Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af52eeaf-633d-3c7e-bf00-6a614ac44b61.roa
File: af52eeaf-633d-3c7e-bf00-6a614ac44b61.roa (raw, json)
Hash identifier: Ityn1pK9JoNjl9+H8hvxEtTVVgqcPqRNCB9EieHKUvc=
Subject key identifier: 1E:8A:EA:D8:11:B8:D7:3A:68:D2:AB:B5:02:1A:C3:C3:04:65:1C:04
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AC847A00BF576AC122280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af52eeaf-633d-3c7e-bf00-6a614ac44b61.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 24.34.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:c8:47:a0:0b:f5:76:ac:12:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4a663f1b-e02a-4b72-a6fb-d99a0bfe1979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:87:bc:53:5f:a7:fb:52:37:e4:68:bf:d6:
7d:11:bd:c9:00:de:de:b4:c8:22:64:8f:41:75:7e:
3d:80:ac:35:53:c8:7a:64:02:95:51:9d:3a:49:31:
b5:3a:99:33:7c:da:af:72:65:9f:23:8f:bb:18:f3:
91:49:80:e7:59:86:31:3a:28:83:12:0c:21:06:17:
60:62:c3:69:b0:93:5a:5e:11:29:c5:87:78:3a:6a:
3f:9c:2c:62:6f:34:d8:41:cb:64:7c:c2:53:ea:4a:
f6:12:0a:f8:2b:13:9e:e8:b8:20:73:cb:73:01:e3:
f9:0d:87:b5:b5:53:b2:c3:ad:97:96:3c:24:34:91:
cb:ab:ea:71:fa:69:0c:5c:fe:35:16:4e:41:be:95:
71:11:28:e2:aa:79:2a:6e:01:e0:22:09:26:8c:09:
9a:9e:3b:af:bb:0d:d5:d8:77:89:e7:27:02:86:4a:
dd:b6:31:4f:b1:e7:6d:e0:c3:cc:cb:90:8c:98:ba:
1c:96:86:13:83:65:23:3c:ae:d6:03:c4:a2:98:e7:
46:5d:54:0c:d5:7d:69:88:0f:03:64:70:01:b1:7b:
28:b9:08:be:77:e7:67:35:13:d8:38:98:63:ce:be:
8a:df:d3:92:a1:6d:a0:5a:cc:07:3b:b2:8d:79:6d:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8A:EA:D8:11:B8:D7:3A:68:D2:AB:B5:02:1A:C3:C3:04:65:1C:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af52eeaf-633d-3c7e-bf00-6a614ac44b61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.34.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:41:b2:9f:61:34:ea:59:25:d4:58:50:28:cb:33:4d:5f:99:
24:28:0a:5a:4c:4e:b2:67:3e:63:0a:ca:93:1b:6e:5b:11:84:
8e:b6:8c:bd:da:7e:44:c2:53:0a:ec:cb:46:11:2c:14:22:8d:
92:77:08:56:ec:ed:cc:a8:4f:6c:eb:08:b3:88:4e:da:3a:98:
52:10:5c:76:78:5d:e2:a9:d8:0f:b4:1b:0b:e6:15:df:34:c4:
cb:53:e0:29:a6:a6:31:04:bd:d5:cb:b9:da:d6:86:91:9c:d3:
04:64:b4:97:b0:15:b8:ca:d7:c1:4e:ce:d5:6b:76:7c:b7:34:
97:6e:bd:71:b9:d0:96:38:ac:6b:da:4c:66:a7:36:dc:24:e5:
1a:d4:73:72:56:f6:26:77:bf:ee:61:0b:1f:77:5d:66:94:3f:
16:cd:e1:e9:9e:bc:f7:93:dd:4a:3e:f1:02:e1:41:af:d0:a3:
0b:7b:74:6d:1d:f3:c2:a4:ea:0a:94:73:6d:e9:c9:cb:11:2d:
4f:d3:60:15:89:71:d2:3a:c0:ea:79:71:e1:46:e9:75:f0:38:
f2:bf:57:83:a3:cf:d6:38:60:2e:eb:f2:3e:f2:ac:39:bc:23:
97:ba:77:90:50:53:d2:00:38:2d:6b:54:7f:4f:c7:6e:60:1f:
1c:6f:42:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOshHoAv1dqwSIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NGE2NjNmMWItZTAyYS00YjcyLWE2ZmItZDk5YTBiZmUxOTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwGHvFNfp/tSN+Rov9Z9Eb3JAN7etMgiZI9B
dX49gKw1U8h6ZAKVUZ06STG1OpkzfNqvcmWfI4+7GPORSYDnWYYxOiiDEgwhBhdg
YsNpsJNaXhEpxYd4Omo/nCxibzTYQctkfMJT6kr2Egr4KxOe6Lggc8tzAeP5DYe1
tVOyw62XljwkNJHLq+px+mkMXP41Fk5BvpVxESjiqnkqbgHgIgkmjAmanjuvuw3V
2HeJ5ycChkrdtjFPsedt4MPMy5CMmLocloYTg2UjPK7WA8SimOdGXVQM1X1piA8D
ZHABsXsouQi+d+dnNRPYOJhjzr6K39OSoW2gWswHO7KNeW3sQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6K6tgRuNc6aNKrtQIaw8MEZRwEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY1MmVlYWYtNjMzZC0z
YzdlLWJmMDAtNmE2MTRhYzQ0YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGCI6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtBsp9hNOpZJdRYUCjLM01fmSQoClpMTrJnPmMKypMbblsRhI62jL3a
fkTCUwrsy0YRLBQijZJ3CFbs7cyoT2zrCLOITto6mFIQXHZ4XeKp2A+0GwvmFd80
xMtT4CmmpjEEvdXLudrWhpGc0wRktJewFbjK18FOztVrdny3NJduvXG50JY4rGva
TGanNtwk5RrUc3JW9iZ3v+5hCx93XWaUPxbN4emevPeT3Uo+8QLhQa/Qowt7dG0d
88Kk6gqUc23pycsRLU/TYBWJcdI6wOp5ceFG6XXwOPK/V4Ojz9Y4YC7r8j7yrDm8
I5e6d5BQU9IAOC1rVH9Px25gHxxvQg8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:19 2025 by rpki-client