Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da72e36c-e8d2-321e-953b-f95bf4f31a2f.roa
File: da72e36c-e8d2-321e-953b-f95bf4f31a2f.roa (raw, json)
Hash identifier: NvftL1RmcjXm/irzF+IL+VkqYTkFwTVwyquH1375IRw=
Subject key identifier: E2:FD:61:5A:83:F1:50:A7:97:01:85:EC:BB:08:AC:14:27:F6:01:09
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ECA1E81CDF0707A589740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da72e36c-e8d2-321e-953b-f95bf4f31a2f.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.119.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:ca:1e:81:cd:f0:70:7a:58:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=717629f3-9d93-4cdc-9a05-3de6cf701e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:0f:85:b2:b1:b3:3d:9b:61:f5:78:23:4f:
4d:9a:13:4b:db:40:d9:f9:34:2c:b8:ce:84:7f:a1:
b4:83:a1:b9:65:54:76:de:97:0e:f3:f6:79:88:b6:
51:63:a2:5f:67:b8:e2:8c:52:f4:f5:2b:1f:d1:e7:
1f:a4:df:f6:d8:9d:1d:3d:31:80:a3:dd:c4:39:16:
c0:e9:d5:ba:3f:c6:8d:77:41:bd:fb:b4:74:d1:d8:
2b:b5:a8:49:5a:d6:64:30:32:d7:19:d4:0c:d9:9a:
da:12:b9:60:e4:14:b5:ae:ec:b6:15:d0:9e:05:d4:
60:2c:c8:e0:99:08:80:f1:0f:34:b8:b2:94:9e:6e:
ec:72:72:16:0e:e3:0d:52:8b:ef:a0:51:e0:f2:73:
54:27:23:93:77:da:59:c8:48:7a:7a:63:d4:2d:38:
26:d9:49:19:15:2d:2a:a5:af:4a:b2:58:21:27:ad:
6b:a5:2e:3a:30:6a:f0:c2:ad:2e:66:5b:73:1c:c1:
f8:91:eb:5c:5a:4e:86:53:a0:55:5b:d0:20:39:0b:
14:6b:0b:11:a3:90:3a:5a:7d:93:37:ac:d3:22:f5:
7e:36:1e:be:b1:b4:2f:21:ea:59:fb:13:b1:24:31:
4c:ab:ac:a4:b9:f9:03:ac:5e:d0:04:05:71:07:f0:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:61:5A:83:F1:50:A7:97:01:85:EC:BB:08:AC:14:27:F6:01:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da72e36c-e8d2-321e-953b-f95bf4f31a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.119.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:42:8f:4a:e9:99:25:4c:14:5c:54:f4:0d:18:b9:99:ed:de:
14:6a:0b:72:55:d6:bd:5c:b6:df:31:fd:2d:fa:6b:7c:73:78:
92:1e:eb:3f:ca:c2:0a:25:25:66:69:13:56:02:fa:19:e0:34:
da:1f:70:17:60:08:39:5c:a2:ef:fa:6b:17:96:0f:03:3e:fe:
b5:f6:d7:bb:99:7a:45:d5:df:a9:b2:10:7c:9c:97:83:99:ab:
cd:b7:4e:26:68:36:1e:f6:bf:c3:43:e4:72:64:96:58:2a:b0:
b2:91:0e:fa:57:d3:c9:4e:81:aa:11:f1:88:a3:4f:f6:cc:7d:
6f:2f:63:60:71:e4:4e:75:2f:66:d4:cd:b8:97:61:83:bc:c8:
df:1a:51:9f:da:bb:fd:94:55:b1:d3:87:23:0c:c6:6d:1a:9a:
49:d3:0c:db:ad:8e:29:72:97:d9:9c:ac:ee:70:20:64:91:48:
e8:a9:d7:ad:dd:28:77:61:fe:69:8b:5e:ec:5a:fb:02:a3:ca:
d7:86:8e:71:c1:0f:b2:21:64:b0:06:9b:c1:db:2f:94:30:11:
dd:2d:14:5a:28:a9:56:f9:8b:20:07:69:c7:11:d8:25:bd:30:
2d:79:ca:64:71:0b:59:ac:9c:c3:72:21:86:7a:f3:f0:34:ee:
c0:82:47:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPsoegc3wcHpYl0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NzE3NjI5ZjMtOWQ5My00Y2RjLTlhMDUtM2RlNmNmNzAxZTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7gPhbKxsz2bYfV4I09NmhNL20DZ+TQsuM6E
f6G0g6G5ZVR23pcO8/Z5iLZRY6JfZ7jijFL09Ssf0ecfpN/22J0dPTGAo93EORbA
6dW6P8aNd0G9+7R00dgrtahJWtZkMDLXGdQM2ZraErlg5BS1ruy2FdCeBdRgLMjg
mQiA8Q80uLKUnm7scnIWDuMNUovvoFHg8nNUJyOTd9pZyEh6emPULTgm2UkZFS0q
pa9KslghJ61rpS46MGrwwq0uZltzHMH4ketcWk6GU6BVW9AgOQsUawsRo5A6Wn2T
N6zTIvV+Nh6+sbQvIepZ+xOxJDFMq6ykufkDrF7QBAVxB/CqHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOL9YVqD8VCnlwGF7LsIrBQn9gEJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE3MmUzNmMtZThkMi0z
MjFlLTk1M2ItZjk1YmY0ZjMxYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHeYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlCj0rpmSVMFFxU9A0YuZnt3hRqC3JV1r1ctt8x/S36a3xzeJIe6z/K
wgolJWZpE1YC+hngNNofcBdgCDlcou/6axeWDwM+/rX217uZekXV36myEHycl4OZ
q823TiZoNh72v8ND5HJkllgqsLKRDvpX08lOgaoR8YijT/bMfW8vY2Bx5E51L2bU
zbiXYYO8yN8aUZ/au/2UVbHThyMMxm0amknTDNutjilyl9mcrO5wIGSRSOip163d
KHdh/mmLXuxa+wKjyteGjnHBD7IhZLAGm8HbL5QwEd0tFFooqVb5iyAHaccR2CW9
MC15ymRxC1msnMNyIYZ68/A07sCCR/U=
-----END CERTIFICATE-----
Generated at Wed May 7 20:23:09 2025 by rpki-client