Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f3fcc0-0827-3add-a792-af7f9eb18689.roa
File: a0f3fcc0-0827-3add-a792-af7f9eb18689.roa (raw, json)
Hash identifier: 8WOA3V9ZCQwlrsHy4ModoW0qkeob6CyXvXSUiqSiG+Y=
Subject key identifier: 21:A7:E0:D3:C1:C9:A5:4F:34:42:8A:6A:A7:36:16:EC:C3:8C:3D:B2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C3D872848F3D287EFD600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f3fcc0-0827-3add-a792-af7f9eb18689.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 2001:559:c3cc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:3d:87:28:48:f3:d2:87:ef:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=592be86b-1646-4383-9b37-637795db4fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:fa:aa:a1:e1:58:f4:63:44:56:30:f6:00:
c6:a3:f3:66:65:fe:90:6c:fa:82:a8:4b:f3:4b:4d:
bb:45:4b:ea:53:7d:6f:fa:28:17:de:82:d0:15:a3:
fb:f8:a5:70:d9:7b:8f:5b:75:19:4f:91:ea:2b:09:
83:69:e1:ab:5c:79:33:fd:f2:43:cb:ba:11:1e:3e:
e0:58:e4:b1:3f:b8:2d:fe:1a:36:40:30:ac:07:3f:
5f:fd:88:81:19:64:14:78:3a:95:a0:64:60:89:25:
06:69:9a:71:24:73:72:bd:a9:15:c3:15:06:16:4a:
34:54:f1:87:8f:c1:c9:ae:5b:ad:e6:3a:3b:e4:19:
72:90:be:cb:0c:72:e4:7b:c3:e2:5d:c1:4a:d6:53:
c8:1a:66:c2:30:fa:c7:5f:77:c7:5b:f7:74:08:60:
62:a3:0f:23:49:96:b2:84:76:94:e4:12:eb:3a:48:
c7:17:1e:f6:0f:5d:cc:f8:45:fb:e0:13:0d:9d:88:
7d:e8:aa:ab:d3:5d:49:88:9f:67:81:3e:37:41:3e:
c5:8b:80:05:d3:8b:5a:42:2d:9e:ba:ac:28:c4:74:
c2:72:38:4a:e1:f3:79:9f:7c:85:19:1a:f0:6d:82:
cd:d0:af:be:60:fd:9e:0f:89:b7:1e:64:46:b0:c5:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:E0:D3:C1:C9:A5:4F:34:42:8A:6A:A7:36:16:EC:C3:8C:3D:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f3fcc0-0827-3add-a792-af7f9eb18689.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c3cc::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:4b:3a:4d:1e:58:b7:07:02:ab:8b:1e:d9:47:d1:b9:2f:2d:
7a:a9:79:07:df:d7:28:08:fe:39:6a:7f:d1:16:71:5a:37:9a:
12:34:ba:b6:b1:88:17:84:30:8b:8c:69:f6:31:10:ba:78:6a:
22:fa:7d:ad:68:fb:27:bb:9d:e9:e8:56:f1:75:03:9d:0c:f4:
38:64:1c:a0:0f:37:0a:ea:21:4f:55:ee:79:06:5e:f4:21:d4:
12:82:76:bb:56:fb:47:cf:f5:08:77:9e:64:19:f7:77:10:89:
e1:44:b1:89:2b:c3:b0:2a:3b:ff:68:c1:03:e3:c2:ea:e0:b1:
8c:44:89:8f:ee:6a:b8:74:6d:e7:a4:d8:68:55:2b:e8:8b:e0:
5c:d3:bd:f9:32:03:24:cd:64:87:55:86:c3:17:a8:66:29:31:
a5:97:b5:35:c9:13:22:09:0e:3b:20:6c:84:bd:77:e7:04:d8:
d3:57:1f:73:f9:92:e1:78:b8:c7:0f:5a:b7:5b:8e:c0:a0:5a:
3c:51:2c:20:02:7a:6c:0a:4a:fe:39:33:83:01:38:39:c7:e7:
cc:83:f5:89:4d:ea:aa:a1:72:26:49:78:a6:f0:1b:a0:3a:6b:
59:fa:68:1d:b3:3e:6f:57:71:67:57:52:fd:2d:cb:b5:5f:be:
3e:37:ea:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebD2HKEjz0ofv1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NTkyYmU4NmItMTY0Ni00MzgzLTliMzctNjM3Nzk1ZGI0ZmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje/6qqHhWPRjRFYw9gDGo/NmZf6QbPqCqEvz
S027RUvqU31v+igX3oLQFaP7+KVw2XuPW3UZT5HqKwmDaeGrXHkz/fJDy7oRHj7g
WOSxP7gt/ho2QDCsBz9f/YiBGWQUeDqVoGRgiSUGaZpxJHNyvakVwxUGFko0VPGH
j8HJrlut5jo75BlykL7LDHLke8PiXcFK1lPIGmbCMPrHX3fHW/d0CGBiow8jSZay
hHaU5BLrOkjHFx72D13M+EX74BMNnYh96Kqr011JiJ9ngT43QT7Fi4AF04taQi2e
uqwoxHTCcjhK4fN5n3yFGRrwbYLN0K++YP2eD4m3HmRGsMVopQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCGn4NPByaVPNEKKaqc2FuzDjD2yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTBmM2ZjYzAtMDgyNy0z
YWRkLWE3OTItYWY3ZjllYjE4Njg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcPM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEVLOk0eWLcHAquLHtlH0bkvLXqpeQff1ygI/jlqf9EWcVo3mhI0
uraxiBeEMIuMafYxELp4aiL6fa1o+ye7nenoVvF1A50M9DhkHKAPNwrqIU9V7nkG
XvQh1BKCdrtW+0fP9Qh3nmQZ93cQieFEsYkrw7AqO/9owQPjwurgsYxEiY/uarh0
beek2GhVK+iL4FzTvfkyAyTNZIdVhsMXqGYpMaWXtTXJEyIJDjsgbIS9d+cE2NNX
H3P5kuF4uMcPWrdbjsCgWjxRLCACemwKSv45M4MBODnH58yD9YlN6qqhciZJeKbw
G6A6a1n6aB2zPm9XcWdXUv0ty7Vfvj436rI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:59 2025 by rpki-client