Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8cf4218-ee87-3a37-a3f1-2d987b8cacf4.roa
File: c8cf4218-ee87-3a37-a3f1-2d987b8cacf4.roa (raw, json)
Hash identifier: U0VkMV1WLak9Z4jNhsCFDoVKUB8lMmr/qdJtLRSAQ7w=
Subject key identifier: 35:9F:26:2F:C4:88:3F:1B:FE:F7:36:B8:2D:70:2C:D4:0A:32:28:E9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B34ED2ABC3A4F17E0AE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8cf4218-ee87-3a37-a3f1-2d987b8cacf4.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.19.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:34:ed:2a:bc:3a:4f:17:e0:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4c3ee58a-25ef-46b3-a5b5-f58b85dac397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:a0:6b:b0:63:f5:32:93:bf:3e:1b:cf:8e:
95:69:52:10:dd:56:46:63:a4:d9:81:a1:c7:f1:ca:
56:8e:96:4e:2c:f7:e0:ba:d9:19:6f:f5:98:ce:6e:
4b:a5:4c:c3:63:97:04:ca:e7:4c:cd:bc:c7:81:68:
98:37:c3:69:2d:25:c3:54:99:dd:4a:b3:8b:e7:97:
6d:5f:81:0e:4f:86:46:6d:ce:e5:47:79:5a:77:53:
1e:cc:0f:00:6c:5f:95:4a:a8:95:b9:4d:6a:6b:1c:
7f:21:2b:19:35:e8:66:4e:c1:96:82:b4:a4:43:56:
6c:26:59:1b:99:d0:6c:20:d8:1c:5a:53:9f:99:bb:
5c:d3:a0:03:d5:00:c5:37:b5:c2:76:93:ab:23:17:
a1:b3:84:e0:1e:b3:04:fc:71:ef:92:39:f4:9b:23:
8e:31:e8:d6:40:72:51:15:19:aa:0b:2c:1e:ea:cf:
66:b6:ec:f3:86:a9:a4:0f:ec:8d:e8:57:b3:4d:8e:
d5:71:11:7a:4b:96:a1:ad:28:14:96:41:f7:2d:cf:
29:aa:92:96:4a:db:44:cc:b5:e6:46:14:64:e3:8e:
d7:42:42:19:25:03:b3:db:04:e9:32:45:52:ce:32:
71:78:0e:06:1a:75:29:52:43:47:fb:70:88:89:50:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9F:26:2F:C4:88:3F:1B:FE:F7:36:B8:2D:70:2C:D4:0A:32:28:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8cf4218-ee87-3a37-a3f1-2d987b8cacf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.19.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:d6:c5:14:d7:31:2b:05:bb:e0:0c:a8:4d:b1:35:05:4b:13:
d0:37:6a:bb:00:6e:39:86:5e:bf:09:b6:6e:37:d4:a4:b6:15:
e9:1d:d8:10:14:d6:05:29:1b:ef:2f:a3:7a:b0:fc:da:c1:5a:
6e:67:4e:c8:c1:53:d7:de:4d:ef:56:77:82:4b:14:9b:e9:a4:
ef:40:6e:1c:98:04:1b:7c:bd:75:d0:1e:fb:f8:a6:a8:e2:95:
db:a6:f2:0b:5c:c2:67:a3:ed:cb:1a:ed:e6:7e:88:6a:6c:54:
9e:b5:e0:36:4e:5c:8b:20:d7:7a:09:75:2c:aa:46:b9:c3:7e:
74:c6:b5:5f:3e:d6:3e:5b:b1:70:c6:05:a6:b3:aa:08:ea:d3:
b9:60:0c:51:64:e6:cc:27:b9:9c:38:f7:d1:a9:0f:ea:b3:52:
94:f9:24:fc:11:2b:5c:c3:d9:25:e9:ee:90:0d:b9:0f:b8:31:
85:9d:81:7e:42:02:11:cf:c5:2b:1d:5c:3a:01:1f:48:19:9b:
ab:be:03:11:20:c0:4d:06:99:49:06:21:d0:46:e1:6f:69:01:
6e:c2:db:06:00:b5:ce:46:bc:ee:2c:84:63:a9:f9:f1:5c:6a:
18:52:af:0f:cc:67:d2:15:15:09:15:50:1f:2a:4b:d2:b7:ff:
81:0d:76:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOzTtKrw6TxfgrkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NGMzZWU1OGEtMjVlZi00NmIzLWE1YjUtZjU4Yjg1ZGFjMzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+2ga7Bj9TKTvz4bz46VaVIQ3VZGY6TZgaHH
8cpWjpZOLPfgutkZb/WYzm5LpUzDY5cEyudMzbzHgWiYN8NpLSXDVJndSrOL55dt
X4EOT4ZGbc7lR3lad1MezA8AbF+VSqiVuU1qaxx/ISsZNehmTsGWgrSkQ1ZsJlkb
mdBsINgcWlOfmbtc06AD1QDFN7XCdpOrIxehs4TgHrME/HHvkjn0myOOMejWQHJR
FRmqCywe6s9mtuzzhqmkD+yN6FezTY7VcRF6S5ahrSgUlkH3Lc8pqpKWSttEzLXm
RhRk447XQkIZJQOz2wTpMkVSzjJxeA4GGnUpUkNH+3CIiVDwNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDWfJi/EiD8b/vc2uC1wLNQKMijpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzhjZjQyMTgtZWU4Ny0z
YTM3LWEzZjEtMmQ5ODdiOGNhY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBNAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnWxRTXMSsFu+AMqE2xNQVLE9A3arsAbjmGXr8Jtm431KS2Fekd2BAU
1gUpG+8vo3qw/NrBWm5nTsjBU9feTe9Wd4JLFJvppO9AbhyYBBt8vXXQHvv4pqji
ldum8gtcwmej7csa7eZ+iGpsVJ614DZOXIsg13oJdSyqRrnDfnTGtV8+1j5bsXDG
Baazqgjq07lgDFFk5swnuZw499GpD+qzUpT5JPwRK1zD2SXp7pANuQ+4MYWdgX5C
AhHPxSsdXDoBH0gZm6u+AxEgwE0GmUkGIdBG4W9pAW7C2wYAtc5GvO4shGOp+fFc
ahhSrw/MZ9IVFQkVUB8qS9K3/4ENdkw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:57 2025 by rpki-client