Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c6f4e9-ac31-3985-8fd1-6c98005ae8f0.roa
File: a7c6f4e9-ac31-3985-8fd1-6c98005ae8f0.roa (raw, json)
Hash identifier: s62eVgtL6WBDU3L7Jn0NPr5+fnWryKeSzZSsp2k95sM=
Subject key identifier: 46:99:43:63:FB:58:56:05:9F:74:9C:EF:67:AF:7D:0A:CD:62:6E:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ECC60624E070A780A5780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c6f4e9-ac31-3985-8fd1-6c98005ae8f0.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.127.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:cc:60:62:4e:07:0a:78:0a:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2be08f2e-4191-4c14-b8de-5eb1398e81ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9d:db:ab:9d:95:c2:31:e1:2d:a8:36:d8:9e:
a5:93:5e:5c:d7:6c:2a:c4:a1:6b:0f:de:94:00:12:
e5:99:df:4f:a4:4f:99:8d:0a:29:91:91:35:dd:5a:
23:bf:7b:1f:2f:a1:64:04:d3:4e:89:67:b5:fe:21:
f0:2d:86:7b:a2:97:41:34:60:5f:d1:9e:8c:da:74:
38:2f:9a:12:28:9a:7c:97:c0:3a:29:d4:45:21:84:
89:90:50:8c:59:68:26:41:02:3f:81:1e:19:22:e9:
8c:4d:0d:09:05:aa:96:c1:1a:a3:f2:7f:ea:56:ad:
c7:d5:d4:8b:4e:e9:55:8b:70:61:1a:34:f2:af:ac:
b9:db:47:eb:ba:d0:f2:8e:01:ec:49:2a:09:ed:73:
29:87:3f:02:d2:03:0c:a4:20:59:d1:1a:36:a2:0b:
c1:db:25:d7:54:29:74:b4:a4:d6:71:fb:b5:68:f1:
99:e8:cc:49:0f:e1:67:7e:22:e9:95:33:99:4d:77:
e1:e1:78:32:6f:6b:c7:2a:95:2e:1e:cd:7c:38:47:
c6:2a:1a:06:5c:ab:61:69:ba:21:ad:2e:09:5e:cd:
3f:6d:62:9a:ee:a2:a8:fb:07:5e:9a:87:0e:b2:cd:
16:a6:6f:fc:23:3d:b8:e7:ab:2f:0b:21:20:b4:65:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:99:43:63:FB:58:56:05:9F:74:9C:EF:67:AF:7D:0A:CD:62:6E:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c6f4e9-ac31-3985-8fd1-6c98005ae8f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.127.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:ee:6e:42:60:7d:78:7c:fb:65:b8:1c:d3:a4:7a:98:da:15:
05:ac:6d:d3:a7:ff:cf:ea:76:7c:18:12:cb:ad:cd:6f:b7:a3:
df:98:48:f7:ba:43:a6:ba:3f:58:43:49:10:bf:f0:86:5b:46:
d5:28:32:16:f1:f4:c7:11:47:75:70:c6:f8:b4:ed:cc:4e:56:
51:7b:b0:39:2d:8c:f6:10:30:c2:d3:ed:11:30:c9:9f:fe:28:
75:0d:1b:8b:36:45:3d:3b:37:a3:fa:fb:90:cc:5e:c5:4d:f0:
92:30:78:e4:84:e8:00:2c:78:6b:58:0b:fe:c1:88:a1:52:d4:
f6:55:de:e2:8b:3b:07:92:f5:fe:09:8c:fc:74:78:4e:e3:be:
d5:4a:a3:08:0c:17:59:ff:cb:2e:11:c0:12:3c:94:8a:4a:46:
85:43:ea:15:57:c5:a7:10:6a:cf:3b:da:b4:27:70:ae:aa:aa:
88:62:b6:fa:da:4c:cb:b9:25:48:4b:b9:c1:cb:c8:ba:14:7d:
c8:e2:dd:4c:37:95:32:f1:c7:93:8f:d6:d2:d1:5a:ca:99:a9:
3c:a5:d2:00:e6:0f:ac:67:aa:25:66:67:58:e7:62:48:80:0d:
ba:d3:11:50:b2:db:78:7d:d0:88:4d:86:15:20:1a:1b:c3:85:
0c:2a:c2:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPsxgYk4HCngKV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MmJlMDhmMmUtNDE5MS00YzE0LWI4ZGUtNWViMTM5OGU4MWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp3bq52VwjHhLag22J6lk15c12wqxKFrD96U
ABLlmd9PpE+ZjQopkZE13Vojv3sfL6FkBNNOiWe1/iHwLYZ7opdBNGBf0Z6M2nQ4
L5oSKJp8l8A6KdRFIYSJkFCMWWgmQQI/gR4ZIumMTQ0JBaqWwRqj8n/qVq3H1dSL
TulVi3BhGjTyr6y520frutDyjgHsSSoJ7XMphz8C0gMMpCBZ0Ro2ogvB2yXXVCl0
tKTWcfu1aPGZ6MxJD+FnfiLplTOZTXfh4Xgyb2vHKpUuHs18OEfGKhoGXKthaboh
rS4JXs0/bWKa7qKo+wdemocOss0Wpm/8Iz2456svCyEgtGXzdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEaZQ2P7WFYFn3Sc72evfQrNYm56MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdjNmY0ZTktYWMzMS0z
OTg1LThmZDEtNmM5ODAwNWFlOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTH+YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPubkJgfXh8+2W4HNOkepjaFQWsbdOn/8/qdnwYEsutzW+3o9+YSPe6
Q6a6P1hDSRC/8IZbRtUoMhbx9McRR3Vwxvi07cxOVlF7sDktjPYQMMLT7REwyZ/+
KHUNG4s2RT07N6P6+5DMXsVN8JIweOSE6AAseGtYC/7BiKFS1PZV3uKLOweS9f4J
jPx0eE7jvtVKowgMF1n/yy4RwBI8lIpKRoVD6hVXxacQas872rQncK6qqohitvra
TMu5JUhLucHLyLoUfcji3Uw3lTLxx5OP1tLRWsqZqTyl0gDmD6xnqiVmZ1jnYkiA
DbrTEVCy23h90IhNhhUgGhvDhQwqwlc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:58:39 2025 by rpki-client