Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d347a7f-1988-3305-ae9d-d059be5c1acc.roa
File: 1d347a7f-1988-3305-ae9d-d059be5c1acc.roa (raw, json)
Hash identifier: POSFpoGAOqyOQ1sXEmZIySvRasaAUs97IkOIL1RWzcY=
Subject key identifier: AF:23:40:87:49:F3:1B:72:1C:2F:28:65:F4:C0:B4:4B:0F:76:45:74
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1039531EFC8A5713AE78C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d347a7f-1988-3305-ae9d-d059be5c1acc.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 24.2.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:39:53:1e:fc:8a:57:13:ae:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f2261483-06ee-4a5b-bf01-eb76bda96abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:e9:ba:63:64:78:b9:0e:a3:63:9f:35:d7:
09:55:d8:8f:a3:d4:0a:dd:11:7b:2c:62:c9:a1:b0:
9a:0e:c1:41:f1:e1:4c:81:3f:bf:95:9d:23:b4:63:
e7:b1:08:c4:19:31:7a:e7:36:ae:c1:84:78:8b:73:
54:c9:69:18:94:c7:30:7d:cb:62:8c:52:8a:66:8f:
3c:ea:98:95:7d:c9:bc:ac:14:a6:62:8c:e5:42:d2:
11:03:94:44:0c:51:b4:7b:86:de:c3:3f:fa:9f:22:
4b:f1:0f:b7:30:df:4d:07:71:c9:da:94:d6:f6:bd:
9b:a1:78:1c:97:f0:3b:57:6e:00:2d:df:ce:2d:89:
3e:b9:4d:9a:05:2d:c3:ef:e9:f4:d2:e3:32:7f:2b:
b4:b3:b6:c9:52:fa:34:75:6d:c1:c2:07:55:ca:f6:
23:df:ca:b2:4b:62:ec:5f:71:f0:f7:03:81:c8:7f:
1c:0e:61:f2:3a:54:4f:63:fe:79:b8:86:55:d6:8f:
14:40:c0:92:86:17:22:18:33:a3:bd:a3:e8:dd:13:
c5:06:fa:4c:f4:11:9b:66:1f:44:41:56:be:ed:36:
0b:75:5c:19:6a:66:8e:05:a3:5b:f7:8f:26:a5:7c:
c7:aa:4e:f9:6b:6d:3f:29:6e:b8:cd:66:28:f0:40:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:23:40:87:49:F3:1B:72:1C:2F:28:65:F4:C0:B4:4B:0F:76:45:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d347a7f-1988-3305-ae9d-d059be5c1acc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.2.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:b0:ce:37:53:c9:c5:8c:f6:48:10:8a:f8:4e:10:40:44:95:
cf:53:fd:72:e6:f2:f1:e8:59:73:54:d0:c6:de:d5:5b:62:7e:
1b:e2:f9:f9:f5:de:ef:b4:8c:86:a8:56:f8:7b:39:83:fd:d7:
10:5c:f4:83:69:fb:fd:77:7e:65:fd:cc:54:9d:65:91:32:4b:
20:4f:c4:e6:1c:c1:d2:d5:f8:9d:78:b6:6d:b5:5e:6b:de:65:
83:05:c3:f9:9d:be:ee:c5:e4:89:01:5a:0f:9c:55:99:21:e6:
e7:08:8f:36:bf:8f:91:14:68:3a:95:bb:9a:01:b6:7f:22:a0:
e5:2d:30:d2:c3:bd:2c:c8:cf:7e:ba:40:7c:1b:55:b7:7f:30:
24:29:12:90:eb:bb:eb:b2:2b:80:4b:04:4b:d1:22:03:95:aa:
f1:e4:1f:79:f9:7b:e4:41:66:e2:fe:1b:3f:34:51:e4:91:cd:
9e:8f:d2:fc:83:7b:66:6d:63:01:17:bd:f4:30:3d:6e:1f:12:
c7:d0:10:87:ef:50:66:a7:28:e4:dc:2b:fe:d3:57:b8:6d:9c:
66:25:4d:e6:99:87:ca:5d:51:85:cc:af:5a:99:42:4d:88:6a:
f9:17:ce:28:6e:7d:f5:1d:0a:06:47:33:97:40:aa:6f:ae:27:
32:cf:f3:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEDlTHvyKVxOueMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZjIyNjE0ODMtMDZlZS00YTViLWJmMDEtZWI3NmJkYTk2YWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeDpumNkeLkOo2OfNdcJVdiPo9QK3RF7LGLJ
obCaDsFB8eFMgT+/lZ0jtGPnsQjEGTF65zauwYR4i3NUyWkYlMcwfctijFKKZo88
6piVfcm8rBSmYozlQtIRA5REDFG0e4bewz/6nyJL8Q+3MN9NB3HJ2pTW9r2boXgc
l/A7V24ALd/OLYk+uU2aBS3D7+n00uMyfyu0s7bJUvo0dW3BwgdVyvYj38qyS2Ls
X3Hw9wOByH8cDmHyOlRPY/55uIZV1o8UQMCShhciGDOjvaPo3RPFBvpM9BGbZh9E
QVa+7TYLdVwZamaOBaNb948mpXzHqk75a20/KW64zWYo8EBuDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8jQIdJ8xtyHC8oZfTAtEsPdkV0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQzNDdhN2YtMTk4OC0z
MzA1LWFlOWQtZDA1OWJlNWMxYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAJUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmwzjdTycWM9kgQivhOEEBElc9T/XLm8vHoWXNU0Mbe1Vtifhvi+fn1
3u+0jIaoVvh7OYP91xBc9INp+/13fmX9zFSdZZEySyBPxOYcwdLV+J14tm21Xmve
ZYMFw/mdvu7F5IkBWg+cVZkh5ucIjza/j5EUaDqVu5oBtn8ioOUtMNLDvSzIz366
QHwbVbd/MCQpEpDru+uyK4BLBEvRIgOVqvHkH3n5e+RBZuL+Gz80UeSRzZ6P0vyD
e2ZtYwEXvfQwPW4fEsfQEIfvUGanKOTcK/7TV7htnGYlTeaZh8pdUYXMr1qZQk2I
avkXzihuffUdCgZHM5dAqm+uJzLP83E=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:20:01 2025 by rpki-client