Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/551fa81c-c60c-369e-a568-110d1b9c6ebd.roa
File: 551fa81c-c60c-369e-a568-110d1b9c6ebd.roa (raw, json)
Hash identifier: dViMaApDMDMhxW/QKkPkSu9NMFo0UTQhYSIZiD1wFTI=
Subject key identifier: C5:44:46:FB:49:CC:49:93:84:A5:A6:43:31:A2:AA:94:42:BF:40:BC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C103D02F578655C231B0F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/551fa81c-c60c-369e-a568-110d1b9c6ebd.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 24.11.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:3d:02:f5:78:65:5c:23:1b:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=27c755d6-24de-4eef-9ed3-14b1bf09a4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:d8:78:8b:8d:7a:27:6a:84:68:e8:2a:7c:
44:ea:4e:36:02:51:2d:5f:36:ed:e5:db:87:5d:c5:
25:b6:53:c6:12:ea:41:9a:a4:d5:11:6c:a8:ec:43:
01:0a:30:ea:88:fa:1e:76:4e:48:7b:96:5a:ba:01:
67:46:52:b5:b3:4c:4a:e1:a7:26:4f:c0:3d:05:87:
26:f4:aa:ce:b6:9d:5e:71:16:38:63:ba:ca:7e:27:
0a:9a:13:ec:b0:5e:52:c8:06:ba:e5:3d:d9:18:ae:
e5:80:cb:6d:fe:ed:6e:1e:73:08:a8:59:58:dd:a2:
31:e2:98:48:ad:0d:a8:79:b6:3f:4c:8a:21:d5:63:
a6:ee:b6:01:aa:c9:7f:a3:f4:18:4f:62:61:e3:71:
ac:23:12:01:08:1a:c3:a8:61:92:43:10:72:39:f7:
8b:7a:15:b9:69:09:ee:a5:42:af:52:17:b1:e7:3f:
70:e3:b9:1f:92:ba:40:6c:e6:5b:09:c2:37:1d:b8:
52:94:50:35:a3:24:25:76:a8:c4:95:b9:17:d0:f3:
30:98:e9:cf:14:d6:c2:e5:de:5e:a0:84:b4:b5:8b:
ea:b1:40:bf:27:72:51:be:df:e2:b7:21:db:14:88:
09:01:10:0d:57:11:3f:a7:2e:b4:cf:31:2a:52:1d:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:44:46:FB:49:CC:49:93:84:A5:A6:43:31:A2:AA:94:42:BF:40:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/551fa81c-c60c-369e-a568-110d1b9c6ebd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.11.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:4d:8d:e8:26:5b:ea:39:06:0d:4b:94:96:87:75:a3:22:fa:
4d:39:81:f7:f7:9b:f0:e1:a6:2f:cb:90:5b:0f:a7:cc:18:57:
92:d8:f2:1e:e8:f8:f6:74:60:dd:d1:c5:52:08:fd:08:7c:f8:
65:97:d7:fc:bb:09:ad:d6:72:30:f8:40:cf:e0:e8:ab:f1:cd:
2d:75:5d:8d:35:db:5d:38:14:8a:52:ad:77:d3:91:55:59:43:
fd:5d:7a:97:e1:0b:ad:b5:aa:c9:ce:66:83:03:58:1a:9a:76:
48:90:e9:be:de:9a:ae:81:c1:c6:c0:ba:03:fd:7a:7c:dc:c9:
5b:14:e1:61:c5:94:08:03:fc:8b:08:6d:51:3b:9c:a1:6f:39:
b4:6a:1b:6c:60:c9:a6:32:4d:53:36:f5:54:b7:e2:6d:1a:95:
e9:11:f4:20:fc:d7:91:98:06:53:db:8f:82:ba:11:58:4c:82:
46:81:f3:8f:f7:79:16:2d:b3:72:73:25:a7:c3:e4:d4:a3:4d:
fc:26:27:af:bd:89:96:43:69:cb:15:d9:c5:ed:71:be:47:cd:
62:c8:a7:47:3d:ef:c1:3b:f7:ae:c2:97:99:d3:9d:de:cc:d5:
56:8b:fa:68:61:98:4e:23:95:1c:6e:cb:77:35:ff:18:76:d1:
40:b3:40:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMED0C9XhlXCMbD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MjdjNzU1ZDYtMjRkZS00ZWVmLTllZDMtMTRiMWJmMDlhNGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSvYeIuNeidqhGjoKnxE6k42AlEtXzbt5duH
XcUltlPGEupBmqTVEWyo7EMBCjDqiPoedk5Ie5ZaugFnRlK1s0xK4acmT8A9BYcm
9KrOtp1ecRY4Y7rKficKmhPssF5SyAa65T3ZGK7lgMtt/u1uHnMIqFlY3aIx4phI
rQ2oebY/TIoh1WOm7rYBqsl/o/QYT2Jh43GsIxIBCBrDqGGSQxByOfeLehW5aQnu
pUKvUhex5z9w47kfkrpAbOZbCcI3HbhSlFA1oyQldqjElbkX0PMwmOnPFNbC5d5e
oIS0tYvqsUC/J3JRvt/ityHbFIgJARANVxE/py60zzEqUh1OwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVERvtJzEmThKWmQzGiqpRCv0C8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTUxZmE4MWMtYzYwYy0z
NjllLWE1NjgtMTEwZDFiOWM2ZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAt+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARNjegmW+o5Bg1LlJaHdaMi+k05gff3m/Dhpi/LkFsPp8wYV5LY8h7o
+PZ0YN3RxVII/Qh8+GWX1/y7Ca3WcjD4QM/g6KvxzS11XY012104FIpSrXfTkVVZ
Q/1depfhC621qsnOZoMDWBqadkiQ6b7emq6BwcbAugP9enzcyVsU4WHFlAgD/IsI
bVE7nKFvObRqG2xgyaYyTVM29VS34m0alekR9CD815GYBlPbj4K6EVhMgkaB84/3
eRYts3JzJafD5NSjTfwmJ6+9iZZDacsV2cXtcb5HzWLIp0c978E7967Cl5nTnd7M
1VaL+mhhmE4jlRxuy3c1/xh20UCzQJs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:25 2025 by rpki-client