Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9667e987-25f7-38a5-a29c-8a30a4a4d4fd.roa
File: 9667e987-25f7-38a5-a29c-8a30a4a4d4fd.roa (raw, json)
Hash identifier: acmyIP5zkGt1NUwH+x5Omiab9s4BCfoHa93RnyBjDLc=
Subject key identifier: 57:B9:AA:8A:CF:63:CE:83:A7:74:3A:43:90:FD:EF:45:37:B4:BE:F0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CA0A0EFE6C47BA4AE9E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9667e987-25f7-38a5-a29c-8a30a4a4d4fd.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 2001:559:309::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:a0:a0:ef:e6:c4:7b:a4:ae:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=a64404b7-6813-405d-b752-cb06c820cdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:56:a0:02:85:df:bb:8e:4b:5c:97:76:82:
dc:cd:d7:e1:4c:70:6c:4e:1e:d0:00:31:5e:d4:86:
e6:82:80:82:ab:fb:ee:1c:c0:e1:f6:8a:2b:8a:ba:
27:1e:6b:94:c4:52:82:b2:ed:bc:f9:06:f9:b1:0a:
79:61:9d:b4:7b:f2:18:3b:ee:c0:22:66:80:23:7b:
e8:80:72:1a:21:5e:4b:8a:f1:79:e1:81:c1:2b:5b:
6c:46:69:6b:46:95:98:c2:23:14:ab:fd:bf:5c:69:
32:e0:57:fc:dd:29:c7:21:61:2b:2b:11:59:4d:a1:
03:d5:08:8a:56:1e:7c:6c:b0:98:eb:41:4c:a6:01:
51:22:21:ae:84:9d:08:2a:57:2c:f7:34:d2:b0:d6:
8e:ea:19:8b:1b:93:15:e3:67:7f:2d:39:68:fa:55:
11:63:c4:14:2a:72:a1:5b:88:ee:a1:4b:99:dd:07:
1a:15:76:25:a7:10:84:e4:26:dc:83:9a:eb:3f:f0:
d9:b8:37:18:6a:ce:d8:9c:1f:da:75:5f:bb:45:39:
a3:d3:7d:ab:9b:11:6b:4b:7c:cd:d4:37:62:94:68:
13:f2:c1:4a:76:8b:e4:ce:9a:bf:19:d3:50:eb:27:
c3:f2:d1:f7:62:d4:fe:04:5a:d7:94:fc:01:21:85:
48:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B9:AA:8A:CF:63:CE:83:A7:74:3A:43:90:FD:EF:45:37:B4:BE:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9667e987-25f7-38a5-a29c-8a30a4a4d4fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:309::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:1e:78:53:d0:12:4e:81:5a:db:cf:55:67:1b:06:a6:01:d3:
d1:fc:85:58:37:54:7a:51:95:1a:bc:0e:6f:27:6b:34:71:7c:
1c:5f:ee:6f:c1:64:49:b8:11:c7:60:b6:33:4b:7d:53:d8:0f:
81:2f:13:b0:b5:ac:8f:4c:21:f6:4f:d3:86:d0:9e:27:53:4e:
98:03:26:df:74:b1:3a:4e:21:cc:d9:21:f5:76:ca:1a:75:0c:
d8:4c:a8:d6:f4:c6:95:36:33:1c:d4:8f:9f:9f:07:c1:ef:2f:
65:a0:05:14:c7:25:38:a3:5c:0a:30:fd:9d:6b:11:0c:50:d7:
cb:86:f7:ad:13:bf:71:b3:19:ed:46:78:5e:49:0e:ab:94:d3:
50:9a:d1:e5:63:9b:4e:90:de:a5:0d:64:61:f2:1e:83:dd:ff:
ed:cf:ea:c6:aa:28:a0:84:38:ee:40:93:b3:7a:a3:42:e5:6c:
48:62:7d:8e:46:b1:f9:08:a7:77:46:46:81:f9:4b:1b:80:6c:
3d:63:f5:68:63:dd:55:e4:b4:a3:a5:ff:fa:55:01:00:2c:e5:
24:5e:f7:02:0c:c8:89:4a:04:6c:b7:33:25:3c:de:fd:95:4b:
2b:39:51:06:ea:62:63:9a:3f:f8:b9:ec:99:c0:8b:5e:99:78:
c2:02:11:74
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebKCg7+bEe6SunkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
YTY0NDA0YjctNjgxMy00MDVkLWI3NTItY2IwNmM4MjBjZGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFpWoAKF37uOS1yXdoLczdfhTHBsTh7QADFe
1IbmgoCCq/vuHMDh9oorironHmuUxFKCsu28+Qb5sQp5YZ20e/IYO+7AImaAI3vo
gHIaIV5LivF54YHBK1tsRmlrRpWYwiMUq/2/XGky4Ff83SnHIWErKxFZTaED1QiK
Vh58bLCY60FMpgFRIiGuhJ0IKlcs9zTSsNaO6hmLG5MV42d/LTlo+lURY8QUKnKh
W4juoUuZ3QcaFXYlpxCE5Cbcg5rrP/DZuDcYas7YnB/adV+7RTmj032rmxFrS3zN
1DdilGgT8sFKdovkzpq/GdNQ6yfD8tH3YtT+BFrXlPwBIYVIgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFe5qorPY86Dp3Q6Q5D970U3tL7wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTY2N2U5ODctMjVmNy0z
OGE1LWEyOWMtOGEzMGE0YTRkNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQMJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALweeFPQEk6BWtvPVWcbBqYB09H8hVg3VHpRlRq8Dm8nazRxfBxf
7m/BZEm4EcdgtjNLfVPYD4EvE7C1rI9MIfZP04bQnidTTpgDJt90sTpOIczZIfV2
yhp1DNhMqNb0xpU2MxzUj5+fB8HvL2WgBRTHJTijXAow/Z1rEQxQ18uG960Tv3Gz
Ge1GeF5JDquU01Ca0eVjm06Q3qUNZGHyHoPd/+3P6saqKKCEOO5Ak7N6o0LlbEhi
fY5GsfkIp3dGRoH5SxuAbD1j9Whj3VXktKOl//pVAQAs5SRe9wIMyIlKBGy3MyU8
3v2VSys5UQbqYmOaP/i57JnAi16ZeMICEXQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:53:30 2025 by rpki-client