Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8044d33f-57f2-38a5-8150-316d04dbeeab.roa
File: 8044d33f-57f2-38a5-8150-316d04dbeeab.roa (raw, json)
Hash identifier: e5SPvO84ccPlgojicoIqUdCOcyrwVMdE+JH21TkVe/Y=
Subject key identifier: 82:C1:2B:CD:17:70:B4:A5:2F:A3:A8:48:8A:DD:30:84:A9:15:C9:D5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B94F4A94F9020FBD64540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8044d33f-57f2-38a5-8150-316d04dbeeab.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 76.22.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:94:f4:a9:4f:90:20:fb:d6:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=7f4417bc-2598-4ed4-8d4c-055ce1bf86c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:3e:31:e3:a6:4b:b7:5b:6e:cf:7d:62:29:
84:b3:5a:a7:11:c5:4a:23:de:67:ed:80:6a:0c:2f:
f5:57:0e:6f:41:8c:e5:74:54:44:73:2b:e2:c9:9e:
9c:01:0d:a4:84:15:f3:3c:d2:87:0e:8a:04:ac:08:
69:c9:be:e5:54:a3:80:bb:59:4f:a6:54:09:15:15:
e2:31:26:1f:da:72:2f:44:3c:f3:35:4d:08:5c:4b:
a5:de:4b:15:0e:23:5c:01:44:ab:29:80:c1:bf:a6:
dc:fe:98:1e:30:9a:eb:05:2f:81:2e:da:a7:6d:bc:
a7:32:10:5e:f7:3d:59:79:67:18:52:62:3e:59:e0:
2a:ca:b2:14:c1:63:d6:a3:38:ec:75:81:9a:69:fe:
4b:44:48:ff:63:9a:a4:b6:31:be:f3:c9:1d:0d:d1:
76:f5:42:9f:a2:c2:a3:73:d3:88:ec:a6:39:79:61:
ca:2b:82:37:00:98:41:30:0c:9d:1d:93:32:9e:42:
16:f2:92:2b:e7:d8:94:6a:4c:c0:61:a7:f1:b9:3f:
96:95:1a:01:95:3e:da:7c:b7:5c:8f:26:f8:a5:4e:
64:c9:ee:ae:64:3d:9b:c0:56:cb:fe:20:a6:49:01:
c8:5f:45:20:c4:8e:45:07:95:e7:ac:9d:4f:14:73:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C1:2B:CD:17:70:B4:A5:2F:A3:A8:48:8A:DD:30:84:A9:15:C9:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8044d33f-57f2-38a5-8150-316d04dbeeab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.22.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:e8:97:56:5a:e0:65:97:d2:9f:08:26:4a:b6:1e:d0:40:af:
95:83:e6:36:b6:3a:83:c8:60:4a:2f:50:e2:1c:89:97:d3:39:
fd:35:42:a7:4b:45:51:a3:80:dc:93:90:c4:ce:e2:3f:f9:33:
af:41:39:2a:4c:4b:fe:28:4d:46:32:4a:23:99:63:91:46:69:
ab:f5:02:ab:4b:4b:05:70:0b:1c:43:b3:51:ab:aa:10:d0:df:
3b:98:20:25:35:7d:62:07:dc:cf:01:9e:f4:d7:bd:42:fd:bd:
c3:0a:8d:88:de:95:19:1f:e8:de:74:37:9d:8c:41:68:6a:eb:
7f:78:c9:e6:95:89:e4:9d:6d:f9:50:2d:11:ee:6d:df:c8:da:
e5:2b:27:78:62:bc:33:e8:a2:9c:f5:f6:b2:a1:34:28:78:23:
dc:bb:78:e5:32:e5:02:19:31:fd:d8:d4:2f:44:d6:1a:f2:47:
ef:e3:14:7f:4d:f3:c5:2b:30:81:1c:bc:27:de:da:74:05:4e:
9b:e6:de:a9:0d:09:b8:5f:b6:4a:11:93:72:aa:27:71:92:92:
79:a2:0c:fb:c6:9e:20:5e:08:05:5e:4a:bf:00:9a:98:af:0e:
ec:a1:63:f6:c0:dd:52:f6:51:3f:f4:20:1c:49:54:52:40:be:
c6:e3:b3:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea5T0qU+QIPvWRUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
N2Y0NDE3YmMtMjU5OC00ZWQ0LThkNGMtMDU1Y2UxYmY4NmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI8+MeOmS7dbbs99YimEs1qnEcVKI95n7YBq
DC/1Vw5vQYzldFREcyviyZ6cAQ2khBXzPNKHDooErAhpyb7lVKOAu1lPplQJFRXi
MSYf2nIvRDzzNU0IXEul3ksVDiNcAUSrKYDBv6bc/pgeMJrrBS+BLtqnbbynMhBe
9z1ZeWcYUmI+WeAqyrIUwWPWozjsdYGaaf5LREj/Y5qktjG+88kdDdF29UKfosKj
c9OI7KY5eWHKK4I3AJhBMAydHZMynkIW8pIr59iUakzAYafxuT+WlRoBlT7afLdc
jyb4pU5kye6uZD2bwFbL/iCmSQHIX0UgxI5FB5XnrJ1PFHPlCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFILBK80XcLSlL6OoSIrdMISpFcnVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODA0NGQzM2YtNTdmMi0z
OGE1LTgxNTAtMzE2ZDA0ZGJlZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATBaMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHol1Za4GWX0p8IJkq2HtBAr5WD5ja2OoPIYEovUOIciZfTOf01QqdL
RVGjgNyTkMTO4j/5M69BOSpMS/4oTUYySiOZY5FGaav1AqtLSwVwCxxDs1GrqhDQ
3zuYICU1fWIH3M8BnvTXvUL9vcMKjYjelRkf6N50N52MQWhq6394yeaVieSdbflQ
LRHubd/I2uUrJ3hivDPoopz19rKhNCh4I9y7eOUy5QIZMf3Y1C9E1hryR+/jFH9N
88UrMIEcvCfe2nQFTpvm3qkNCbhftkoRk3KqJ3GSknmiDPvGniBeCAVeSr8Ampiv
DuyhY/bA3VL2UT/0IBxJVFJAvsbjs8Q=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:02:46 2025 by rpki-client