Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f873603-8cd6-33fa-b94a-2a6a76826a6c.roa
File: 5f873603-8cd6-33fa-b94a-2a6a76826a6c.roa (raw, json)
Hash identifier: 5eSXBuqZUlllv5Hm8fLChRdxQrEgiruoJ52S5xQLhdc=
Subject key identifier: 3D:A6:F8:8E:C6:34:E2:54:AF:15:58:9B:18:39:66:C0:A7:94:4A:11
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11CEB213E0A3CA75112EE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f873603-8cd6-33fa-b94a-2a6a76826a6c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 24.11.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:ce:b2:13:e0:a3:ca:75:11:2e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=aba32426-a0fe-4332-9d70-de3eb943499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:a3:7b:32:0f:ee:9b:43:f7:04:68:76:c9:
5f:86:05:d8:e0:53:39:5b:3d:47:9c:f2:7e:2a:c9:
f2:59:75:9a:31:f2:aa:01:28:da:01:f3:21:df:01:
b2:35:b4:9b:af:ef:6b:6f:72:91:e1:18:49:c3:9b:
57:72:f5:26:0d:73:cb:fb:fb:3a:85:51:55:eb:73:
fc:b2:89:ad:11:77:e8:f1:52:54:cc:50:d6:ca:52:
fd:94:9b:03:db:5a:90:95:41:24:c3:4b:21:95:fe:
45:b4:92:a2:06:8e:78:a7:4b:49:ab:d5:73:71:71:
e0:bb:c1:03:a7:e3:c9:8f:a7:d6:73:83:3b:08:fd:
a8:1b:c8:33:f1:89:0b:84:11:48:d4:30:13:8a:55:
4f:ff:2e:53:dd:b7:a5:d3:f0:43:71:39:04:53:d8:
c3:bb:a1:86:89:bc:85:c8:c2:0e:9e:4f:83:1f:75:
d3:46:97:ca:31:53:d1:ec:e6:4d:54:f0:9b:36:bf:
84:55:f2:c3:00:b2:47:f4:c7:07:56:24:41:ab:d7:
bc:bc:6d:ac:13:54:6e:29:19:66:9b:6e:c5:1f:8c:
f0:fc:bd:e1:76:c0:e9:7b:ca:59:cc:ab:77:2a:20:
0e:66:b4:59:14:83:eb:d7:d9:91:43:c2:e0:2e:b5:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A6:F8:8E:C6:34:E2:54:AF:15:58:9B:18:39:66:C0:A7:94:4A:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f873603-8cd6-33fa-b94a-2a6a76826a6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.11.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:4a:25:a7:92:73:b7:1f:86:00:d4:a6:a0:8c:23:3f:39:de:
86:a5:80:df:04:76:b9:aa:b9:e7:1a:d1:11:a9:97:aa:9f:50:
0c:d5:ae:b9:48:6d:48:ce:3a:8f:a6:55:0b:1c:48:bb:13:4e:
46:10:f8:b0:12:41:38:89:91:0c:b0:d5:df:70:b0:57:8f:ff:
e8:77:4f:fc:c0:91:aa:dd:0a:c6:bf:2c:80:f9:24:9a:3a:9a:
3c:a8:a7:f2:49:c9:1a:2b:ed:1a:5c:2e:1f:fd:98:a2:83:56:
73:03:fc:21:c5:56:ac:8e:13:65:d4:bf:70:84:e7:05:ff:0d:
d7:c1:ed:6b:b6:0b:a6:fe:b3:c1:30:32:1f:69:e0:64:e2:5f:
f9:fd:be:05:bd:26:d2:1d:f8:aa:f1:d0:3c:54:b4:0b:20:b9:
14:41:c5:2c:37:88:a2:93:21:0e:1c:be:7e:2f:1f:e4:1d:7f:
57:c5:24:d8:7d:62:f2:42:b5:a4:73:ed:05:31:e3:b2:bc:f4:
fc:ec:e2:52:92:40:97:4b:25:1b:bc:d8:39:f3:42:f7:d8:5d:
90:45:2e:ab:a4:e7:3b:20:b8:58:ac:97:46:4e:09:81:e7:05:
8a:b7:13:16:bb:42:82:b8:1a:4e:bd:a5:a2:59:c9:8f:fe:f6:
6e:ad:a4:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEc6yE+CjynURLuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YWJhMzI0MjYtYTBmZS00MzMyLTlkNzAtZGUzZWI5NDM0OTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnmjezIP7ptD9wRodslfhgXY4FM5Wz1HnPJ+
KsnyWXWaMfKqASjaAfMh3wGyNbSbr+9rb3KR4RhJw5tXcvUmDXPL+/s6hVFV63P8
somtEXfo8VJUzFDWylL9lJsD21qQlUEkw0shlf5FtJKiBo54p0tJq9VzcXHgu8ED
p+PJj6fWc4M7CP2oG8gz8YkLhBFI1DATilVP/y5T3bel0/BDcTkEU9jDu6GGibyF
yMIOnk+DH3XTRpfKMVPR7OZNVPCbNr+EVfLDALJH9McHViRBq9e8vG2sE1RuKRlm
m27FH4zw/L3hdsDpe8pZzKt3KiAOZrRZFIPr19mRQ8LgLrUF1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD2m+I7GNOJUrxVYmxg5ZsCnlEoRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWY4NzM2MDMtOGNkNi0z
M2ZhLWI5NGEtMmE2YTc2ODI2YTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAscMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNKJaeSc7cfhgDUpqCMIz853oalgN8Edrmqueca0RGpl6qfUAzVrrlI
bUjOOo+mVQscSLsTTkYQ+LASQTiJkQyw1d9wsFeP/+h3T/zAkardCsa/LID5JJo6
mjyop/JJyRor7RpcLh/9mKKDVnMD/CHFVqyOE2XUv3CE5wX/DdfB7Wu2C6b+s8Ew
Mh9p4GTiX/n9vgW9JtId+Krx0DxUtAsguRRBxSw3iKKTIQ4cvn4vH+Qdf1fFJNh9
YvJCtaRz7QUx47K89Pzs4lKSQJdLJRu82DnzQvfYXZBFLquk5zsguFisl0ZOCYHn
BYq3Exa7QoK4Gk69paJZyY/+9m6tpMY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:40 2025 by rpki-client