Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af3301e-2087-3865-8e61-5daa25aa6117.roa
File: 9af3301e-2087-3865-8e61-5daa25aa6117.roa (raw, json)
Hash identifier: bV3UbB3jl6H7rlhjGITCBaw1HmMxM4IXcVzM418V/rY=
Subject key identifier: 1B:2F:E1:60:E4:D5:7A:33:FB:25:FC:0C:0E:30:F2:73:5B:8D:E0:61
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11DC5CD07EA003750BDD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af3301e-2087-3865-8e61-5daa25aa6117.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 71.199.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:dc:5c:d0:7e:a0:03:75:0b:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e609a7e4-b6bc-48d1-aaef-2bd6b6648009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:c6:0d:17:68:e4:b3:a4:45:b6:47:9e:0a:
10:ff:1b:79:4b:b1:06:7b:f6:1c:62:31:2d:94:b7:
c7:d1:a3:2b:6f:b1:46:1d:0f:a4:74:c2:1f:3f:3e:
71:72:e9:a0:73:23:b1:1f:2f:eb:f6:3e:c8:9b:5c:
ae:c6:d3:8a:34:85:48:75:cc:45:1b:53:64:c3:76:
e4:e6:25:43:55:f5:9e:b3:7b:27:5c:77:72:62:0f:
87:b2:ac:3e:75:b9:ea:be:bc:3d:a1:78:2d:4c:67:
9e:53:de:25:1b:65:d8:dd:36:de:26:29:b3:8d:4d:
85:1e:1e:f2:3e:a9:32:06:f1:ad:e9:09:66:09:fd:
a3:3c:07:fe:07:7d:46:3f:c2:dd:6e:4a:4c:51:63:
06:52:13:c1:7c:f6:cd:0f:41:54:15:7b:d1:6a:9a:
84:d4:ee:06:e1:ea:f1:82:1e:c5:8f:9f:65:ec:5a:
f0:9a:09:17:fc:ea:a5:cb:03:da:6b:74:ab:7d:47:
ab:79:87:31:0a:2b:22:67:de:5a:55:49:ce:d2:ed:
c7:97:1c:f4:29:0c:ec:5a:79:88:b3:c2:76:5a:4d:
c6:11:40:44:4a:17:8b:f3:55:79:7d:f1:69:86:f8:
c9:38:f3:26:bc:d6:f7:2b:33:e6:c1:88:7b:43:63:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2F:E1:60:E4:D5:7A:33:FB:25:FC:0C:0E:30:F2:73:5B:8D:E0:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9af3301e-2087-3865-8e61-5daa25aa6117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.199.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:d2:08:68:31:6a:bf:e6:18:67:57:58:ee:a6:14:04:15:23:
c8:97:2c:8f:be:81:0e:02:82:1d:50:93:98:5d:d4:09:e3:80:
56:d7:f4:79:60:a8:7f:c3:85:77:72:a1:d4:e2:26:3d:92:1f:
e9:7d:a1:d5:e5:38:43:37:5f:ad:94:0c:86:88:27:e8:38:cb:
67:ee:48:96:a9:54:41:ee:7a:fd:da:19:0c:2c:9e:a0:5e:76:
46:8e:a7:d2:0c:1b:e0:65:e0:33:25:ea:16:89:62:16:9b:10:
3b:c1:19:1e:74:ad:e0:61:d2:46:0d:11:7f:92:ff:c8:44:c7:
9a:03:e4:54:2e:82:77:8a:9b:b2:7e:a8:16:66:2c:42:6e:65:
d5:f1:22:88:16:d3:bb:73:89:d2:62:5a:f0:6a:15:7e:ee:c2:
50:8f:35:6c:d8:b5:5a:be:67:93:fa:10:da:19:8d:e0:f1:d1:
24:bc:db:91:26:25:9f:26:04:1d:6b:fb:aa:a4:bb:3c:46:70:
ab:b4:de:45:91:6e:18:4a:80:d2:15:69:0e:06:1b:bc:2e:c3:
35:78:5c:0a:54:bc:db:3c:1e:82:0e:b2:f6:20:31:17:de:e1:
cc:fb:fc:5d:24:21:1b:1b:80:99:33:84:e0:32:d0:0f:36:4f:
d2:07:04:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEdxc0H6gA3UL3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZTYwOWE3ZTQtYjZiYy00OGQxLWFhZWYtMmJkNmI2NjQ4MDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXrGDRdo5LOkRbZHngoQ/xt5S7EGe/YcYjEt
lLfH0aMrb7FGHQ+kdMIfPz5xcumgcyOxHy/r9j7Im1yuxtOKNIVIdcxFG1Nkw3bk
5iVDVfWes3snXHdyYg+Hsqw+dbnqvrw9oXgtTGeeU94lG2XY3TbeJimzjU2FHh7y
PqkyBvGt6QlmCf2jPAf+B31GP8LdbkpMUWMGUhPBfPbND0FUFXvRapqE1O4G4erx
gh7Fj59l7FrwmgkX/OqlywPaa3SrfUereYcxCisiZ95aVUnO0u3Hlxz0KQzsWnmI
s8J2Wk3GEUBESheL81V5ffFphvjJOPMmvNb3KzPmwYh7Q2MtuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsv4WDk1Xoz+yX8DA4w8nNbjeBhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWFmMzMwMWUtMjA4Ny0z
ODY1LThlNjEtNWRhYTI1YWE2MTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8csMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7SCGgxar/mGGdXWO6mFAQVI8iXLI++gQ4Cgh1Qk5hd1AnjgFbX9Hlg
qH/DhXdyodTiJj2SH+l9odXlOEM3X62UDIaIJ+g4y2fuSJapVEHuev3aGQwsnqBe
dkaOp9IMG+Bl4DMl6haJYhabEDvBGR50reBh0kYNEX+S/8hEx5oD5FQugneKm7J+
qBZmLEJuZdXxIogW07tzidJiWvBqFX7uwlCPNWzYtVq+Z5P6ENoZjeDx0SS825Em
JZ8mBB1r+6qkuzxGcKu03kWRbhhKgNIVaQ4GG7wuwzV4XApUvNs8HoIOsvYgMRfe
4cz7/F0kIRsbgJkzhOAy0A82T9IHBME=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:23 2025 by rpki-client