Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86331182-9729-3734-9b3f-8c188ca0a2d6.roa
File: 86331182-9729-3734-9b3f-8c188ca0a2d6.roa (raw, json)
Hash identifier: hiPkIfGJPRyXk9+pzrr3BrHv4IjRYg6/0vI9snxIIxA=
Subject key identifier: E2:A9:5C:75:9A:A7:E8:8F:AB:32:89:AD:24:A9:25:0C:0A:14:A0:91
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1176F9000A218A38447260
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86331182-9729-3734-9b3f-8c188ca0a2d6.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.4.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:76:f9:00:0a:21:8a:38:44:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ec0871c1-9efe-434f-91bf-42f7896dabf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:0b:b0:fc:7a:86:22:90:50:82:55:dc:38:
91:61:09:dd:ca:43:da:72:43:74:30:20:92:0e:ac:
af:c4:2c:13:9b:f2:48:53:35:5c:a1:dd:c4:95:66:
4f:6d:af:5b:e1:ff:85:39:62:f4:eb:d9:a4:d4:35:
dd:ef:1f:ba:29:c4:23:e2:e2:15:c9:1b:ce:8e:57:
57:97:24:41:b4:6e:93:db:3b:e2:64:47:d6:66:6c:
9e:e3:18:e3:d2:e7:4a:ce:41:ba:ec:f0:ed:d4:77:
08:03:d7:43:71:3a:d4:cb:9a:67:90:2c:94:55:9f:
9a:f9:67:01:c7:5f:94:de:5a:8d:20:18:31:4a:d6:
ce:d7:23:c8:11:61:7c:68:02:75:d3:3c:33:02:8a:
20:0b:23:7c:36:e8:5a:50:d7:2e:a6:a7:44:69:e4:
3e:8f:a2:cd:f0:30:94:c1:6c:c7:c2:51:7c:a8:ad:
9a:8a:21:20:28:88:e8:47:7a:90:55:fd:be:63:3c:
7b:fa:ad:5f:54:01:d5:c2:d0:56:9a:73:58:c8:9a:
1e:cb:04:f6:51:ea:0e:23:9d:41:a5:33:24:21:6b:
a2:7e:f3:38:6a:24:ee:77:2e:45:a6:4c:23:c5:2a:
34:95:02:df:d8:b8:a6:69:8f:43:2c:1f:4b:d9:89:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A9:5C:75:9A:A7:E8:8F:AB:32:89:AD:24:A9:25:0C:0A:14:A0:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86331182-9729-3734-9b3f-8c188ca0a2d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.4.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:99:e0:74:34:a2:be:86:25:9b:68:d6:40:74:6c:21:04:77:
52:6a:df:24:10:14:22:55:b0:31:2b:35:f1:08:54:c8:17:ca:
e6:2d:f4:2f:b3:65:e9:51:47:e4:19:5f:35:4c:c3:82:d9:61:
45:de:11:f1:85:91:cc:f3:d5:2d:1b:04:6e:2c:26:c5:f4:aa:
24:9b:a7:d3:92:ce:c3:cc:51:35:9e:53:2b:b9:d5:c5:ac:71:
18:f7:f2:e7:00:58:d4:86:0d:ea:68:bf:07:ea:66:ce:51:89:
0e:d5:fa:93:c8:3a:45:fb:0b:9a:04:4e:ec:7a:d4:48:a2:bb:
b8:ff:8a:69:85:70:f4:fb:3d:33:58:86:aa:1f:a0:85:23:92:
3a:c9:8e:f3:13:4f:24:ef:49:b5:72:38:51:47:8d:73:42:08:
cf:e8:7c:ce:ab:d3:3a:4e:ed:da:b8:3d:ec:0f:1c:bf:df:0f:
e9:34:46:6c:df:c9:a4:62:3c:2c:fd:f3:e4:85:b9:aa:16:eb:
13:4d:1f:c7:0e:49:18:53:c0:56:6e:06:4a:9f:87:fe:17:f8:
8f:f4:19:cd:7c:8e:e4:14:77:ea:2f:95:03:45:db:f7:09:a5:
b0:e4:4a:67:69:d6:f9:65:eb:19:af:15:1a:fc:b7:03:7c:5f:
3f:54:5f:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEXb5AAohijhEcmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZWMwODcxYzEtOWVmZS00MzRmLTkxYmYtNDJmNzg5NmRhYmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVALsPx6hiKQUIJV3DiRYQndykPackN0MCCS
DqyvxCwTm/JIUzVcod3ElWZPba9b4f+FOWL069mk1DXd7x+6KcQj4uIVyRvOjldX
lyRBtG6T2zviZEfWZmye4xjj0udKzkG67PDt1HcIA9dDcTrUy5pnkCyUVZ+a+WcB
x1+U3lqNIBgxStbO1yPIEWF8aAJ10zwzAoogCyN8NuhaUNcupqdEaeQ+j6LN8DCU
wWzHwlF8qK2aiiEgKIjoR3qQVf2+Yzx7+q1fVAHVwtBWmnNYyJoeywT2UeoOI51B
pTMkIWuifvM4aiTudy5FpkwjxSo0lQLf2LimaY9DLB9L2YnROwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKpXHWap+iPqzKJrSSpJQwKFKCRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODYzMzExODItOTcyOS0z
NzM0LTliM2YtOGMxODhjYTBhMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyZ4HQ0or6GJZto1kB0bCEEd1Jq3yQQFCJVsDErNfEIVMgXyuYt9C+z
ZelRR+QZXzVMw4LZYUXeEfGFkczz1S0bBG4sJsX0qiSbp9OSzsPMUTWeUyu51cWs
cRj38ucAWNSGDepovwfqZs5RiQ7V+pPIOkX7C5oETux61Eiiu7j/immFcPT7PTNY
hqofoIUjkjrJjvMTTyTvSbVyOFFHjXNCCM/ofM6r0zpO7dq4PewPHL/fD+k0Rmzf
yaRiPCz98+SFuaoW6xNNH8cOSRhTwFZuBkqfh/4X+I/0Gc18juQUd+ovlQNF2/cJ
pbDkSmdp1vll6xmvFRr8twN8Xz9UX7E=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:54:32 2025 by rpki-client