Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bce145f0-23c6-3574-b774-7b7e8cf1d3a7.roa
File: bce145f0-23c6-3574-b774-7b7e8cf1d3a7.roa (raw, json)
Hash identifier: bs18M6DENE1svFtdbOkoZPHh3iJBsUDjBhtzEBBi0HU=
Subject key identifier: 80:5B:EC:51:BC:63:BE:9E:41:DB:B9:22:43:B5:D2:48:27:FF:DC:87
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ED4DDAAE7C5C9CE463400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bce145f0-23c6-3574-b774-7b7e8cf1d3a7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.23.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:d4:dd:aa:e7:c5:c9:ce:46:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=aa61c531-bef9-49c4-a9e0-8c0a39d3a6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c4:40:d6:77:bb:e9:af:5b:35:cc:a4:d5:0a:
b9:85:36:0f:43:67:b2:06:b3:e9:ef:fe:72:a7:95:
d0:c9:d9:40:85:30:1c:ed:b4:46:8c:f3:38:86:7f:
48:22:d4:28:9a:76:bd:8c:10:df:6a:f8:76:4c:64:
6b:20:f5:7f:eb:1a:de:72:b9:7f:d6:f3:c0:f1:db:
c4:54:85:5c:91:19:9d:45:bf:73:a7:49:d2:39:01:
6a:dd:9b:5f:3d:87:e9:8d:a2:2b:84:06:1e:81:64:
b6:47:7f:26:bf:64:b0:66:6f:f0:80:71:de:ca:d7:
1a:08:16:97:c2:10:98:ca:af:0e:35:34:7a:c8:86:
f3:33:72:09:f0:63:f7:15:87:b4:e3:37:bd:50:4a:
99:ea:92:b5:e0:59:10:2a:4b:19:16:ee:90:9a:d0:
cf:3e:81:0c:eb:0c:d8:8c:a4:f7:b0:c4:2d:0b:31:
02:42:52:91:e5:7d:09:70:82:6e:d1:5a:44:1d:49:
46:f9:0a:4c:10:8a:bc:9b:72:24:ee:b5:04:73:aa:
9e:b6:e8:0c:a8:79:07:eb:dc:d7:27:bc:25:ee:17:
6e:ae:cf:8a:d7:aa:6d:91:f3:8d:2d:53:61:1b:9d:
d4:40:d5:3a:fa:38:fe:27:09:4a:96:1e:37:73:e1:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:EC:51:BC:63:BE:9E:41:DB:B9:22:43:B5:D2:48:27:FF:DC:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bce145f0-23c6-3574-b774-7b7e8cf1d3a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.23.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:2d:bd:76:16:04:c8:9f:30:dc:1a:e6:59:04:74:bf:db:32:
af:36:e3:84:3a:e6:7a:13:44:8e:de:c7:a7:6a:50:65:4a:9d:
77:aa:94:5b:c3:56:55:21:81:8a:8e:9c:f0:54:80:72:6d:f4:
92:da:84:1f:39:a8:2f:17:9a:7e:17:25:df:0d:e9:5b:37:62:
35:94:e5:8d:bd:dc:22:24:91:b4:48:c6:54:83:ca:b1:db:29:
8d:69:10:ff:31:66:da:4e:a3:97:9f:40:7b:07:8c:79:ff:9c:
13:6f:9a:88:8b:e8:5f:ec:2a:87:c2:77:f9:4b:61:e9:d4:47:
6b:d1:b0:ce:e3:f7:c7:25:6e:a5:4f:6e:4a:0f:1b:30:b8:0f:
7c:37:40:38:d5:24:22:7e:08:d3:4c:39:91:ae:35:f1:b1:bb:
d0:d5:88:2f:4e:eb:a0:50:35:b0:48:25:77:8e:d7:c0:16:c0:
07:a3:2b:94:e4:b7:82:3e:ed:f1:22:d4:88:1f:63:03:c9:59:
f3:30:35:1c:85:10:1c:38:53:2e:37:36:8c:f3:9e:f1:6c:80:
a3:13:24:93:61:b2:0b:37:56:fa:a0:b3:b8:6b:06:b0:17:8d:
e2:12:29:c6:97:c9:00:2c:e9:26:66:c3:84:56:98:0e:d8:f6:
61:fd:91:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPtTdqufFyc5GNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
YWE2MWM1MzEtYmVmOS00OWM0LWE5ZTAtOGMwYTM5ZDNhNmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8RA1ne76a9bNcyk1Qq5hTYPQ2eyBrPp7/5y
p5XQydlAhTAc7bRGjPM4hn9IItQomna9jBDfavh2TGRrIPV/6xrecrl/1vPA8dvE
VIVckRmdRb9zp0nSOQFq3ZtfPYfpjaIrhAYegWS2R38mv2SwZm/wgHHeytcaCBaX
whCYyq8ONTR6yIbzM3IJ8GP3FYe04ze9UEqZ6pK14FkQKksZFu6QmtDPPoEM6wzY
jKT3sMQtCzECQlKR5X0JcIJu0VpEHUlG+QpMEIq8m3Ik7rUEc6qetugMqHkH69zX
J7wl7hdurs+K16ptkfONLVNhG53UQNU6+jj+JwlKlh43c+HWZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBb7FG8Y76eQdu5IkO10kgn/9yHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmNlMTQ1ZjAtMjNjNi0z
NTc0LWI3NzQtN2I3ZThjZjFkM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBemMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFotvXYWBMifMNwa5lkEdL/bMq8244Q65noTRI7ex6dqUGVKnXeqlFvD
VlUhgYqOnPBUgHJt9JLahB85qC8Xmn4XJd8N6Vs3YjWU5Y293CIkkbRIxlSDyrHb
KY1pEP8xZtpOo5efQHsHjHn/nBNvmoiL6F/sKofCd/lLYenUR2vRsM7j98clbqVP
bkoPGzC4D3w3QDjVJCJ+CNNMOZGuNfGxu9DViC9O66BQNbBIJXeO18AWwAejK5Tk
t4I+7fEi1IgfYwPJWfMwNRyFEBw4Uy43NozznvFsgKMTJJNhsgs3Vvqgs7hrBrAX
jeISKcaXyQAs6SZmw4RWmA7Y9mH9kXQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:26 2025 by rpki-client