Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c1e8ae8-4301-303c-a5f6-a9ce4f82304e.roa
File: 7c1e8ae8-4301-303c-a5f6-a9ce4f82304e.roa (raw, json)
Hash identifier: CvUFI8r/WXCie2YMl50mugdBzvoaYYacI3hqWrMyJCw=
Subject key identifier: 04:00:8C:9A:3C:5D:51:66:76:B9:33:E8:9A:2B:28:27:CE:F5:0F:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11DC399633684D0E537100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c1e8ae8-4301-303c-a5f6-a9ce4f82304e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 71.199.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:dc:39:96:33:68:4d:0e:53:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=102ca978-25e5-4ab7-878f-d973de048769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:97:af:c5:d8:9e:22:73:18:bf:5e:4a:f6:
29:1a:ca:2e:c5:cb:8a:80:9b:22:07:0b:13:58:04:
75:f8:ca:0f:f7:37:0f:af:6a:a3:32:9e:d4:37:79:
1d:ed:d7:8e:c9:59:1c:40:f2:7d:3b:6d:1f:fb:4e:
eb:f2:3c:61:9b:e0:5d:0e:6e:e2:2f:6d:b9:c3:2d:
40:0e:61:09:46:c9:e2:56:7b:55:99:c8:da:e1:08:
e7:a2:c2:13:d5:c7:bc:15:46:3d:1b:76:69:df:98:
0b:71:c9:cb:12:91:07:57:ef:a2:fe:40:37:5d:87:
84:61:a5:d1:d8:16:b1:86:4a:0e:47:ba:21:a4:f4:
45:a1:9d:00:6d:06:90:10:30:6d:f8:9c:81:8e:46:
11:f6:44:d0:5a:42:9e:c2:aa:c0:ca:d2:07:7f:f8:
e3:8b:91:ce:7d:0c:8e:5d:92:f6:11:29:00:51:db:
aa:b7:0b:c1:ec:8b:ce:76:d5:98:af:a1:c2:ad:70:
cb:16:5a:4d:0f:6d:07:36:87:a8:55:02:3a:76:f3:
98:5d:1c:cd:40:93:c8:fa:0e:1c:46:69:69:18:ea:
9a:18:0d:ca:a0:d4:16:58:b4:3b:e4:c5:ce:3d:36:
34:9b:3f:9a:e4:a1:7c:8c:6e:45:49:f0:d5:49:84:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:00:8C:9A:3C:5D:51:66:76:B9:33:E8:9A:2B:28:27:CE:F5:0F:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c1e8ae8-4301-303c-a5f6-a9ce4f82304e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.199.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:4d:84:bb:f0:dc:c0:67:41:02:5b:f1:3b:bd:86:49:2c:7e:
b7:f8:e3:6a:d4:46:e9:86:93:9c:ee:4a:00:1b:a2:9b:eb:79:
d1:66:d2:8d:52:65:44:21:eb:60:df:66:f2:f3:04:68:46:dd:
20:e1:2e:93:2d:d7:cb:1b:4d:f1:7b:5c:3d:60:16:b0:96:df:
a6:59:fe:cd:fa:f8:22:9b:55:3a:9f:a3:69:8f:bf:94:48:27:
8e:a1:4a:22:87:7e:7c:2e:1c:de:ce:9c:a3:da:0a:21:5e:c9:
ed:f3:0f:9c:97:60:93:ae:0d:ca:51:eb:64:3d:c8:1d:e8:9e:
90:9b:cd:01:b7:00:eb:30:0b:f5:be:7a:f9:4f:59:a5:db:88:
44:d3:7e:bc:94:b3:0b:04:0b:f6:15:ca:b4:c6:5b:78:0a:d3:
9c:21:59:49:77:9b:c2:49:ea:76:17:2a:9f:5a:21:e6:dc:75:
97:19:3d:3f:40:ab:04:5e:75:67:00:0b:fc:75:ba:ca:59:41:
a7:08:e7:e8:9b:3d:19:21:c3:77:3d:24:f5:86:06:0d:83:5c:
a8:86:5d:26:ef:0c:02:df:63:dd:2d:33:8f:ce:33:66:ab:6d:
92:5e:45:61:f0:61:62:21:98:24:e8:c5:57:93:79:20:62:dc:
db:39:02:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEdw5ljNoTQ5TcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MTAyY2E5NzgtMjVlNS00YWI3LTg3OGYtZDk3M2RlMDQ4NzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjSXr8XYniJzGL9eSvYpGsouxcuKgJsiBwsT
WAR1+MoP9zcPr2qjMp7UN3kd7deOyVkcQPJ9O20f+07r8jxhm+BdDm7iL225wy1A
DmEJRsniVntVmcja4QjnosIT1ce8FUY9G3Zp35gLccnLEpEHV++i/kA3XYeEYaXR
2BaxhkoOR7ohpPRFoZ0AbQaQEDBt+JyBjkYR9kTQWkKewqrAytIHf/jji5HOfQyO
XZL2ESkAUduqtwvB7IvOdtWYr6HCrXDLFlpND20HNoeoVQI6dvOYXRzNQJPI+g4c
RmlpGOqaGA3KoNQWWLQ75MXOPTY0mz+a5KF8jG5FSfDVSYQ59QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQAjJo8XVFmdrkz6JorKCfO9Q96MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2MxZThhZTgtNDMwMS0z
MDNjLWE1ZjYtYTljZTRmODIzMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8ccMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtNhLvw3MBnQQJb8Tu9hkksfrf442rURumGk5zuSgAbopvredFm0o1S
ZUQh62DfZvLzBGhG3SDhLpMt18sbTfF7XD1gFrCW36ZZ/s36+CKbVTqfo2mPv5RI
J46hSiKHfnwuHN7OnKPaCiFeye3zD5yXYJOuDcpR62Q9yB3onpCbzQG3AOswC/W+
evlPWaXbiETTfryUswsEC/YVyrTGW3gK05whWUl3m8JJ6nYXKp9aIebcdZcZPT9A
qwRedWcAC/x1uspZQacI5+ibPRkhw3c9JPWGBg2DXKiGXSbvDALfY90tM4/OM2ar
bZJeRWHwYWIhmCToxVeTeSBi3Ns5AgM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:44 2025 by rpki-client