Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d070644a-4168-371c-8e7a-8ae0d184ee63.roa
File: d070644a-4168-371c-8e7a-8ae0d184ee63.roa (raw, json)
Hash identifier: I0a8agipTlr68F0V8CdrBvf/BPp+C9nrC6lz5cgJiaU=
Subject key identifier: AF:52:D9:3E:A5:30:46:C4:8F:08:8A:62:05:47:4C:FC:F6:FE:4C:C1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A9CAB9386329901A71680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d070644a-4168-371c-8e7a-8ae0d184ee63.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 71.238.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:9c:ab:93:86:32:99:01:a7:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=6ea96c27-5185-4ac5-9cba-6a6962bada44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:fa:14:9b:17:e3:ea:57:2e:9c:39:00:34:
41:ff:e6:51:42:2e:dc:5e:28:a7:91:93:2c:1b:d2:
75:eb:ed:7a:d9:f9:09:b9:42:da:f0:ef:2b:ab:61:
28:c8:00:f0:a9:44:d1:fc:84:92:0f:7f:a2:fa:dd:
29:b1:ed:d0:56:26:1b:a0:91:85:87:36:ec:db:1a:
ba:97:f0:c6:ed:d0:10:0c:5e:56:77:95:2f:74:c6:
4d:e2:ae:4f:87:2d:1d:83:29:00:98:2c:b1:45:24:
36:25:d1:45:80:18:88:b8:24:74:08:5c:96:51:6d:
0e:bc:4a:36:73:25:fb:23:ce:d3:a8:a7:a5:61:ae:
92:50:22:8f:ee:89:0d:aa:04:24:cb:6b:5a:f7:5b:
67:80:a4:16:9d:af:3c:74:4d:60:81:3e:45:b1:45:
bf:9a:2a:a4:71:fd:07:10:fe:92:a8:83:20:05:39:
de:af:36:5e:72:34:ed:62:11:e7:a8:40:cd:ce:10:
c8:4c:13:28:88:08:16:a2:34:d5:e9:e5:3c:41:11:
01:43:67:d9:84:ec:ad:12:00:88:1e:85:91:f8:b2:
70:76:8a:b6:e1:3b:26:7f:46:93:5f:29:04:7c:e8:
ff:94:4e:b2:a3:a3:56:a2:8e:66:31:cf:e3:7c:e4:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:52:D9:3E:A5:30:46:C4:8F:08:8A:62:05:47:4C:FC:F6:FE:4C:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d070644a-4168-371c-8e7a-8ae0d184ee63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.238.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:09:39:ae:99:db:95:22:b2:a0:39:ba:7d:30:ae:eb:cc:a1:
9f:a0:1b:99:75:f0:79:69:a3:ec:51:45:17:45:6f:85:91:c0:
1c:57:e7:eb:22:3a:bc:55:15:8d:46:a5:65:a2:50:db:5f:8e:
bd:39:04:99:95:44:33:04:1b:99:c2:9f:f4:ca:01:f1:a9:24:
31:2c:9f:1a:99:26:8b:1b:27:33:f6:7d:ee:27:65:6a:9c:7a:
a7:79:0a:ef:0f:2e:2d:bd:ee:34:30:4a:c3:bb:b4:e8:23:ee:
4d:9d:0c:44:8b:7a:7c:ea:2d:1e:bb:ec:f9:09:b4:b1:d1:e5:
77:1b:7c:3a:c0:e4:b2:e0:bd:67:66:18:ee:18:e6:01:d2:d0:
72:5f:32:53:e5:dc:c1:70:a7:3c:43:8a:84:e3:6a:bd:9e:20:
80:e1:da:f6:5f:10:d2:69:15:c1:0b:20:e2:8f:20:5f:5f:3f:
51:37:16:f8:7e:63:0a:81:56:3c:8c:0f:97:87:0d:61:91:0c:
65:ce:9a:2e:1d:37:7f:0c:d4:e8:ae:a6:86:0e:53:61:d3:d2:
6c:d8:c5:f2:b5:ed:f2:75:f7:41:f9:1b:91:8a:e2:11:64:49:
cf:91:75:50:d1:fe:e5:ae:52:19:82:d3:ec:32:21:ad:2f:a9:
3a:15:81:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOpyrk4YymQGnFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NmVhOTZjMjctNTE4NS00YWM1LTljYmEtNmE2OTYyYmFkYTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bT6FJsX4+pXLpw5ADRB/+ZRQi7cXiinkZMs
G9J16+162fkJuULa8O8rq2EoyADwqUTR/ISSD3+i+t0pse3QViYboJGFhzbs2xq6
l/DG7dAQDF5Wd5UvdMZN4q5Phy0dgykAmCyxRSQ2JdFFgBiIuCR0CFyWUW0OvEo2
cyX7I87TqKelYa6SUCKP7okNqgQky2ta91tngKQWna88dE1ggT5FsUW/miqkcf0H
EP6SqIMgBTnerzZecjTtYhHnqEDNzhDITBMoiAgWojTV6eU8QREBQ2fZhOytEgCI
HoWR+LJwdoq24Tsmf0aTXykEfOj/lE6yo6NWoo5mMc/jfOReFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK9S2T6lMEbEjwiKYgVHTPz2/kzBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA3MDY0NGEtNDE2OC0z
NzFjLThlN2EtOGFlMGQxODRlZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+5wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMAJOa6Z25UisqA5un0wruvMoZ+gG5l18Hlpo+xRRRdFb4WRwBxX5+si
OrxVFY1GpWWiUNtfjr05BJmVRDMEG5nCn/TKAfGpJDEsnxqZJosbJzP2fe4nZWqc
eqd5Cu8PLi297jQwSsO7tOgj7k2dDESLenzqLR677PkJtLHR5XcbfDrA5LLgvWdm
GO4Y5gHS0HJfMlPl3MFwpzxDioTjar2eIIDh2vZfENJpFcELIOKPIF9fP1E3Fvh+
YwqBVjyMD5eHDWGRDGXOmi4dN38M1OiupoYOU2HT0mzYxfK17fJ190H5G5GK4hFk
Sc+RdVDR/uWuUhmC0+wyIa0vqToVga4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:34:24 2025 by rpki-client