Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f37f2a8-649c-3229-8cb3-ccee1052b18a.roa
File: 6f37f2a8-649c-3229-8cb3-ccee1052b18a.roa (raw, json)
Hash identifier: KJpTwUnxcbKRuDTI/mC3peVmhlYWknfP1uU5wKx6WEA=
Subject key identifier: 0E:B0:51:43:D1:4D:C1:9D:20:09:96:4B:5A:DA:08:DB:81:FC:3A:8E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ACEB2B5DA3D1CD0FD26C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f37f2a8-649c-3229-8cb3-ccee1052b18a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.63.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:ce:b2:b5:da:3d:1c:d0:fd:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=31201011-1dbc-44e6-8e17-4d62c59cbb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:d9:a2:3a:14:cc:37:d9:1b:72:d2:fb:0a:
a9:3b:53:89:ef:dd:91:ed:d7:be:8e:19:ca:b1:a1:
98:43:ec:bd:8f:90:18:d3:08:ad:42:b0:b3:c6:6c:
29:fb:db:22:46:11:43:5f:9c:5d:19:d8:ef:21:85:
10:b1:c8:24:fd:0d:73:ed:17:ba:b2:85:46:61:c6:
e6:11:72:23:a0:a3:99:76:21:6e:fe:fc:d1:6c:45:
1f:78:09:a3:9f:dc:48:e3:a8:32:be:f6:6a:25:98:
b8:c7:84:81:91:a4:cb:42:21:55:7a:c6:bd:ea:1c:
89:cc:f8:e5:57:17:e1:96:e0:0e:90:8b:92:9e:3f:
43:3a:14:b8:f6:f4:b0:e2:60:73:aa:d0:89:49:be:
c7:1a:da:50:87:9e:85:57:2b:d1:b8:c6:72:3d:64:
96:30:a5:ed:cb:c0:d8:2f:b3:07:ff:49:f0:8c:ae:
5b:66:b7:07:74:6b:dd:8e:d4:d6:0f:01:5b:a1:fe:
30:4f:e3:92:05:eb:0a:a3:23:09:75:ea:86:10:be:
5f:54:54:5b:c1:fe:6e:c1:f9:08:b8:7c:6c:0b:f1:
3d:f7:bd:46:8d:7a:27:0f:58:61:89:a2:e3:74:a2:
62:bb:56:ad:f3:b5:3f:55:9a:5a:ea:c9:1d:a8:c9:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B0:51:43:D1:4D:C1:9D:20:09:96:4B:5A:DA:08:DB:81:FC:3A:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f37f2a8-649c-3229-8cb3-ccee1052b18a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.63.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:e8:be:79:48:0d:cb:16:a8:89:cb:d4:2d:ac:d2:f4:b0:e9:
1f:14:65:b2:d4:2b:3c:e6:d6:9f:27:61:8c:8b:2a:db:48:1e:
d2:8b:a4:bb:fb:b9:85:b6:de:1f:ce:4f:67:03:2f:d5:45:02:
d6:b9:82:3c:f7:a5:60:2d:6e:a0:da:3f:43:ca:14:6c:97:1a:
20:ca:f1:73:e9:87:7b:70:fb:69:c4:10:39:aa:af:d1:eb:34:
2f:18:9f:88:4d:4d:97:74:ed:69:54:6c:c2:06:93:92:17:c0:
bf:6b:66:92:e4:c3:1d:f0:31:04:0d:43:56:3d:72:c9:52:ef:
60:74:94:16:3d:1c:bb:14:79:e2:d5:bf:7d:0c:a8:43:27:1d:
83:e7:ee:e7:1f:a8:ae:99:d7:3b:09:d7:f2:bf:c4:fc:ed:ee:
d6:ac:f3:97:e8:7e:46:0c:2c:36:02:43:cd:66:26:b2:0a:9b:
7c:de:ca:78:d2:a5:db:7a:7a:38:0c:66:f2:6c:ea:05:d4:6e:
52:bc:42:e6:d2:a2:95:dd:f9:d7:7e:cf:fb:ac:be:f7:7b:0f:
a3:75:6a:81:fa:49:16:dd:37:81:48:3b:61:65:e3:65:52:c6:
47:b5:e1:95:3f:37:ca:f8:a8:6d:ed:85:02:c9:65:37:11:5f:
7d:d8:34:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOs6ytdo9HND9JsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MzEyMDEwMTEtMWRiYy00NGU2LThlMTctNGQ2MmM1OWNiYjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVTZojoUzDfZG3LS+wqpO1OJ792R7de+jhnK
saGYQ+y9j5AY0witQrCzxmwp+9siRhFDX5xdGdjvIYUQscgk/Q1z7Re6soVGYcbm
EXIjoKOZdiFu/vzRbEUfeAmjn9xI46gyvvZqJZi4x4SBkaTLQiFVesa96hyJzPjl
VxfhluAOkIuSnj9DOhS49vSw4mBzqtCJSb7HGtpQh56FVyvRuMZyPWSWMKXty8DY
L7MH/0nwjK5bZrcHdGvdjtTWDwFbof4wT+OSBesKoyMJdeqGEL5fVFRbwf5uwfkI
uHxsC/E9971GjXonD1hhiaLjdKJiu1at87U/VZpa6skdqMlx7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA6wUUPRTcGdIAmWS1raCNuB/DqOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmYzN2YyYTgtNjQ5Yy0z
MjI5LThjYjMtY2NlZTEwNTJiMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGD/yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7ovnlIDcsWqInL1C2s0vSw6R8UZbLUKzzm1p8nYYyLKttIHtKLpLv7
uYW23h/OT2cDL9VFAta5gjz3pWAtbqDaP0PKFGyXGiDK8XPph3tw+2nEEDmqr9Hr
NC8Yn4hNTZd07WlUbMIGk5IXwL9rZpLkwx3wMQQNQ1Y9cslS72B0lBY9HLsUeeLV
v30MqEMnHYPn7ucfqK6Z1zsJ1/K/xPzt7tas85fofkYMLDYCQ81mJrIKm3zeynjS
pdt6ejgMZvJs6gXUblK8QubSopXd+dd+z/usvvd7D6N1aoH6SRbdN4FIO2Fl42VS
xke14ZU/N8r4qG3thQLJZTcRX33YNJI=
-----END CERTIFICATE-----
Generated at Fri May 9 07:03:33 2025 by rpki-client