Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42ac9cb3-cc01-3f52-9047-288d163f848c.roa
File: 42ac9cb3-cc01-3f52-9047-288d163f848c.roa (raw, json)
Hash identifier: +Oz+I1qHc7msIiJdLdRSn3CL9Yvv/S7vb80gkWda9p4=
Subject key identifier: 9F:85:36:78:65:5C:31:62:FD:21:7D:8C:18:BE:57:34:8F:68:0B:2D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C9F7530A5E6A331C69780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42ac9cb3-cc01-3f52-9047-288d163f848c.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 2001:559:15d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:9f:75:30:a5:e6:a3:31:c6:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=71b9ab71-83a7-4bca-900b-088251cc1d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:f5:42:6d:75:89:72:79:8f:ff:d7:d3:c5:
36:d7:10:d4:8b:46:2d:e5:67:e2:79:50:38:ea:e1:
8e:d4:45:28:38:fd:a3:48:5e:58:4a:45:bc:ad:e3:
23:f6:f7:b6:86:7f:c7:3a:a1:19:8e:44:1f:05:3b:
96:4e:e8:8f:36:a7:0c:4e:05:e4:46:4b:4b:98:a0:
50:59:a8:ec:aa:3b:a0:67:d5:33:3f:49:41:2a:c3:
f8:ab:89:7e:0e:a5:53:44:88:e9:68:63:02:51:eb:
e0:1d:84:37:8a:d8:37:23:86:e4:31:4f:39:64:e1:
72:f1:17:3e:49:27:2a:0a:4b:af:da:f2:95:7e:36:
42:b0:97:10:46:03:d5:7b:5f:2a:05:ab:7d:59:71:
6b:ec:f0:55:18:c2:cf:78:ef:e5:3b:31:d5:9a:ee:
71:a5:1d:20:a7:78:34:ee:f6:f5:44:fe:d4:41:99:
9b:39:6e:e5:66:2f:d1:a6:78:33:5e:c0:5d:ba:6d:
22:60:c9:32:ab:2b:c9:ff:33:f5:a5:03:2d:91:61:
55:f2:25:1b:73:8c:c3:68:c5:75:c1:bc:6e:4c:d6:
00:f0:1f:03:c6:1c:4a:92:4c:b5:ae:2e:9e:01:61:
61:3a:03:b4:8c:69:5d:ff:c4:22:a6:a9:7b:ea:f6:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:36:78:65:5C:31:62:FD:21:7D:8C:18:BE:57:34:8F:68:0B:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42ac9cb3-cc01-3f52-9047-288d163f848c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:15d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:34:a2:42:1c:45:b1:0d:fa:ac:ff:94:9d:65:5d:42:b6:a1:
5e:b6:d5:64:dd:a4:91:8c:02:ce:fe:0a:2e:1f:a2:b7:2e:78:
39:51:d2:16:08:f8:c3:ab:e1:73:ff:28:69:16:48:57:ca:29:
5b:32:14:c0:91:e5:ae:b9:50:3f:d4:3f:fa:06:7a:88:5a:81:
5a:5f:e9:61:e4:47:66:61:11:e0:88:60:21:6d:9a:fc:f3:fb:
bc:b7:42:54:3e:d1:22:51:e1:23:e2:44:5a:71:47:29:33:b2:
df:e0:29:ed:e0:99:d5:aa:25:50:ab:48:f7:da:d4:b6:a6:17:
b1:b7:00:b8:93:2e:75:5c:b6:92:57:3f:aa:73:f9:cd:61:a1:
2e:c1:14:69:4f:94:b4:78:63:b6:6f:46:eb:f7:8d:ab:c2:87:
1b:9a:b9:49:1b:3c:f5:17:a8:53:0f:af:43:82:73:68:76:cb:
9a:27:51:c4:dc:df:ec:6d:b0:2c:70:64:89:46:5a:62:a0:8e:
3a:ce:c1:2b:e2:9f:d3:f3:d4:98:1a:74:68:e9:55:8f:8e:a0:
11:07:9f:19:ec:5a:9c:b7:7a:1a:6d:aa:f4:52:bc:bb:41:f0:
49:c4:36:61:e7:48:ff:48:a1:51:a0:02:fa:1a:d7:c0:17:f5:
75:5a:43:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebJ91MKXmozHGl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NzFiOWFiNzEtODNhNy00YmNhLTkwMGItMDg4MjUxY2MxZDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfT1Qm11iXJ5j//X08U21xDUi0Yt5WfieVA4
6uGO1EUoOP2jSF5YSkW8reMj9ve2hn/HOqEZjkQfBTuWTuiPNqcMTgXkRktLmKBQ
WajsqjugZ9UzP0lBKsP4q4l+DqVTRIjpaGMCUevgHYQ3itg3I4bkMU85ZOFy8Rc+
SScqCkuv2vKVfjZCsJcQRgPVe18qBat9WXFr7PBVGMLPeO/lOzHVmu5xpR0gp3g0
7vb1RP7UQZmbOW7lZi/RpngzXsBdum0iYMkyqyvJ/zP1pQMtkWFV8iUbc4zDaMV1
wbxuTNYA8B8DxhxKkky1ri6eAWFhOgO0jGld/8Qipql76vayZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ+FNnhlXDFi/SF9jBi+VzSPaAstMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJhYzljYjMtY2MwMS0z
ZjUyLTkwNDctMjg4ZDE2M2Y4NDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQFd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAM40okIcRbEN+qz/lJ1lXUK2oV621WTdpJGMAs7+Ci4forcueDlR
0hYI+MOr4XP/KGkWSFfKKVsyFMCR5a65UD/UP/oGeohagVpf6WHkR2ZhEeCIYCFt
mvzz+7y3QlQ+0SJR4SPiRFpxRykzst/gKe3gmdWqJVCrSPfa1LamF7G3ALiTLnVc
tpJXP6pz+c1hoS7BFGlPlLR4Y7ZvRuv3javChxuauUkbPPUXqFMPr0OCc2h2y5on
UcTc3+xtsCxwZIlGWmKgjjrOwSvin9Pz1JgadGjpVY+OoBEHnxnsWpy3ehptqvRS
vLtB8EnENmHnSP9IoVGgAvoa18AX9XVaQyU=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:50:25 2025 by rpki-client