Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed3d0ca7-9800-3eb5-affe-917d3b4d6c12.roa
File: ed3d0ca7-9800-3eb5-affe-917d3b4d6c12.roa (raw, json)
Hash identifier: 5vlIsr1ERFJWQBjwWJuifPX4bvQ6YAXtzt7IWmlP8Oo=
Subject key identifier: 95:79:DD:19:E3:41:18:9B:A4:70:B7:72:96:3A:B5:F1:92:61:99:7B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C123D520490D74A970EF180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed3d0ca7-9800-3eb5-affe-917d3b4d6c12.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 71.225.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:3d:52:04:90:d7:4a:97:0e:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=649714ac-a424-48f8-a329-0dfca484a90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:38:6e:08:46:e0:d1:05:0e:c3:7d:11:ea:
57:cb:06:c8:db:a2:b9:e0:c3:bb:73:49:b5:7a:39:
77:02:82:b7:16:1c:17:bb:05:31:17:56:31:9b:52:
8f:b1:14:49:bf:d1:eb:1a:5e:d8:bb:0b:fa:54:8b:
61:8d:26:71:aa:e3:b5:eb:8e:b9:19:81:16:24:2d:
36:95:cb:0e:be:58:63:6b:c2:28:9d:9f:cf:8d:da:
75:d0:a0:15:49:08:cc:35:8e:bf:ea:a6:97:c2:c1:
db:7c:2c:77:c5:c0:c6:a5:18:5d:bc:84:f1:b8:7a:
38:11:62:f2:2e:94:5f:5b:00:e1:8c:e2:0c:25:37:
5e:70:54:60:e0:ad:60:c5:41:e9:c6:52:33:77:65:
54:23:af:2b:ed:db:74:c0:88:df:67:de:6e:02:b1:
bc:6b:28:28:c5:b1:a3:4f:34:b6:60:51:f0:cf:a1:
13:c0:74:b2:1a:fe:e6:14:02:32:7b:e9:69:b0:b5:
ae:db:9a:54:8a:0c:e6:28:0e:72:7a:81:f9:d7:7a:
45:ee:1a:f7:e9:49:01:70:49:d0:87:69:9f:e6:fc:
99:b2:22:d8:2c:d5:4a:3a:6a:ba:f9:79:be:75:e0:
a9:05:07:30:d5:e2:6b:9d:c2:7f:29:f5:c6:5e:6a:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:79:DD:19:E3:41:18:9B:A4:70:B7:72:96:3A:B5:F1:92:61:99:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed3d0ca7-9800-3eb5-affe-917d3b4d6c12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.225.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:04:f6:8c:78:ff:eb:b9:34:a7:3a:ac:fb:4d:39:26:f0:70:
35:90:9b:79:8e:6e:ad:5f:a4:27:28:b1:47:bb:24:ab:c8:e6:
8b:54:c5:73:8b:c1:d0:12:05:2f:27:1b:a6:18:25:5f:a1:ab:
e6:2b:01:50:c9:30:0d:f5:eb:20:4c:89:19:f3:aa:80:f1:08:
99:de:ff:d0:ae:88:2c:e9:40:b6:73:45:1f:a1:e6:10:44:1f:
18:52:a6:71:7e:b2:aa:68:13:ca:bc:76:b5:49:40:9a:de:ca:
1a:5b:aa:b1:de:eb:ee:df:4c:7c:c4:eb:dd:fd:83:69:b4:16:
38:f0:ed:64:da:f1:4e:60:8f:06:6d:19:97:8b:f0:26:77:cc:
e5:49:6c:59:e1:89:12:b5:d9:4d:8c:e0:e8:9d:c8:a6:ef:c3:
3b:7e:28:00:0c:77:79:14:c6:f7:da:e8:c4:45:6a:82:39:ab:
30:d9:8d:c6:5f:da:28:52:41:39:d7:0b:27:46:e9:67:f1:ce:
10:1d:c8:e1:25:0b:69:cc:5b:7e:f8:96:70:ee:39:10:ed:6e:
67:5b:6a:d9:2d:dc:2e:5d:53:96:a9:58:1d:16:78:aa:8f:e9:
89:09:29:f6:27:e1:5b:b5:49:4b:aa:82:a8:09:a0:3b:a3:af:
a2:e7:0c:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEj1SBJDXSpcO8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NjQ5NzE0YWMtYTQyNC00OGY4LWEzMjktMGRmY2E0ODRhOTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAg4bghG4NEFDsN9EepXywbI26K54MO7c0m1
ejl3AoK3FhwXuwUxF1Yxm1KPsRRJv9HrGl7Yuwv6VIthjSZxquO16465GYEWJC02
lcsOvlhja8IonZ/Pjdp10KAVSQjMNY6/6qaXwsHbfCx3xcDGpRhdvITxuHo4EWLy
LpRfWwDhjOIMJTdecFRg4K1gxUHpxlIzd2VUI68r7dt0wIjfZ95uArG8aygoxbGj
TzS2YFHwz6ETwHSyGv7mFAIye+lpsLWu25pUigzmKA5yeoH513pF7hr36UkBcEnQ
h2mf5vyZsiLYLNVKOmq6+Xm+deCpBQcw1eJrncJ/KfXGXmovUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJV53RnjQRibpHC3cpY6tfGSYZl7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWQzZDBjYTctOTgwMC0z
ZWI1LWFmZmUtOTE3ZDNiNGQ2YzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+FoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0E9ox4/+u5NKc6rPtNOSbwcDWQm3mObq1fpCcosUe7JKvI5otUxXOL
wdASBS8nG6YYJV+hq+YrAVDJMA316yBMiRnzqoDxCJne/9CuiCzpQLZzRR+h5hBE
HxhSpnF+sqpoE8q8drVJQJreyhpbqrHe6+7fTHzE6939g2m0Fjjw7WTa8U5gjwZt
GZeL8CZ3zOVJbFnhiRK12U2M4OidyKbvwzt+KAAMd3kUxvfa6MRFaoI5qzDZjcZf
2ihSQTnXCydG6WfxzhAdyOElC2nMW374lnDuORDtbmdbatkt3C5dU5apWB0WeKqP
6YkJKfYn4Vu1SUuqgqgJoDujr6LnDHE=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:28 2025 by rpki-client