Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4084d7f1-ffa6-3a35-a1c5-f7d0493092f9.roa
File: 4084d7f1-ffa6-3a35-a1c5-f7d0493092f9.roa (raw, json)
Hash identifier: dt8LSq3w6k0tIkT5PB+GhKlx5YzZmee/AOHt0n2DtKk=
Subject key identifier: 91:49:1F:C3:BB:87:2F:BF:0D:23:A4:CB:26:F8:74:28:3F:12:27:02
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1136BF1A438A3B79872400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4084d7f1-ffa6-3a35-a1c5-f7d0493092f9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 76.136.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:36:bf:1a:43:8a:3b:79:87:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=40db5af4-f1ee-4c57-acb0-96140ae5c9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:df:84:cd:0d:d6:c4:ab:0c:25:04:b0:16:
51:cd:7b:a7:14:e2:fe:41:f5:5e:b2:95:a5:1d:4b:
51:60:3d:93:73:a6:46:8d:1c:40:a5:e0:24:2c:a4:
3b:f3:88:4f:7d:c1:22:11:24:cb:2c:a1:13:f8:73:
01:84:73:80:15:02:f0:97:12:a6:4c:99:58:e5:66:
b3:6b:0b:6c:9e:61:fd:4a:5e:26:c0:ac:9d:fa:ea:
71:e8:92:19:7b:41:e1:9f:3a:88:af:fe:d6:89:b8:
a7:65:d3:ab:47:28:e3:ea:cc:c9:15:d5:83:f1:d7:
d7:fc:9c:f7:55:50:69:65:4c:75:f6:22:98:4d:1f:
0f:1e:aa:99:49:12:b7:71:34:94:ca:72:fb:b9:13:
10:bb:42:7e:2a:0c:1d:b5:78:8e:7e:79:c6:b1:35:
66:38:e4:3e:5b:7d:e3:79:f4:4c:94:4d:59:2c:dd:
af:6e:40:41:97:f3:5c:50:a5:4c:45:0b:58:79:58:
a1:3a:14:a9:bd:1b:96:a6:f4:40:86:e2:8a:48:0d:
f7:e4:3f:16:21:b3:23:ba:5c:84:cb:4d:7a:e5:c6:
77:29:9e:ae:01:18:65:e4:59:d2:d5:bb:e9:0e:4d:
6c:d4:4f:63:fd:04:b2:e3:6a:08:96:b4:c9:ba:fd:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:1F:C3:BB:87:2F:BF:0D:23:A4:CB:26:F8:74:28:3F:12:27:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4084d7f1-ffa6-3a35-a1c5-f7d0493092f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.136.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:56:d7:39:10:83:5a:7e:cf:44:9d:84:60:f1:3d:ae:32:bf:
7e:49:1e:a1:0f:76:ee:d5:a5:0c:c8:e3:ee:b2:45:99:d2:a8:
b3:93:91:d6:b1:67:13:94:16:fe:24:a1:eb:80:4f:b7:ea:75:
c2:88:38:5c:c6:2e:5c:e2:0f:60:ac:d5:12:1d:d6:44:46:dc:
a1:37:66:61:61:23:9c:f7:95:35:ba:0f:12:d2:c2:6a:00:eb:
0c:c5:7e:db:4c:94:36:b8:31:69:56:3a:df:28:89:cf:7e:98:
e0:f9:f0:cb:e4:6c:75:5f:9c:1d:31:b0:f4:ea:18:3c:85:7c:
7f:a9:71:1f:af:72:bd:07:43:3e:6f:c6:77:0e:c3:9c:de:9a:
19:0d:41:7c:24:74:74:6a:55:cb:93:16:96:8a:33:d2:79:26:
02:ce:dc:63:e3:e6:50:7f:9d:45:47:0e:20:82:55:66:0d:99:
06:0a:3d:0d:a9:ed:89:cc:b4:c2:0a:b4:e2:9e:8d:cb:de:53:
a9:87:87:b8:5e:8c:58:1e:fd:c4:af:fe:33:95:be:68:36:81:
54:ce:fc:dd:79:25:e5:66:62:aa:14:cb:4a:a3:14:c2:d4:74:
ce:44:8f:31:b5:66:0c:38:08:d1:eb:cd:5a:8e:f8:cc:06:71:
9a:55:1c:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMETa/GkOKO3mHJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NDBkYjVhZjQtZjFlZS00YzU3LWFjYjAtOTYxNDBhZTVjOWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9rfhM0N1sSrDCUEsBZRzXunFOL+QfVespWl
HUtRYD2Tc6ZGjRxApeAkLKQ784hPfcEiESTLLKET+HMBhHOAFQLwlxKmTJlY5Waz
awtsnmH9Sl4mwKyd+upx6JIZe0HhnzqIr/7WibinZdOrRyjj6szJFdWD8dfX/Jz3
VVBpZUx19iKYTR8PHqqZSRK3cTSUynL7uRMQu0J+KgwdtXiOfnnGsTVmOOQ+W33j
efRMlE1ZLN2vbkBBl/NcUKVMRQtYeVihOhSpvRuWpvRAhuKKSA335D8WIbMjulyE
y0165cZ3KZ6uARhl5FnS1bvpDk1s1E9j/QSy42oIlrTJuv2rPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFJH8O7hy+/DSOkyyb4dCg/EicCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA4NGQ3ZjEtZmZhNi0z
YTM1LWExYzUtZjdkMDQ5MzA5MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIj8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRW1zkQg1p+z0SdhGDxPa4yv35JHqEPdu7VpQzI4+6yRZnSqLOTkdax
ZxOUFv4koeuAT7fqdcKIOFzGLlziD2Cs1RId1kRG3KE3ZmFhI5z3lTW6DxLSwmoA
6wzFfttMlDa4MWlWOt8oic9+mOD58MvkbHVfnB0xsPTqGDyFfH+pcR+vcr0HQz5v
xncOw5zemhkNQXwkdHRqVcuTFpaKM9J5JgLO3GPj5lB/nUVHDiCCVWYNmQYKPQ2p
7YnMtMIKtOKejcveU6mHh7hejFge/cSv/jOVvmg2gVTO/N15JeVmYqoUy0qjFMLU
dM5EjzG1Zgw4CNHrzVqO+MwGcZpVHMw=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:29 2025 by rpki-client