Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da9dcd4e-1839-3e66-97ad-48c8f2b60675.roa
File: da9dcd4e-1839-3e66-97ad-48c8f2b60675.roa (raw, json)
Hash identifier: 7KumBwoiJjbZrtURLdXklog34Qc1b6iVUjO/JtyoS+k=
Subject key identifier: 42:97:FF:66:E7:FC:61:29:97:B6:93:4E:65:E6:A3:FB:24:AD:86:D9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B3414E76ADDA3C2D99B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da9dcd4e-1839-3e66-97ad-48c8f2b60675.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.19.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:34:14:e7:6a:dd:a3:c2:d9:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c2e44b7e-a89c-4359-85a8-2c0a74d8ffd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:da:4f:e6:5b:78:bc:53:83:3e:9e:08:5f:
18:70:4e:e7:7a:56:94:b7:85:67:40:23:7f:bd:c0:
64:48:a4:cf:e6:a0:d9:81:e8:ac:fb:56:46:9f:f4:
d9:c1:0c:ec:5d:58:15:98:99:2c:03:45:85:18:0f:
6f:b0:07:1a:96:63:c7:a9:cb:eb:6b:88:9f:b4:06:
f3:a6:6b:5b:bc:84:17:2b:ec:1a:65:10:f9:07:d0:
5a:c6:bc:e6:90:e7:de:9c:f1:14:9c:4d:98:a9:7a:
c2:85:7c:73:4e:43:3e:6d:d8:60:c4:20:83:2f:43:
00:d5:8e:f7:e1:c3:df:c8:fa:1e:70:3b:44:cb:64:
7a:fd:60:ad:d6:2d:c2:e8:f7:ba:63:35:ef:c6:b4:
5b:19:0a:a7:a1:44:5d:45:dd:47:78:9e:24:94:59:
9b:01:b5:f3:e8:ea:82:c6:03:d9:44:bc:fc:a4:94:
03:6c:40:cb:6f:9c:ea:57:37:d9:ae:f1:e5:a8:c1:
dd:44:de:e7:80:c0:29:b5:e6:9e:ca:ec:ad:1e:7d:
d1:6b:34:46:7a:e6:3c:4f:b9:22:4a:51:27:b4:35:
17:18:1e:bf:4a:7b:e6:40:d6:46:c0:f8:72:44:04:
36:2f:d5:b4:39:9e:19:e1:0a:80:98:f7:e5:88:9f:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:97:FF:66:E7:FC:61:29:97:B6:93:4E:65:E6:A3:FB:24:AD:86:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da9dcd4e-1839-3e66-97ad-48c8f2b60675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.19.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:05:cb:66:2e:78:63:6a:f3:a3:22:75:c4:d1:da:b3:8d:57:
e9:80:cc:42:bc:d5:73:e3:77:fa:9e:80:62:b5:00:14:e5:fb:
79:63:c4:0f:13:8a:8e:4c:2c:b8:a8:ae:b9:95:7d:41:a9:32:
86:41:e3:bb:49:46:67:c1:50:5f:05:1a:c9:87:6f:fb:60:68:
89:7b:d5:bd:d6:d1:b2:97:3a:2a:72:d0:74:e8:a3:cf:b6:16:
90:3e:de:f0:59:42:a2:11:59:f2:1c:6e:e5:7a:c5:9e:08:b9:
12:80:15:55:c3:7e:95:a5:bf:16:26:f8:d3:01:6a:78:c9:55:
4b:08:be:39:b7:15:0b:65:15:60:1e:87:ff:b0:50:53:15:f6:
42:49:18:de:26:ab:98:2e:4c:91:7a:31:72:d6:7d:be:61:82:
22:fa:34:6e:8b:0c:dc:5b:13:1c:86:be:11:9d:9d:0a:2d:af:
c6:33:8b:8c:cf:f6:e7:ce:a9:cd:d4:01:32:fe:97:17:1c:8c:
c6:d5:9d:95:14:0a:07:5a:d0:eb:06:9f:c5:cb:4c:1f:05:1c:
00:5d:36:71:34:d4:bf:3f:49:c0:de:ed:4c:2b:05:9b:1e:4e:
ba:0f:7e:7f:c5:56:e9:da:8d:7c:c0:6a:9b:9e:c9:f9:47:11:
5d:6c:e5:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOzQU52rdo8LZm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
YzJlNDRiN2UtYTg5Yy00MzU5LTg1YTgtMmMwYTc0ZDhmZmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBjaT+ZbeLxTgz6eCF8YcE7nelaUt4VnQCN/
vcBkSKTP5qDZgeis+1ZGn/TZwQzsXVgVmJksA0WFGA9vsAcalmPHqcvra4iftAbz
pmtbvIQXK+waZRD5B9BaxrzmkOfenPEUnE2YqXrChXxzTkM+bdhgxCCDL0MA1Y73
4cPfyPoecDtEy2R6/WCt1i3C6Pe6YzXvxrRbGQqnoURdRd1HeJ4klFmbAbXz6OqC
xgPZRLz8pJQDbEDLb5zqVzfZrvHlqMHdRN7ngMApteaeyuytHn3RazRGeuY8T7ki
SlEntDUXGB6/SnvmQNZGwPhyRAQ2L9W0OZ4Z4QqAmPfliJ8MewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKX/2bn/GEpl7aTTmXmo/skrYbZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE5ZGNkNGUtMTgzOS0z
ZTY2LTk3YWQtNDhjOGYyYjYwNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBPIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGEFy2YueGNq86MidcTR2rONV+mAzEK81XPjd/qegGK1ABTl+3ljxA8T
io5MLLiorrmVfUGpMoZB47tJRmfBUF8FGsmHb/tgaIl71b3W0bKXOipy0HToo8+2
FpA+3vBZQqIRWfIcbuV6xZ4IuRKAFVXDfpWlvxYm+NMBanjJVUsIvjm3FQtlFWAe
h/+wUFMV9kJJGN4mq5guTJF6MXLWfb5hgiL6NG6LDNxbExyGvhGdnQotr8Yzi4zP
9ufOqc3UATL+lxccjMbVnZUUCgda0OsGn8XLTB8FHABdNnE01L8/ScDe7UwrBZse
TroPfn/FVunajXzAapueyflHEV1s5aQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:34 2025 by rpki-client