Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/197a3572-e476-3e3d-a23b-230b6d5111d6.roa
File: 197a3572-e476-3e3d-a23b-230b6d5111d6.roa (raw, json)
Hash identifier: +Coy+mSVv8axiF4JM9DiFybaeafjq2BteWBWe0BbWXg=
Subject key identifier: 66:43:01:6A:AA:A3:99:B1:D5:44:4A:DF:CF:AA:73:7C:F6:24:3B:FD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ABBBB1831B4F1FF6D1D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/197a3572-e476-3e3d-a23b-230b6d5111d6.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 76.144.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:bb:bb:18:31:b4:f1:ff:6d:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e3074e14-b3e2-4f6e-b784-3017de209943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:04:8c:2c:5b:53:c1:87:8c:a6:20:dc:5b:82:
87:fc:18:56:12:2b:30:da:3d:f6:0a:35:ad:41:ca:
98:2f:54:08:cb:4e:38:58:36:17:8d:ff:a4:f4:c2:
72:83:ff:6e:1f:30:96:ce:62:a1:e4:ae:2c:46:a1:
af:5b:f0:5e:93:f6:2b:27:e7:5c:e1:7b:4f:5b:09:
b7:eb:9c:e1:dc:c7:45:fa:1a:02:47:27:0d:38:e5:
8d:34:e9:d0:b9:2d:c7:c8:55:18:3c:64:ef:31:6a:
25:98:13:23:5f:54:a2:30:cd:f9:6e:e1:90:5b:40:
93:07:a8:00:2e:e9:ae:2c:93:8f:33:2f:23:56:28:
21:ff:72:58:41:b0:7f:38:f4:5f:d9:6b:5a:49:e0:
9a:7e:2f:d8:16:e1:9c:85:d9:ee:73:0f:c1:22:49:
9e:d7:41:6b:90:14:3c:c1:9b:62:c3:35:16:87:5b:
ad:3d:de:45:eb:d1:47:86:c1:1c:99:41:8e:a9:94:
80:13:c3:1b:ab:fd:8c:72:04:3b:7e:60:5c:e6:f0:
35:df:56:40:a7:ff:74:e5:d2:69:56:89:6c:8c:10:
5b:99:3e:a8:0c:57:42:90:31:cf:69:af:ac:bd:03:
b9:d6:31:2b:db:7b:c7:c1:9c:77:bb:3b:ab:fd:dc:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:01:6A:AA:A3:99:B1:D5:44:4A:DF:CF:AA:73:7C:F6:24:3B:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/197a3572-e476-3e3d-a23b-230b6d5111d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.144.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:a4:fc:f8:c6:d9:22:44:1b:ae:bf:6b:07:98:65:a7:25:ec:
73:d2:6d:70:df:e9:14:c8:a6:95:6f:9a:12:0f:1e:bd:13:36:
7e:a9:02:c5:eb:14:e7:2f:d7:37:b9:68:14:13:68:fb:14:52:
1b:88:39:de:26:5f:1b:63:9a:89:dd:20:30:61:31:bb:20:40:
1b:20:ce:7b:6e:9f:e4:97:b1:ec:f2:f7:7e:0f:b9:2f:0e:29:
8d:04:9e:53:63:06:4e:04:d5:48:6e:33:a6:dd:c6:3d:cb:91:
56:a2:01:04:65:74:f7:cf:46:ef:64:9d:2b:50:f2:72:94:e4:
53:a7:2a:7a:c7:30:0c:9a:ca:15:23:ab:12:11:32:89:6d:42:
d3:91:2e:81:aa:be:ed:ae:3a:7a:22:a6:91:f6:44:46:4b:3c:
b8:9a:bc:57:48:93:14:d4:34:ba:f0:86:de:a1:0f:ad:06:15:
91:09:41:62:b8:77:9f:af:e9:ed:57:c4:3b:9e:ee:89:1a:a8:
fa:41:61:13:aa:5b:47:12:b1:4b:bd:ff:a1:50:a1:a9:64:73:
a7:2c:25:54:e1:9f:06:3c:1c:50:1b:13:1a:f1:f9:99:54:4f:
6e:23:67:67:23:56:d0:7f:2a:3b:14:23:34:86:b4:46:04:3a:
db:b3:d3:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOru7GDG08f9tHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZTMwNzRlMTQtYjNlMi00ZjZlLWI3ODQtMzAxN2RlMjA5OTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQSMLFtTwYeMpiDcW4KH/BhWEisw2j32CjWt
QcqYL1QIy044WDYXjf+k9MJyg/9uHzCWzmKh5K4sRqGvW/Bek/YrJ+dc4XtPWwm3
65zh3MdF+hoCRycNOOWNNOnQuS3HyFUYPGTvMWolmBMjX1SiMM35buGQW0CTB6gA
LumuLJOPMy8jVigh/3JYQbB/OPRf2WtaSeCafi/YFuGchdnucw/BIkme10FrkBQ8
wZtiwzUWh1utPd5F69FHhsEcmUGOqZSAE8Mbq/2McgQ7fmBc5vA131ZAp/905dJp
VolsjBBbmT6oDFdCkDHPaa+svQO51jEr23vHwZx3uzur/dzSpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZDAWqqo5mx1URK38+qc3z2JDv9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTk3YTM1NzItZTQ3Ni0z
ZTNkLWEyM2ItMjMwYjZkNTExMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANik/PjG2SJEG66/aweYZacl7HPSbXDf6RTIppVvmhIPHr0TNn6pAsXr
FOcv1ze5aBQTaPsUUhuIOd4mXxtjmondIDBhMbsgQBsgzntun+SXsezy934PuS8O
KY0EnlNjBk4E1UhuM6bdxj3LkVaiAQRldPfPRu9knStQ8nKU5FOnKnrHMAyayhUj
qxIRMoltQtORLoGqvu2uOnoippH2REZLPLiavFdIkxTUNLrwht6hD60GFZEJQWK4
d5+v6e1XxDue7okaqPpBYROqW0cSsUu9/6FQoalkc6csJVThnwY8HFAbExrx+ZlU
T24jZ2cjVtB/KjsUIzSGtEYEOtuz0x4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:06 2025 by rpki-client