Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115a6e49-e35d-368f-9a6e-396b2e077791.roa
File: 115a6e49-e35d-368f-9a6e-396b2e077791.roa (raw, json)
Hash identifier: 8oynn1anGUaw1DUVjja1MQ4/G/l5ilbBTNqeIi2h87g=
Subject key identifier: 2A:6A:61:0E:54:94:B5:57:8B:C1:22:C7:A2:EE:58:16:15:3D:76:29
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BDCA3E2F5DB4D73194E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115a6e49-e35d-368f-9a6e-396b2e077791.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 21508
IP address blocks: 2001:559:8604::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:dc:a3:e2:f5:db:4d:73:19:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=3fab3d7f-cd52-4fdc-b198-876f6afd9dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:37:10:32:55:08:b6:66:91:c5:e3:72:e7:
ac:1c:d4:ab:e8:6b:19:88:00:44:4d:c9:ff:7e:ff:
83:a0:e7:29:8b:ba:9e:a7:36:85:e9:e0:e1:f9:72:
93:fd:8a:35:5e:97:b8:42:39:2f:54:8c:3a:07:37:
60:52:9d:3c:1b:5a:56:c8:07:57:24:bd:ed:28:ef:
d1:9d:7b:38:96:88:22:9a:62:61:d5:3c:7a:21:ff:
bf:e3:d3:0f:6e:38:ca:b5:f8:73:df:39:fa:ea:27:
7a:de:4b:f3:15:66:c0:18:56:f4:47:9c:2d:8a:ee:
b6:ea:d5:94:52:e8:0d:31:36:da:bb:7a:ca:c5:34:
d6:f3:4c:5f:be:06:ff:ad:2d:0c:46:b4:54:ef:81:
7b:1a:04:80:5e:99:35:17:27:20:05:e7:47:39:33:
aa:e9:9a:81:3f:0b:f9:d7:83:8c:2d:7b:7b:9d:47:
09:09:07:18:4c:0f:12:4b:6d:24:49:cc:31:eb:7e:
40:31:fa:b5:fa:bf:e6:a5:d3:5f:00:eb:dd:01:33:
6d:f3:b1:15:88:ff:2a:77:3e:9b:d3:22:5c:7a:3c:
8a:77:56:ff:82:be:d2:41:97:cc:13:05:81:fd:f8:
2a:64:e4:36:70:b1:50:45:1e:87:93:f8:97:f8:1a:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6A:61:0E:54:94:B5:57:8B:C1:22:C7:A2:EE:58:16:15:3D:76:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115a6e49-e35d-368f-9a6e-396b2e077791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:8604::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:4e:5c:40:af:79:21:23:5a:d8:a8:01:14:ec:41:8d:f4:51:
8a:fb:21:9e:7f:bc:92:2a:ef:d6:26:17:83:8d:f2:e2:9d:2b:
c9:05:b7:17:6f:0b:d8:80:ba:e6:0a:0d:42:fd:b8:c8:ae:45:
63:10:3a:ff:d0:7b:dc:ca:bf:84:49:50:13:42:60:af:6e:90:
b4:f0:51:d9:40:b9:8f:36:ec:16:86:aa:1a:43:2d:b3:65:86:
61:44:e1:d4:80:65:46:9a:06:bf:9d:dd:5c:7e:42:b5:d8:43:
48:c2:44:25:8b:58:92:00:e1:2c:77:cb:6a:d0:f4:61:78:c4:
4d:40:3d:95:62:53:08:93:4c:b6:3d:81:dc:e7:1b:6c:6d:e7:
e0:61:6f:89:29:dd:a9:f2:f9:fb:9a:00:95:b0:ff:01:d7:aa:
55:18:c9:bb:6f:d0:79:9e:6d:7c:37:f3:13:3d:af:4b:e6:56:
d1:97:cb:0e:b0:52:2e:f0:f6:86:99:77:76:3d:9b:35:0c:c9:
71:46:3b:a6:14:d2:89:d0:5d:99:d5:47:ae:19:bf:91:2b:b5:
b1:7d:f8:f2:66:b8:c8:5a:06:e6:81:df:f4:a7:b4:d7:59:41:
12:b5:63:87:27:66:f9:ba:59:23:95:11:b7:04:cb:69:96:88:
c5:ea:39:c9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea9yj4vXbTXMZToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
M2ZhYjNkN2YtY2Q1Mi00ZmRjLWIxOTgtODc2ZjZhZmQ5ZGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5E3EDJVCLZmkcXjcuesHNSr6GsZiABETcn/
fv+DoOcpi7qepzaF6eDh+XKT/Yo1Xpe4QjkvVIw6BzdgUp08G1pWyAdXJL3tKO/R
nXs4logimmJh1Tx6If+/49MPbjjKtfhz3zn66id63kvzFWbAGFb0R5wtiu626tWU
UugNMTbau3rKxTTW80xfvgb/rS0MRrRU74F7GgSAXpk1FycgBedHOTOq6ZqBPwv5
14OMLXt7nUcJCQcYTA8SS20kScwx635AMfq1+r/mpdNfAOvdATNt87EViP8qdz6b
0yJcejyKd1b/gr7SQZfMEwWB/fgqZOQ2cLFQRR6Hk/iX+Bp9eQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCpqYQ5UlLVXi8Eix6LuWBYVPXYpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTE1YTZlNDktZTM1ZC0z
NjhmLTlhNmUtMzk2YjJlMDc3NzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYYE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB5OXECveSEjWtioARTsQY30UYr7IZ5/vJIq79YmF4ON8uKdK8kF
txdvC9iAuuYKDUL9uMiuRWMQOv/Qe9zKv4RJUBNCYK9ukLTwUdlAuY827BaGqhpD
LbNlhmFE4dSAZUaaBr+d3Vx+QrXYQ0jCRCWLWJIA4Sx3y2rQ9GF4xE1APZViUwiT
TLY9gdznG2xt5+Bhb4kp3any+fuaAJWw/wHXqlUYybtv0HmebXw38xM9r0vmVtGX
yw6wUi7w9oaZd3Y9mzUMyXFGO6YU0onQXZnVR64Zv5ErtbF9+PJmuMhaBuaB3/Sn
tNdZQRK1Y4cnZvm6WSOVEbcEy2mWiMXqOck=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:48:07 2025 by rpki-client