Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73e36ad7-e3f8-3b5c-9d63-d5635f2aebda.roa
File: 73e36ad7-e3f8-3b5c-9d63-d5635f2aebda.roa (raw, json)
Hash identifier: bKyDJscrbCj5j0wE7TGhYY2hMtU1jQe8uBs3E0G+Tio=
Subject key identifier: 1F:85:38:10:FB:50:3A:07:C0:0F:B5:C0:30:BB:B0:B4:1B:27:D1:C3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1268A109DFBA3CC0E9A440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73e36ad7-e3f8-3b5c-9d63-d5635f2aebda.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 24.1.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:68:a1:09:df:ba:3c:c0:e9:a4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=606620e0-46a4-47ac-848b-f2a2f603bc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:23:58:af:0f:a4:81:f6:29:5a:a3:d9:ca:
66:e2:00:9e:f2:6f:2d:cc:30:18:97:97:3b:c7:8c:
ff:e8:9b:c8:a2:fd:10:65:f6:22:be:eb:da:56:45:
e8:77:b1:02:35:1a:c2:80:57:05:e4:17:ba:5c:5f:
7b:92:64:bd:15:40:72:5a:a6:ba:18:78:ac:32:98:
0c:15:a7:13:7a:72:c9:81:3c:2f:3b:cc:90:5f:a1:
a8:21:f3:53:a7:ce:5f:53:06:e5:52:3d:ad:c4:5a:
11:7f:2e:c4:bc:a7:2e:3e:f3:5c:ec:ef:a6:95:99:
dd:f5:ea:06:4d:b0:fd:d8:82:71:06:24:fa:70:55:
00:5b:59:33:f5:05:35:85:1c:5a:4c:b7:8d:45:9c:
52:81:e5:a2:c2:79:44:95:a4:94:86:c1:a7:e1:d8:
27:d4:a2:f0:75:f0:48:c5:80:de:9c:be:b7:54:6a:
74:f4:ab:7a:dd:0d:01:72:24:b0:35:37:97:5b:d8:
24:a0:7e:40:9c:f9:71:73:f3:80:8a:61:aa:7c:7b:
f4:66:48:87:d7:83:12:7a:02:26:ab:f8:9b:ed:8b:
0e:33:6e:4e:54:42:43:cd:cf:c2:db:62:a8:b2:5c:
10:33:bb:53:22:6f:7e:ca:d7:91:aa:57:9b:c7:2c:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:85:38:10:FB:50:3A:07:C0:0F:B5:C0:30:BB:B0:B4:1B:27:D1:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73e36ad7-e3f8-3b5c-9d63-d5635f2aebda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:8e:78:14:4b:d8:f7:8b:9c:47:22:ad:45:19:63:30:31:36:
73:75:87:f4:75:90:73:b4:2c:b2:1b:f5:93:88:74:57:e4:27:
91:b4:07:62:32:09:eb:19:c1:13:b9:2e:8d:b1:4d:b4:e9:fb:
35:e7:c8:63:ce:aa:09:30:44:69:ec:6b:e8:15:60:10:bb:65:
e1:f7:7f:0f:d4:4c:e1:3c:63:09:bb:7b:f7:e4:8b:78:46:2d:
23:96:3d:30:b4:95:c2:db:90:98:29:f5:81:31:5e:4d:b1:e6:
30:cd:73:a4:10:01:a9:e2:1d:2c:e9:d1:30:63:e3:1d:7c:07:
be:54:b3:41:af:97:11:db:21:cd:4e:b3:f1:9f:70:f8:7a:a8:
65:d8:3a:a0:f5:6e:74:b7:1f:58:78:28:00:65:42:de:20:c8:
8a:1d:67:f9:4e:53:0c:a1:d4:a3:6b:40:c8:1c:a9:99:56:88:
dd:66:cb:cc:c0:f3:82:97:f5:ab:58:21:53:0b:77:08:4b:94:
2d:9f:bc:32:f0:30:44:2d:9e:94:45:5b:b3:3c:1b:dd:d8:3c:
f1:a9:25:80:e9:81:50:74:c1:eb:0c:2b:af:4b:11:a5:31:25:
7d:bc:aa:ec:13:66:3d:3c:24:e9:72:58:c8:79:fd:c1:52:18:
7e:93:85:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEmihCd+6PMDppEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NjA2NjIwZTAtNDZhNC00N2FjLTg0OGItZjJhMmY2MDNiYzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRojWK8PpIH2KVqj2cpm4gCe8m8tzDAYl5c7
x4z/6JvIov0QZfYivuvaVkXod7ECNRrCgFcF5Be6XF97kmS9FUByWqa6GHisMpgM
FacTenLJgTwvO8yQX6GoIfNTp85fUwblUj2txFoRfy7EvKcuPvNc7O+mlZnd9eoG
TbD92IJxBiT6cFUAW1kz9QU1hRxaTLeNRZxSgeWiwnlElaSUhsGn4dgn1KLwdfBI
xYDenL63VGp09Kt63Q0BciSwNTeXW9gkoH5AnPlxc/OAimGqfHv0ZkiH14MSegIm
q/ib7YsOM25OVEJDzc/C22KoslwQM7tTIm9+yteRqlebxywrXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB+FOBD7UDoHwA+1wDC7sLQbJ9HDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzNlMzZhZDctZTNmOC0z
YjVjLTlkNjMtZDU2MzVmMmFlYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAEEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGCOeBRL2PeLnEcirUUZYzAxNnN1h/R1kHO0LLIb9ZOIdFfkJ5G0B2Iy
CesZwRO5Lo2xTbTp+zXnyGPOqgkwRGnsa+gVYBC7ZeH3fw/UTOE8Ywm7e/fki3hG
LSOWPTC0lcLbkJgp9YExXk2x5jDNc6QQAaniHSzp0TBj4x18B75Us0GvlxHbIc1O
s/GfcPh6qGXYOqD1bnS3H1h4KABlQt4gyIodZ/lOUwyh1KNrQMgcqZlWiN1my8zA
84KX9atYIVMLdwhLlC2fvDLwMEQtnpRFW7M8G93YPPGpJYDpgVB0wesMK69LEaUx
JX28quwTZj08JOlyWMh5/cFSGH6Theo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:23 2025 by rpki-client