Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d3d8f0f-6a47-395c-8e5a-e4bd503592bf.roa
File: 6d3d8f0f-6a47-395c-8e5a-e4bd503592bf.roa (raw, json)
Hash identifier: OqtYmZ5dM5bqdjFmNheoESj1NgRFWisb8oGDSObcc9U=
Subject key identifier: 58:02:43:56:AB:E0:D1:12:72:93:E5:EC:90:5E:F6:59:DD:40:64:14
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848424B09376EEF4D3B540A1B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d3d8f0f-6a47-395c-8e5a-e4bd503592bf.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 33490
IP address blocks: 96.217.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4b:09:37:6e:ef:4d:3b:54:0a:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=f20c0326-c555-449b-b0bd-c9c1eca7aaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4f:ea:24:cd:24:cd:d5:c9:73:d7:90:99:ff:
c4:19:e8:e1:f4:d7:3f:bc:f7:c9:00:81:02:22:a0:
03:45:5e:e4:95:96:76:0b:47:3a:c3:81:54:ae:fc:
2b:e4:46:37:4c:11:6b:31:4a:06:42:36:40:42:18:
42:ea:33:23:fa:20:f4:54:96:19:3c:5d:a6:4f:5f:
07:30:de:9a:c7:74:8d:8e:60:70:91:a5:67:c1:ef:
99:03:fc:c9:db:60:46:fb:83:48:29:51:d9:88:c9:
96:6b:7a:86:28:31:ce:ef:22:db:45:50:21:fd:83:
ce:27:a5:fe:cd:3c:4d:30:ae:f0:af:fd:61:a3:02:
e4:cd:f1:18:78:7b:a2:ab:7b:f9:16:df:5a:67:2e:
b4:83:f9:1b:f5:c4:13:3c:0e:7c:f1:84:14:a3:d1:
24:50:64:3a:7d:f5:aa:05:ca:ca:99:97:c9:e9:cb:
73:b9:57:fd:6c:e6:0d:26:2a:7d:11:a5:c7:80:c2:
22:ff:ad:30:39:0d:eb:4d:8e:61:ee:ad:41:12:0c:
c6:d0:e1:bf:d2:c5:91:82:dd:40:ab:1c:9a:c5:d6:
10:e4:2d:65:2c:7c:0a:6a:98:14:ef:0b:80:7b:54:
bc:4d:20:07:54:76:07:be:13:7c:db:fd:d2:34:ac:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:02:43:56:AB:E0:D1:12:72:93:E5:EC:90:5E:F6:59:DD:40:64:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d3d8f0f-6a47-395c-8e5a-e4bd503592bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.217.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:76:9a:8f:8e:e2:ec:cc:cf:d3:9b:e4:d9:f7:58:40:ad:b8:
bb:b3:e5:4d:64:31:fc:52:cd:4c:22:6a:55:9a:3c:e1:72:45:
a6:c2:12:50:50:41:b3:05:62:59:a0:be:ee:23:1d:31:0b:bd:
f7:0f:86:0b:81:5a:92:88:43:eb:f7:b2:d7:71:ec:5a:ac:2c:
0f:17:01:28:13:e2:12:d7:bc:4e:6f:e4:39:74:f9:c4:6a:e0:
7a:1b:29:a1:b4:82:fc:3b:5e:01:a8:94:62:57:cb:c0:01:aa:
7a:62:d6:81:7d:2e:dc:cd:7d:68:54:21:d4:6f:16:7c:7c:fd:
79:0d:b1:f9:84:1f:eb:1a:7c:18:6a:9a:d1:54:51:76:51:a5:
d5:76:9e:2d:e8:98:c8:8a:e9:57:c1:1e:77:26:30:d1:aa:74:
2c:e3:b2:c5:50:83:45:d3:2f:16:ed:93:f4:4d:9f:95:d1:5b:
9a:25:33:9d:4a:c5:a2:55:74:5f:2e:ac:a9:b7:c6:7e:58:22:
07:6e:fe:c2:0d:3d:26:26:68:71:03:cf:f9:55:66:d8:75:7c:
00:ba:24:40:88:bc:6e:1b:7c:dc:62:11:8c:3e:84:db:2e:dc:
d7:2d:f5:05:40:51:3b:5d:40:ee:c5:c8:6a:b6:91:5f:06:7f:
c4:88:79:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSwk3bu9NO1QKG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjIwYzAzMjYtYzU1NS00NDliLWIwYmQtYzljMWVjYTdhYWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0/qJM0kzdXJc9eQmf/EGejh9Nc/vPfJAIEC
IqADRV7klZZ2C0c6w4FUrvwr5EY3TBFrMUoGQjZAQhhC6jMj+iD0VJYZPF2mT18H
MN6ax3SNjmBwkaVnwe+ZA/zJ22BG+4NIKVHZiMmWa3qGKDHO7yLbRVAh/YPOJ6X+
zTxNMK7wr/1howLkzfEYeHuiq3v5Ft9aZy60g/kb9cQTPA588YQUo9EkUGQ6ffWq
BcrKmZfJ6ctzuVf9bOYNJip9EaXHgMIi/60wOQ3rTY5h7q1BEgzG0OG/0sWRgt1A
qxyaxdYQ5C1lLHwKapgU7wuAe1S8TSAHVHYHvhN82/3SNKxKjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgCQ1ar4NEScpPl7JBe9lndQGQUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmQzZDhmMGYtNmE0Ny0z
OTVjLThlNWEtZTRiZDUwMzU5MmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYNkoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGx2mo+O4uzMz9Ob5Nn3WECtuLuz5U1kMfxSzUwialWaPOFyRabCElBQ
QbMFYlmgvu4jHTELvfcPhguBWpKIQ+v3stdx7FqsLA8XASgT4hLXvE5v5Dl0+cRq
4HobKaG0gvw7XgGolGJXy8ABqnpi1oF9LtzNfWhUIdRvFnx8/XkNsfmEH+safBhq
mtFUUXZRpdV2ni3omMiK6VfBHncmMNGqdCzjssVQg0XTLxbtk/RNn5XRW5olM51K
xaJVdF8urKm3xn5YIgdu/sINPSYmaHEDz/lVZth1fAC6JECIvG4bfNxiEYw+hNsu
3Nct9QVAUTtdQO7FyGq2kV8Gf8SIeVM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:02:48 2025 by rpki-client