Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1026100-d3a6-31bd-8efc-dccc7be264a9.roa
File: a1026100-d3a6-31bd-8efc-dccc7be264a9.roa (raw, json)
Hash identifier: JR932erwr4utjxp+004Rbu9ub3vZoZocbXu2/ob8XGA=
Subject key identifier: 54:8F:77:30:93:AA:60:10:32:02:6B:11:7F:8E:17:0B:1F:8D:D9:BA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1339C6C253BC2FA84C4A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1026100-d3a6-31bd-8efc-dccc7be264a9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.130.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:39:c6:c2:53:bc:2f:a8:4c:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=737c1e91-5c6f-4b28-ad0a-478e3688e2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:fc:2d:fb:9e:c6:6e:01:a8:02:10:8a:9e:
96:ad:9c:15:c8:bd:06:d5:90:0d:0a:f7:8e:72:e4:
e0:81:bc:4d:f8:12:5a:51:36:e5:00:58:d5:13:1c:
2f:ff:00:a7:f8:b2:52:95:e5:cf:64:83:9f:94:35:
aa:9b:7a:9a:2e:ab:13:0d:b8:cf:85:f3:70:da:b2:
0c:c9:77:5e:f2:f5:c3:34:15:bb:a1:58:fb:d6:a7:
4c:38:16:a4:b8:9b:49:ff:f1:5a:eb:17:3a:93:40:
06:64:1d:34:2f:f6:ac:9d:90:bb:6a:f6:9b:78:3c:
14:cb:1a:66:7b:c6:44:ce:1d:15:6b:08:3d:ed:5a:
cb:f6:f2:bb:77:13:21:74:14:99:58:67:79:f9:15:
c2:18:a9:fa:6a:b6:78:ed:fe:c0:77:1d:e5:f3:bb:
d6:4b:1f:34:28:e8:b7:c8:64:fa:79:c9:5e:c1:27:
05:43:8c:8e:46:9a:5c:a9:22:e0:93:e2:d0:4c:de:
28:09:c5:f6:28:cb:88:64:6c:da:15:64:a7:cd:b1:
16:0b:ab:58:e7:1b:87:75:18:99:fe:10:b2:cd:44:
47:b7:c6:19:f8:8d:ef:c9:c3:72:07:54:82:df:cc:
5b:ed:a1:92:a4:ec:75:d0:d0:d4:9d:75:c8:36:d7:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:77:30:93:AA:60:10:32:02:6B:11:7F:8E:17:0B:1F:8D:D9:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1026100-d3a6-31bd-8efc-dccc7be264a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.130.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:6f:61:07:aa:34:25:a4:29:a4:96:eb:f9:55:d9:fa:87:37:
85:63:ea:af:6f:04:5b:1a:89:1a:e4:93:aa:5e:00:cc:70:23:
01:57:17:26:78:a8:c7:f9:1c:46:48:1e:3d:5d:eb:3e:2d:1a:
17:23:f9:54:44:d6:11:41:72:94:e6:88:41:5c:1f:c6:19:1b:
7f:ea:74:8a:63:d1:5f:fb:f8:80:5e:1d:1b:72:f1:63:d1:ac:
15:db:05:a5:75:df:6c:64:54:f4:b8:2f:48:e7:4c:a8:47:8e:
e7:0c:96:88:db:4e:d2:50:58:c4:13:22:ba:b4:4d:52:f7:10:
0d:46:03:ff:3a:94:e7:77:77:d2:82:9f:21:6b:51:95:51:29:
99:cf:da:dc:d9:75:5d:53:d2:ca:66:9c:11:3e:e5:55:5d:7c:
fe:e4:46:b6:03:d1:60:c7:64:c8:ac:c1:67:cb:11:98:10:22:
e1:d9:c0:c5:87:34:12:02:af:21:c6:07:b5:14:32:4e:97:08:
3b:cf:9e:cb:d2:1e:75:b8:58:e1:92:40:39:d8:64:b9:c5:01:
fb:c4:3c:4f:a4:15:fa:79:76:38:21:dc:00:fd:f8:d3:52:d1:
d6:37:ce:a0:d6:4d:ef:78:20:49:13:b4:41:77:33:2d:c1:0d:
f4:c1:5e:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEznGwlO8L6hMSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NzM3YzFlOTEtNWM2Zi00YjI4LWFkMGEtNDc4ZTM2ODhlMmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteL8Lfuexm4BqAIQip6WrZwVyL0G1ZANCveO
cuTggbxN+BJaUTblAFjVExwv/wCn+LJSleXPZIOflDWqm3qaLqsTDbjPhfNw2rIM
yXde8vXDNBW7oVj71qdMOBakuJtJ//Fa6xc6k0AGZB00L/asnZC7avabeDwUyxpm
e8ZEzh0Vawg97VrL9vK7dxMhdBSZWGd5+RXCGKn6arZ47f7Adx3l87vWSx80KOi3
yGT6eclewScFQ4yORppcqSLgk+LQTN4oCcX2KMuIZGzaFWSnzbEWC6tY5xuHdRiZ
/hCyzURHt8YZ+I3vycNyB1SC38xb7aGSpOx10NDUnXXINte2RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSPdzCTqmAQMgJrEX+OFwsfjdm6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTEwMjYxMDAtZDNhNi0z
MWJkLThlZmMtZGNjYzdiZTI2NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGIIoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9vYQeqNCWkKaSW6/lV2fqHN4Vj6q9vBFsaiRrkk6peAMxwIwFXFyZ4
qMf5HEZIHj1d6z4tGhcj+VRE1hFBcpTmiEFcH8YZG3/qdIpj0V/7+IBeHRty8WPR
rBXbBaV132xkVPS4L0jnTKhHjucMlojbTtJQWMQTIrq0TVL3EA1GA/86lOd3d9KC
nyFrUZVRKZnP2tzZdV1T0spmnBE+5VVdfP7kRrYD0WDHZMiswWfLEZgQIuHZwMWH
NBICryHGB7UUMk6XCDvPnsvSHnW4WOGSQDnYZLnFAfvEPE+kFfp5djgh3AD9+NNS
0dY3zqDWTe94IEkTtEF3My3BDfTBXvs=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:11:27 2025 by rpki-client