Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9db13ff2-e2ce-38b1-86b9-10e4c7c10dc0.roa
File: 9db13ff2-e2ce-38b1-86b9-10e4c7c10dc0.roa (raw, json)
Hash identifier: KBiNJ04X8EuRZ7i+Rl9r6bwpAM6pvFeJmNrVRNNV2Sc=
Subject key identifier: 1E:B0:0E:8E:0D:EA:6D:50:EB:86:13:3C:B6:22:C6:8D:10:BF:E0:69
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BCBFDE24A5A822888DB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9db13ff2-e2ce-38b1-86b9-10e4c7c10dc0.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7725
IP address blocks: 2001:559:241::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:cb:fd:e2:4a:5a:82:28:88:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=329d1646-2883-4e38-8391-9bd172f51e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:3c:f5:fb:71:81:fc:49:2f:4f:6a:ee:8e:
d6:62:d9:ce:ad:3d:b8:a8:2b:93:1c:57:e2:25:70:
fd:5d:94:06:56:78:7d:c3:94:96:57:ff:24:bd:7d:
92:44:20:cd:93:83:88:88:b8:65:93:0c:9c:ac:d4:
88:30:25:25:de:b9:41:f9:80:4d:00:54:70:e8:d4:
bb:f9:31:17:17:31:43:9b:28:6b:86:6c:65:7c:31:
17:44:e3:7f:17:ee:73:ff:b5:77:d4:9c:e0:42:a8:
b4:97:40:c7:d4:6b:d4:46:0f:35:e7:1d:82:01:36:
a9:60:40:6f:53:0e:a2:7c:f9:f4:1e:d6:88:81:55:
30:b9:ca:d9:44:a9:14:bb:b1:ea:b0:80:dd:61:0e:
b6:e8:ed:7f:eb:72:e2:be:89:0d:37:a8:7e:44:bc:
e2:5d:44:20:df:1e:17:33:30:25:78:a0:d0:e5:b0:
86:27:2a:f5:f0:2e:cd:09:e0:30:68:be:96:42:24:
5d:ac:ce:fb:b3:37:83:35:20:51:2c:59:56:3e:d7:
dd:4a:29:a5:a7:53:81:00:38:30:6a:25:5b:cf:5a:
22:57:82:92:bb:5b:8a:ef:a5:44:c9:e5:56:41:70:
8b:a5:39:33:bf:cc:38:d5:d0:f7:11:45:bf:5b:c8:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B0:0E:8E:0D:EA:6D:50:EB:86:13:3C:B6:22:C6:8D:10:BF:E0:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9db13ff2-e2ce-38b1-86b9-10e4c7c10dc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:241::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:ca:f2:ae:f9:4c:8f:e7:0a:8a:07:77:2a:b1:e3:31:b0:80:
36:2a:d1:4b:7d:0b:ee:bc:f9:02:d3:ec:94:ef:27:48:42:66:
29:25:8d:74:1f:2f:33:d5:da:b9:02:a1:72:2c:31:32:cf:bd:
a0:01:e7:39:c0:09:61:72:12:0a:2c:93:34:b9:68:6d:eb:43:
d6:15:38:10:6a:54:e9:65:95:ee:6f:67:cc:dd:ec:b4:5b:46:
8c:66:00:f5:c4:31:c5:c7:83:02:56:d8:e8:c8:79:4c:f2:88:
14:a7:b4:98:92:0b:fc:28:06:da:95:db:e2:aa:f1:8d:f5:9a:
d9:e9:7a:53:05:53:b4:61:3c:3d:f4:18:bc:82:a7:7d:c0:99:
5d:a7:7b:a6:48:aa:b0:2b:cc:67:32:ce:05:0c:76:81:2b:dc:
e2:57:43:15:9d:af:dc:b8:de:d4:dc:da:6e:9e:f7:0c:01:23:
03:4f:a4:39:d0:67:ec:99:99:df:29:12:65:b3:cd:39:3d:7f:
53:fa:a6:58:a1:15:6e:44:71:91:86:d8:86:50:ff:0d:ce:6e:
45:06:eb:8f:8b:36:86:bd:74:85:f7:4f:0b:d9:72:c0:d5:3d:
af:48:5f:65:41:2e:a6:4b:d5:59:2a:77:ed:da:fd:e3:5e:b4:
e3:89:81:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea8v94kpagiiI2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MzI5ZDE2NDYtMjg4My00ZTM4LTgzOTEtOWJkMTcyZjUxZTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixU89ftxgfxJL09q7o7WYtnOrT24qCuTHFfi
JXD9XZQGVnh9w5SWV/8kvX2SRCDNk4OIiLhlkwycrNSIMCUl3rlB+YBNAFRw6NS7
+TEXFzFDmyhrhmxlfDEXRON/F+5z/7V31JzgQqi0l0DH1GvURg815x2CATapYEBv
Uw6ifPn0HtaIgVUwucrZRKkUu7HqsIDdYQ626O1/63LivokNN6h+RLziXUQg3x4X
MzAleKDQ5bCGJyr18C7NCeAwaL6WQiRdrM77szeDNSBRLFlWPtfdSimlp1OBADgw
aiVbz1oiV4KSu1uK76VEyeVWQXCLpTkzv8w41dD3EUW/W8gwJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB6wDo4N6m1Q64YTPLYixo0Qv+BpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWRiMTNmZjItZTJjZS0z
OGIxLTg2YjktMTBlNGM3YzEwZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQJB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI3K8q75TI/nCooHdyqx4zGwgDYq0Ut9C+68+QLT7JTvJ0hCZikl
jXQfLzPV2rkCoXIsMTLPvaAB5znACWFyEgoskzS5aG3rQ9YVOBBqVOllle5vZ8zd
7LRbRoxmAPXEMcXHgwJW2OjIeUzyiBSntJiSC/woBtqV2+Kq8Y31mtnpelMFU7Rh
PD30GLyCp33AmV2ne6ZIqrArzGcyzgUMdoEr3OJXQxWdr9y43tTc2m6e9wwBIwNP
pDnQZ+yZmd8pEmWzzTk9f1P6plihFW5EcZGG2IZQ/w3ObkUG64+LNoa9dIX3TwvZ
csDVPa9IX2VBLqZL1Vkqd+3a/eNetOOJgfc=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:48:30 2025 by rpki-client