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCEstf+pQGkTuwWzbq/QOqgAXdHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDgyZjg1NDMtYjc2MC0z
YjkxLThjM2EtZDBjNmM2NWQ3MDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRzkKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8UmdYQNDM3wzjuU1NQ/26Q+X4S9Ug3jR6w0W31VSpCe212U4JEvREp
FP1VcwUUmj8IgM3jcjLjmKCRWSKOlkNNNeqigrDNu8mIkrStuV1t/rUYeOSwC527
BO0hfrSJcDuJHmP5sQXzdsQ9xIzkd1Yiqz+UyKmQp/3Je12brfEazrA+846njdM7
UTQebY+RD+ZUEctlhgWXY/5kWtOx1bMRNrfHOKl6CAYbwo7nOr4ZOF7+566MoUhc
qWamWAp+prXF3iEGHnES252Wc56Ek57NuR+7b5X9JwbPsO3AMmdZOEGhxDTBlioM
qWeykL2Do2wcvicQsTcnsV60MR/5894=
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:35:15 2025 by rpki-client