Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18283c0d-1fee-381f-8de7-2f7e13128927.roa
File: 18283c0d-1fee-381f-8de7-2f7e13128927.roa (raw, json)
Hash identifier: TsEtwlIZGpDa62pLiGpnoJY/A6cSZjhYWuzhkRMbmxQ=
Subject key identifier: 6A:04:F8:58:91:1F:40:86:70:F7:9E:6E:24:F1:B2:02:49:98:1D:3D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10B5455FD7D29ABD5AEE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18283c0d-1fee-381f-8de7-2f7e13128927.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 76.99.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:b5:45:5f:d7:d2:9a:bd:5a:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=540e470b-68e4-4899-a87a-1263ee6dc4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:4f:b2:38:ed:5a:09:56:57:e7:58:33:26:
a0:b1:d9:ea:c9:f7:ed:fc:1a:1e:a8:a1:df:6e:b4:
15:f8:2c:a1:ca:ed:c5:00:a7:23:95:44:86:04:cf:
90:13:eb:7c:83:17:a8:47:d3:60:8c:e8:7c:76:80:
a4:50:56:9d:0e:7c:e7:73:53:ea:6d:33:46:a3:21:
fc:1a:fe:7f:85:8f:55:ad:86:94:42:68:ea:9c:4f:
bc:cc:ae:41:b1:09:6d:d1:fd:fa:ba:33:20:a0:2e:
49:58:b5:ff:6d:09:10:35:86:f7:d5:f6:1d:ab:29:
9f:0a:d8:ee:f1:0e:ab:f6:6b:08:2c:f2:78:de:f4:
5c:23:0f:25:ad:cd:60:b8:26:98:b9:7d:5a:d8:b5:
40:a0:12:a9:5f:81:2e:0b:1c:52:00:f9:02:40:62:
de:45:13:91:37:cc:33:ae:15:13:86:e9:ba:91:7d:
85:9c:e0:54:59:3f:b7:3e:11:87:03:af:11:b1:79:
e0:75:fd:de:c7:bd:53:b7:95:07:83:59:2b:9c:e8:
cc:c9:ff:a9:e5:fb:60:6b:04:78:b9:05:15:e1:96:
47:ca:5a:2a:8e:4b:6b:9f:ad:8d:07:e3:84:93:06:
95:2b:7e:67:ef:ce:80:09:0c:32:94:7d:80:4c:cd:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:04:F8:58:91:1F:40:86:70:F7:9E:6E:24:F1:B2:02:49:98:1D:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18283c0d-1fee-381f-8de7-2f7e13128927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.99.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:1f:e8:0a:98:69:fd:ee:fc:dc:1b:19:32:52:02:17:c8:01:
a0:f6:ae:0d:7f:f5:6e:92:41:95:8f:ae:cb:88:6d:86:88:66:
6e:e9:9a:2d:4e:d6:1b:55:8d:f7:41:ee:e4:c7:4d:8e:48:cf:
c1:1c:8e:b1:29:de:89:00:a6:0a:77:3c:c4:65:f5:32:b4:cd:
a7:de:27:b0:b4:ad:29:37:8a:6e:b3:dc:11:8c:b3:2b:b1:aa:
00:70:67:75:1f:90:df:09:96:24:90:1c:d0:2c:f7:06:16:85:
2b:a3:be:51:46:ba:7a:63:0c:df:2b:d8:5c:ad:0d:86:97:77:
64:8c:bc:64:5b:b7:4a:78:51:05:3c:db:f7:f2:a8:5f:18:cf:
fc:6c:f0:6c:e3:66:41:96:e6:fd:38:49:d3:48:87:58:8d:fd:
49:15:17:bd:00:64:1a:aa:e0:07:5a:8b:ec:d4:95:5b:c7:a8:
a9:2e:c0:ef:a2:64:b9:80:79:ea:82:e8:d0:a0:cb:83:8b:bd:
eb:6c:d6:38:b2:67:35:cf:1c:10:71:56:3f:0c:b9:c8:9f:fd:
ec:69:2d:46:3f:b6:35:a0:a1:61:c5:55:ad:b9:52:bb:3d:96:
be:0b:9b:b9:48:59:56:af:ed:ba:50:d4:2c:c0:58:6d:e9:05:
6e:fb:12:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMELVFX9fSmr1a7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NTQwZTQ3MGItNjhlNC00ODk5LWE4N2EtMTI2M2VlNmRjNGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEdPsjjtWglWV+dYMyagsdnqyfft/BoeqKHf
brQV+Cyhyu3FAKcjlUSGBM+QE+t8gxeoR9NgjOh8doCkUFadDnznc1PqbTNGoyH8
Gv5/hY9VrYaUQmjqnE+8zK5BsQlt0f36ujMgoC5JWLX/bQkQNYb31fYdqymfCtju
8Q6r9msILPJ43vRcIw8lrc1guCaYuX1a2LVAoBKpX4EuCxxSAPkCQGLeRRORN8wz
rhUThum6kX2FnOBUWT+3PhGHA68RsXngdf3ex71Tt5UHg1krnOjMyf+p5ftgawR4
uQUV4ZZHyloqjktrn62NB+OEkwaVK35n786ACQwylH2ATM0G7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGoE+FiRH0CGcPeebiTxsgJJmB09MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTgyODNjMGQtMWZlZS0z
ODFmLThkZTctMmY3ZTEzMTI4OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTGOEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQf6AqYaf3u/NwbGTJSAhfIAaD2rg1/9W6SQZWPrsuIbYaIZm7pmi1O
1htVjfdB7uTHTY5Iz8EcjrEp3okApgp3PMRl9TK0zafeJ7C0rSk3im6z3BGMsyux
qgBwZ3UfkN8JliSQHNAs9wYWhSujvlFGunpjDN8r2FytDYaXd2SMvGRbt0p4UQU8
2/fyqF8Yz/xs8GzjZkGW5v04SdNIh1iN/UkVF70AZBqq4Adai+zUlVvHqKkuwO+i
ZLmAeeqC6NCgy4OLvets1jiyZzXPHBBxVj8Mucif/expLUY/tjWgoWHFVa25Urs9
lr4Lm7lIWVav7bpQ1CzAWG3pBW77EhE=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:08:39 2025 by rpki-client