Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ca0cee6-50ad-33ec-8326-08d9f9d6d04d.roa
File: 6ca0cee6-50ad-33ec-8326-08d9f9d6d04d.roa (raw, json)
Hash identifier: ZTi89gQdlsjU4QTdGPxGiB2liGE7DmL2D3Scb1IRYqg=
Subject key identifier: 1A:C7:C0:BA:AA:7B:29:B9:9B:A0:39:74:60:90:5C:21:73:17:7B:5B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1099EC26A212298E1CED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ca0cee6-50ad-33ec-8326-08d9f9d6d04d.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 69.249.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:99:ec:26:a2:12:29:8e:1c:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c7bf41cf-a396-4f07-8690-e6eff122b0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:9e:92:17:76:ad:c3:3e:60:16:52:25:e2:
ea:7a:56:53:07:02:f4:c6:86:df:75:9d:be:c1:9f:
0b:37:ba:8b:1a:65:31:15:f6:1d:17:96:7b:bf:31:
59:30:cd:37:20:4c:36:e4:2b:cc:8d:1c:bd:d4:cf:
93:5a:ae:d8:98:ad:bb:23:49:a0:6c:ec:c3:ef:bc:
85:4a:7e:c5:3d:ba:92:a5:69:0f:b6:7a:74:14:1c:
67:10:e2:54:d3:7b:70:ef:32:8d:fb:a8:5b:52:d0:
18:eb:5b:42:b2:72:df:f5:6a:6d:a3:26:1a:f3:49:
7f:55:81:d3:7a:e3:ea:d5:7d:24:ef:a9:6c:33:f9:
8d:e9:6d:84:22:b6:d6:24:b5:07:b7:58:3d:f0:f8:
3e:ba:64:ed:11:a6:b0:32:45:49:58:e5:fc:0e:10:
85:be:fc:9c:e0:7e:b3:3e:c9:dd:f2:ac:c4:02:0d:
58:23:41:f8:62:14:97:73:58:d8:7e:23:e7:ad:5f:
f9:a7:6b:49:3e:c1:a2:61:d3:57:da:f2:e9:5d:9f:
a6:ed:5d:d1:fa:0e:1a:e0:b9:2b:55:7c:48:90:e0:
31:6e:0e:52:50:1e:2c:bb:2f:d3:df:b9:f7:73:52:
b4:90:76:55:3e:b2:df:be:0e:a1:30:1c:92:ea:1a:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C7:C0:BA:AA:7B:29:B9:9B:A0:39:74:60:90:5C:21:73:17:7B:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ca0cee6-50ad-33ec-8326-08d9f9d6d04d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.249.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:d6:bd:7b:ec:f6:5c:9f:9f:0b:ea:22:f7:ff:20:44:4b:59:
9e:d4:3a:a6:21:f8:ac:b3:c3:ae:1d:7d:76:50:d8:74:8a:83:
01:d3:61:0f:82:80:7e:b1:76:a6:d5:43:f3:f4:51:8b:83:21:
44:15:c5:b6:0b:a6:3d:49:74:f3:4a:04:c9:2a:46:b5:d2:ad:
d3:6d:88:a0:54:44:c7:f3:6e:09:4b:e0:81:3d:05:c4:f9:9c:
53:67:a7:c7:7c:cb:b0:de:1b:01:b6:46:ec:d2:3c:b4:25:d2:
d5:2a:49:ff:ad:c1:97:8d:80:b7:d2:87:7c:9e:33:bd:8e:b4:
f4:0d:11:d1:0f:2d:14:b3:1c:ad:88:0c:0f:d1:fd:34:f1:fa:
69:08:6f:42:f2:a4:da:88:b4:03:91:e6:b3:dc:f7:e6:32:33:
06:fb:bc:ed:c6:d2:9b:23:18:94:8a:98:f6:bf:f7:59:d7:6d:
e1:d9:dd:e9:4e:56:ec:1b:ee:88:43:0b:ef:2f:c6:33:e6:64:
d8:34:02:cc:81:a8:b4:a3:d8:dc:e7:00:6f:cf:b6:c8:f1:45:
d0:65:55:ed:83:a3:e3:60:ea:a4:18:ff:56:20:65:64:93:be:
84:83:0c:95:9d:10:43:7a:6f:6f:16:a5:78:0f:24:71:c5:7f:
f1:8a:3a:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEJnsJqISKY4c7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YzdiZjQxY2YtYTM5Ni00ZjA3LTg2OTAtZTZlZmYxMjJiMGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Cekhd2rcM+YBZSJeLqelZTBwL0xobfdZ2+
wZ8LN7qLGmUxFfYdF5Z7vzFZMM03IEw25CvMjRy91M+TWq7YmK27I0mgbOzD77yF
Sn7FPbqSpWkPtnp0FBxnEOJU03tw7zKN+6hbUtAY61tCsnLf9WptoyYa80l/VYHT
euPq1X0k76lsM/mN6W2EIrbWJLUHt1g98Pg+umTtEaawMkVJWOX8DhCFvvyc4H6z
Psnd8qzEAg1YI0H4YhSXc1jYfiPnrV/5p2tJPsGiYdNX2vLpXZ+m7V3R+g4a4Lkr
VXxIkOAxbg5SUB4suy/T37n3c1K0kHZVPrLfvg6hMByS6hpZMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBrHwLqqeym5m6A5dGCQXCFzF3tbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmNhMGNlZTYtNTBhZC0z
M2VjLTgzMjYtMDhkOWY5ZDZkMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRflAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN3WvXvs9lyfnwvqIvf/IERLWZ7UOqYh+Kyzw64dfXZQ2HSKgwHTYQ+C
gH6xdqbVQ/P0UYuDIUQVxbYLpj1JdPNKBMkqRrXSrdNtiKBURMfzbglL4IE9BcT5
nFNnp8d8y7DeGwG2RuzSPLQl0tUqSf+twZeNgLfSh3yeM72OtPQNEdEPLRSzHK2I
DA/R/TTx+mkIb0LypNqItAOR5rPc9+YyMwb7vO3G0psjGJSKmPa/91nXbeHZ3elO
Vuwb7ohDC+8vxjPmZNg0AsyBqLSj2NznAG/PtsjxRdBlVe2Do+Ng6qQY/1YgZWST
voSDDJWdEEN6b28WpXgPJHHFf/GKOqE=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:07:30 2025 by rpki-client