Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d004b2d1-8dcb-3cab-9a5f-f63aa9e76512.roa
File: d004b2d1-8dcb-3cab-9a5f-f63aa9e76512.roa (raw, json)
Hash identifier: JqfkALQoKmwJJVTkLpg6kd3mfoAMOTEzpALUi8HDOg4=
Subject key identifier: F7:55:63:0E:05:60:A2:BC:04:D5:F3:C3:67:A9:5A:2C:B3:4D:20:B6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F935EB4C6363225772100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d004b2d1-8dcb-3cab-9a5f-f63aa9e76512.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 76.139.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:93:5e:b4:c6:36:32:25:77:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2643e16d-7f7b-4536-8b32-9ee0582fdf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:44:df:3f:b1:92:03:c5:3d:0c:85:fe:e5:
99:56:17:62:f9:80:3a:a2:0b:be:13:95:ce:a6:32:
b1:6e:75:0f:38:ef:c8:7f:8b:a1:f9:83:dd:8f:6c:
ab:92:b3:56:f9:6a:53:03:95:7b:66:20:17:b4:3a:
7e:42:37:74:58:85:41:09:0f:30:04:50:4e:18:a2:
2e:8a:31:c8:a1:50:af:e0:18:c2:de:80:51:71:3c:
a2:07:73:ee:08:b1:c1:23:f7:7e:92:77:d6:a9:ef:
9b:d0:97:e5:38:7b:b3:9d:7a:8a:12:1f:a1:a6:95:
7b:14:58:70:41:1e:61:12:3d:21:d6:d3:ac:36:45:
23:ae:75:b4:c6:31:de:2e:19:9a:ff:d1:19:8f:4c:
ba:71:3f:6b:1e:0c:db:90:0c:1d:7a:fe:62:00:58:
bb:05:46:6d:af:6a:ce:9b:9e:52:3a:17:ef:49:1a:
e2:8b:c4:37:8d:02:8b:fa:f0:b2:63:9f:25:06:30:
ee:b9:88:93:f6:ea:ef:42:aa:25:e8:34:5d:ec:c9:
17:62:cd:82:02:1f:c1:af:3f:3b:3a:71:58:92:94:
13:23:e9:c3:cc:a0:7c:22:e7:23:06:b1:60:6e:9d:
36:91:08:d0:1b:c6:41:ef:b2:61:e1:b7:95:52:0f:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:55:63:0E:05:60:A2:BC:04:D5:F3:C3:67:A9:5A:2C:B3:4D:20:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d004b2d1-8dcb-3cab-9a5f-f63aa9e76512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.139.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:9c:33:89:04:1c:73:b7:ea:67:19:a6:6c:4b:49:1f:9f:fa:
99:c1:c5:95:16:e9:a8:d6:48:e9:47:62:fa:03:fa:e5:c7:76:
0f:22:d8:5b:70:81:b9:9b:8e:40:73:60:0b:c0:26:a2:f9:49:
ff:84:7a:d7:e8:3d:a8:6a:3e:b8:a6:a4:24:41:c2:1d:fa:4b:
e2:f3:37:5a:f1:be:e7:e5:a9:25:59:12:d3:59:42:ad:cc:ef:
4b:eb:0e:d4:a7:40:9d:78:37:e6:94:43:ee:18:6f:c9:22:12:
6f:7f:03:2e:3d:cc:39:eb:34:8b:34:4e:dc:4b:88:ee:9f:cb:
dc:13:22:7a:59:27:6f:5d:4c:79:37:2e:33:0b:d8:28:b2:88:
15:7b:5a:fe:de:9b:d1:4f:ee:c6:d5:b0:85:e9:ba:0a:11:00:
b3:2b:74:51:65:68:b5:bb:a4:8b:34:73:e1:e7:d5:8c:2e:d2:
4a:dd:3e:05:7a:e0:11:cd:b2:c0:f7:27:e7:f0:cc:e8:21:0c:
d2:cd:1d:7d:4c:f5:b7:7b:6b:a6:bb:d9:35:ef:78:76:33:b5:
7d:fa:a3:f3:89:2d:a8:31:1d:03:98:f6:fb:4a:49:64:cd:c0:
e2:80:11:d2:48:99:ae:8a:fe:0a:7e:8d:24:b3:7d:17:41:b4:
5f:40:a8:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUP5NetMY2MiV3IQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MjY0M2UxNmQtN2Y3Yi00NTM2LThiMzItOWVlMDU4MmZkZjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2BE3z+xkgPFPQyF/uWZVhdi+YA6ogu+E5XO
pjKxbnUPOO/If4uh+YPdj2yrkrNW+WpTA5V7ZiAXtDp+Qjd0WIVBCQ8wBFBOGKIu
ijHIoVCv4BjC3oBRcTyiB3PuCLHBI/d+knfWqe+b0JflOHuznXqKEh+hppV7FFhw
QR5hEj0h1tOsNkUjrnW0xjHeLhma/9EZj0y6cT9rHgzbkAwdev5iAFi7BUZtr2rO
m55SOhfvSRrii8Q3jQKL+vCyY58lBjDuuYiT9urvQqol6DRd7MkXYs2CAh/Brz87
OnFYkpQTI+nDzKB8IucjBrFgbp02kQjQG8ZB77Jh4beVUg8QywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdVYw4FYKK8BNXzw2epWiyzTSC2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDAwNGIyZDEtOGRjYi0z
Y2FiLTlhNWYtZjYzYWE5ZTc2NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIumMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWcM4kEHHO36mcZpmxLSR+f+pnBxZUW6ajWSOlHYvoD+uXHdg8i2Ftw
gbmbjkBzYAvAJqL5Sf+EetfoPahqPrimpCRBwh36S+LzN1rxvuflqSVZEtNZQq3M
70vrDtSnQJ14N+aUQ+4Yb8kiEm9/Ay49zDnrNIs0TtxLiO6fy9wTInpZJ29dTHk3
LjML2CiyiBV7Wv7em9FP7sbVsIXpugoRALMrdFFlaLW7pIs0c+Hn1Ywu0krdPgV6
4BHNssD3J+fwzOghDNLNHX1M9bd7a6a72TXveHYztX36o/OJLagxHQOY9vtKSWTN
wOKAEdJIma6K/gp+jSSzfRdBtF9AqOQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:50:33 2025 by rpki-client