Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872d3801-18da-32ef-9abb-8d04ecc2f908.roa
File: 872d3801-18da-32ef-9abb-8d04ecc2f908.roa (raw, json)
Hash identifier: S2Nma3YInIB1s6ftpxJeWfVc7nussX5AVL0382x2a6c=
Subject key identifier: 34:CC:9C:19:21:9A:93:1C:AB:1A:52:F2:0E:63:42:F1:37:27:FF:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143DA85D2C6B8B3FCF620180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872d3801-18da-32ef-9abb-8d04ecc2f908.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.91.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:a8:5d:2c:6b:8b:3f:cf:62:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=fb71f9b8-ee72-4a6f-a477-87c9de4d49d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:15:06:1e:da:8a:20:a6:36:59:8a:9d:4e:
4a:20:67:7c:a3:ae:0a:3f:b1:6b:e5:de:de:07:49:
2f:61:36:a6:4e:c4:54:cb:2c:18:9f:c7:7e:8e:2c:
99:19:96:26:29:ac:6c:6c:8c:fc:08:27:31:4d:2f:
ea:71:ef:08:42:81:35:6e:14:84:a4:05:aa:1f:86:
7b:1e:59:50:36:c4:6c:d5:7f:14:52:1b:e7:90:4c:
2e:95:95:2b:8b:50:75:a4:f0:b3:5c:b5:df:39:9f:
55:08:cd:bf:bd:89:f6:10:80:69:c8:6f:a3:f3:60:
bd:f5:91:95:f7:c8:ee:de:a9:fa:9d:ba:f4:2d:65:
d6:fb:d3:17:1d:50:85:69:b3:c4:cc:bc:28:4f:73:
b3:1b:5e:6f:3c:df:38:1f:27:4c:cb:58:c7:ba:a4:
cd:c2:9c:8e:5a:75:e5:e4:34:a4:b0:8c:ea:d9:74:
4c:af:00:1a:bf:bd:08:5c:cb:0f:16:cf:07:f5:c5:
c3:97:d1:c1:d9:4f:b1:10:23:c1:c5:37:b1:91:e0:
62:e2:91:c7:1d:13:25:67:93:12:17:1f:4b:4b:b2:
1f:13:00:ed:6f:4d:75:c5:46:43:3e:a2:4f:ff:04:
60:cb:cf:57:97:c9:67:e9:0b:85:e8:1a:60:52:44:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:9C:19:21:9A:93:1C:AB:1A:52:F2:0E:63:42:F1:37:27:FF:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872d3801-18da-32ef-9abb-8d04ecc2f908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.91.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:82:b3:c7:64:47:5f:8c:9e:55:52:f9:c8:a2:a8:a0:a8:74:
88:1c:3c:79:e8:f7:33:9e:42:e0:b5:bc:ef:d1:fa:b2:63:91:
61:06:d5:53:c4:7b:db:be:ca:2d:7d:f6:2b:f7:ed:d2:79:d3:
e8:b7:85:49:55:b2:80:54:27:a1:cf:4e:0b:f8:09:4c:eb:5f:
11:d0:fb:26:f9:83:8a:20:2c:93:2d:54:bc:65:cd:c4:d5:cf:
55:d1:eb:04:0b:20:c2:7b:e8:a8:35:28:25:42:31:87:5f:9f:
5e:b1:9c:f0:01:f8:49:d7:9e:90:02:68:51:24:b5:77:46:8c:
8e:6e:fe:07:f1:c9:af:04:10:ee:10:be:ae:4d:39:b3:0f:bb:
14:d5:af:5c:fa:61:94:8e:6f:6e:db:b5:3e:4a:72:6f:50:68:
98:26:84:e6:b3:ae:a7:36:a0:ce:a2:dd:08:5e:75:d9:27:63:
1a:d7:cb:d2:07:18:67:78:5b:ff:d6:3d:eb:47:49:da:ec:48:
ac:be:b7:69:ac:d3:6c:c1:85:ce:65:e7:e7:82:ba:96:28:59:
1b:6c:64:9a:e5:f2:59:e7:0a:85:4c:d7:74:5e:1b:42:b4:fa:
7d:36:2f:c2:f7:c3:1b:3b:c8:a3:65:75:1a:ae:3c:1c:85:03:
71:b3:f4:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPahdLGuLP89iAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZmI3MWY5YjgtZWU3Mi00YTZmLWE0NzctODdjOWRlNGQ0OWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfEVBh7aiiCmNlmKnU5KIGd8o64KP7Fr5d7e
B0kvYTamTsRUyywYn8d+jiyZGZYmKaxsbIz8CCcxTS/qce8IQoE1bhSEpAWqH4Z7
HllQNsRs1X8UUhvnkEwulZUri1B1pPCzXLXfOZ9VCM2/vYn2EIBpyG+j82C99ZGV
98ju3qn6nbr0LWXW+9MXHVCFabPEzLwoT3OzG15vPN84HydMy1jHuqTNwpyOWnXl
5DSksIzq2XRMrwAav70IXMsPFs8H9cXDl9HB2U+xECPBxTexkeBi4pHHHRMlZ5MS
Fx9LS7IfEwDtb011xUZDPqJP/wRgy89Xl8ln6QuF6BpgUkTiUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTMnBkhmpMcqxpS8g5jQvE3J/96MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODcyZDM4MDEtMThkYS0z
MmVmLTlhYmItOGQwNGVjYzJmOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGFvYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyCs8dkR1+MnlVS+ciiqKCodIgcPHno9zOeQuC1vO/R+rJjkWEG1VPE
e9u+yi199iv37dJ50+i3hUlVsoBUJ6HPTgv4CUzrXxHQ+yb5g4ogLJMtVLxlzcTV
z1XR6wQLIMJ76Kg1KCVCMYdfn16xnPAB+EnXnpACaFEktXdGjI5u/gfxya8EEO4Q
vq5NObMPuxTVr1z6YZSOb27btT5Kcm9QaJgmhOazrqc2oM6i3QheddknYxrXy9IH
GGd4W//WPetHSdrsSKy+t2ms02zBhc5l5+eCupYoWRtsZJrl8lnnCoVM13ReG0K0
+n02L8L3wxs7yKNldRquPByFA3Gz9LU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:26 2025 by rpki-client