Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b04a30aa-116c-320e-83ad-3cae1055dd6d.roa
File: b04a30aa-116c-320e-83ad-3cae1055dd6d.roa (raw, json)
Hash identifier: Y+vx/GgmYjCSI6gkuvY0yOy2vHJQhwvqXQRXRLcYZSU=
Subject key identifier: BE:9D:4C:58:A5:B5:9A:B3:D8:39:4C:C0:8C:75:41:22:E3:1C:64:95
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D8344F96AF5D9E4F80500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b04a30aa-116c-320e-83ad-3cae1055dd6d.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33660
IP address blocks: 2001:559:20a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:83:44:f9:6a:f5:d9:e4:f8:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=cbcda36a-5525-4f99-a5f2-f350e1652c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:f9:49:79:9e:df:b3:03:4a:cf:93:d0:99:
60:a5:c0:56:20:b2:5b:fd:6d:ab:51:ce:3e:81:4b:
26:f8:19:18:4b:9f:6d:06:cc:fe:e7:33:dc:3c:c6:
3e:60:a8:f4:fd:36:92:c3:88:53:10:e2:97:61:00:
a4:8a:62:5e:a2:e0:67:6b:98:4b:d0:d5:cb:ca:dc:
f0:3b:33:b5:1d:7b:e0:78:89:c2:9a:64:bb:ce:27:
d8:85:56:a7:2a:71:4a:47:3f:fd:a4:2f:31:41:34:
2a:b0:ce:4a:90:6f:f3:f0:05:df:57:14:3c:35:48:
ee:36:bd:23:c7:be:00:b9:54:0d:ab:cf:03:b0:5d:
9d:10:f0:d7:22:75:d2:b1:1b:52:3b:a7:cb:a7:12:
da:29:d0:dc:a5:e1:90:1f:32:9b:6d:de:63:d2:27:
4e:24:5e:28:65:df:31:aa:a3:50:26:3a:40:76:aa:
a6:4f:95:9c:94:3e:94:98:c2:dd:07:f0:6e:a7:fc:
ef:ab:83:26:84:a4:68:e9:4b:3b:e9:01:f6:44:5c:
d5:37:6e:85:47:f4:99:50:c3:67:3a:ca:f9:09:5f:
25:bb:18:08:7d:31:8a:4c:71:85:2f:f7:96:95:da:
70:5e:09:c4:06:99:76:a7:25:24:a4:34:14:83:e8:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9D:4C:58:A5:B5:9A:B3:D8:39:4C:C0:8C:75:41:22:E3:1C:64:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b04a30aa-116c-320e-83ad-3cae1055dd6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:20a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:64:91:48:9c:99:67:30:18:d4:10:79:24:2c:b0:4e:93:94:
8f:79:8f:ae:e5:95:5d:a5:4f:cb:4f:7a:1c:1a:ba:3e:71:44:
4f:11:ba:b0:e5:b8:7d:3e:4b:00:f7:bf:e1:82:2d:9f:99:13:
ca:a0:0f:4e:bb:07:b4:76:f0:78:13:9a:5a:30:e0:00:0b:78:
01:23:40:41:6b:68:b8:fb:f7:0d:85:75:83:b8:34:73:4f:b1:
78:5d:eb:78:87:16:53:e8:5c:b2:a7:81:43:99:b8:c8:c1:77:
2a:fa:b4:d0:3c:e7:87:45:be:4a:19:c4:67:85:65:68:87:34:
4e:82:d2:7d:56:17:9c:ca:01:32:e9:32:96:84:c2:5d:22:de:
c5:df:94:4f:c8:a8:aa:e2:d4:bf:64:7c:16:56:1c:2a:6f:d4:
4d:7e:d9:67:83:7a:b6:6e:77:78:c3:14:1b:d7:96:29:ba:86:
fe:78:b9:c4:c7:91:6b:4f:96:47:e8:84:3a:04:97:11:2a:c9:
8d:d8:c3:ed:cb:d5:20:54:b4:34:69:32:8b:44:02:3c:f8:bd:
c2:79:8b:2d:27:47:11:00:38:8c:7f:81:6d:70:81:1f:fc:53:
c9:76:6d:09:83:df:6e:f4:54:ba:9d:4a:99:a8:e0:90:0b:79:
11:1a:bb:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebYNE+Wr12eT4BQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
Y2JjZGEzNmEtNTUyNS00Zjk5LWE1ZjItZjM1MGUxNjUyYzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqD5SXme37MDSs+T0JlgpcBWILJb/W2rUc4+
gUsm+BkYS59tBsz+5zPcPMY+YKj0/TaSw4hTEOKXYQCkimJeouBna5hL0NXLytzw
OzO1HXvgeInCmmS7zifYhVanKnFKRz/9pC8xQTQqsM5KkG/z8AXfVxQ8NUjuNr0j
x74AuVQNq88DsF2dEPDXInXSsRtSO6fLpxLaKdDcpeGQHzKbbd5j0idOJF4oZd8x
qqNQJjpAdqqmT5WclD6UmMLdB/Bup/zvq4MmhKRo6Us76QH2RFzVN26FR/SZUMNn
Osr5CV8luxgIfTGKTHGFL/eWldpwXgnEBpl2pyUkpDQUg+jcRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL6dTFiltZqz2DlMwIx1QSLjHGSVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjA0YTMwYWEtMTE2Yy0z
MjBlLTgzYWQtM2NhZTEwNTVkZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQIK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGBkkUicmWcwGNQQeSQssE6TlI95j67llV2lT8tPehwauj5xRE8R
urDluH0+SwD3v+GCLZ+ZE8qgD067B7R28HgTmlow4AALeAEjQEFraLj79w2FdYO4
NHNPsXhd63iHFlPoXLKngUOZuMjBdyr6tNA854dFvkoZxGeFZWiHNE6C0n1WF5zK
ATLpMpaEwl0i3sXflE/IqKri1L9kfBZWHCpv1E1+2WeDerZud3jDFBvXlim6hv54
ucTHkWtPlkfohDoElxEqyY3Yw+3L1SBUtDRpMotEAjz4vcJ5iy0nRxEAOIx/gW1w
gR/8U8l2bQmD3270VLqdSpmo4JALeREau1E=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:07 2025 by rpki-client