Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f37efbfc-ea69-3abf-b967-671ef92449f2.roa
File: f37efbfc-ea69-3abf-b967-671ef92449f2.roa (raw, json)
Hash identifier: pKZvemr+TMXKC6aV+psLyyHPeOynbEH5q7F7xcc/a38=
Subject key identifier: C2:96:49:53:E7:5A:88:CE:5C:6C:F6:C6:C1:AC:20:C0:EA:E6:78:8E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E5FDFE23802574FBE0BDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f37efbfc-ea69-3abf-b967-671ef92449f2.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 7725
IP address blocks: 76.145.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:fd:fe:23:80:25:74:fb:e0:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=6eda2ee6-b1ed-4658-b5db-fde1cab0639f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:d8:7d:66:77:43:54:ce:29:39:9e:0e:3b:
98:7b:b7:6b:18:05:3d:2e:26:a9:13:f3:9e:62:5b:
74:7f:0f:63:27:ec:1b:99:e9:39:c7:da:c0:b9:1a:
99:17:64:0f:59:dc:86:83:35:2d:cb:79:2e:62:80:
76:06:4d:21:e0:a7:61:e1:72:19:27:2e:05:72:07:
fc:22:c8:42:9d:1c:04:70:3f:72:15:fd:d3:86:74:
c8:f7:20:cf:4b:ee:c4:30:1e:72:f0:8d:04:99:c2:
35:37:e8:a9:b0:4d:12:e0:55:f9:f3:94:50:1d:dc:
56:5d:a0:b1:98:e3:f3:52:79:31:74:b9:4c:1c:4e:
bd:64:97:b9:62:00:23:79:84:c0:11:48:bc:3d:2c:
66:a2:53:1d:22:8f:e7:88:f4:b8:58:b6:e4:bb:2b:
d0:5d:74:40:d0:53:98:28:99:94:da:c5:fe:2e:1b:
43:43:3f:d7:52:b9:79:d1:9d:55:c0:53:4f:7a:68:
99:55:0f:e9:02:c0:38:df:71:cd:ab:bf:30:72:ad:
b7:52:fc:df:08:5f:04:d6:6e:5a:9e:fc:f6:28:2f:
c8:ec:80:79:23:a2:be:fc:01:a9:0e:d8:74:f2:cc:
1d:c3:5e:92:10:e7:b4:94:ac:0b:71:d7:f2:a7:66:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:96:49:53:E7:5A:88:CE:5C:6C:F6:C6:C1:AC:20:C0:EA:E6:78:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f37efbfc-ea69-3abf-b967-671ef92449f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.145.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:87:b5:21:17:55:22:d6:9a:4d:00:45:7c:4b:af:68:58:e0:
be:7d:17:58:70:b7:39:b8:5e:80:0c:a2:be:bb:4d:cb:39:1e:
b0:ba:2c:8b:d7:06:b8:74:29:65:71:d4:9a:07:d8:7f:b4:f3:
64:5c:31:09:08:1f:82:b7:78:02:79:0c:21:69:63:b6:cc:95:
84:9c:62:af:f5:8c:31:76:fd:cc:ed:6b:34:06:78:3d:65:d1:
83:91:ad:d1:2d:bb:42:b1:f2:05:cb:82:a9:c0:67:cc:78:fe:
c5:b3:af:1d:7a:2d:53:a8:f2:8b:4a:85:ce:8a:bf:b9:cb:59:
ac:b3:6d:36:95:83:df:65:a4:b0:6f:b3:ef:d7:70:ba:3f:7c:
99:49:02:52:0b:9f:00:6d:85:88:7f:4f:59:44:8d:14:00:de:
b6:c3:17:16:e4:84:b2:cb:a3:d4:dd:70:cf:e2:f1:b7:19:f9:
c4:c1:a7:64:b9:11:70:33:ce:74:33:c2:2b:4d:13:0d:e2:0d:
95:a0:68:91:67:4f:53:fa:9f:1b:f2:9d:c6:71:09:44:62:be:
5a:ed:42:78:da:6e:75:d1:d1:54:a2:f0:00:c0:bf:07:ad:cc:
04:86:c9:63:4b:32:d4:6d:97:a8:4f:fb:20:56:c8:54:a5:46:
44:4c:7f:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5f3+I4AldPvgvcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
NmVkYTJlZTYtYjFlZC00NjU4LWI1ZGItZmRlMWNhYjA2MzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfHYfWZ3Q1TOKTmeDjuYe7drGAU9LiapE/Oe
Ylt0fw9jJ+wbmek5x9rAuRqZF2QPWdyGgzUty3kuYoB2Bk0h4Kdh4XIZJy4Fcgf8
IshCnRwEcD9yFf3ThnTI9yDPS+7EMB5y8I0EmcI1N+ipsE0S4FX585RQHdxWXaCx
mOPzUnkxdLlMHE69ZJe5YgAjeYTAEUi8PSxmolMdIo/niPS4WLbkuyvQXXRA0FOY
KJmU2sX+LhtDQz/XUrl50Z1VwFNPemiZVQ/pAsA433HNq78wcq23UvzfCF8E1m5a
nvz2KC/I7IB5I6K+/AGpDth08swdw16SEOe0lKwLcdfyp2Y1GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKWSVPnWojOXGz2xsGsIMDq5niOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjM3ZWZiZmMtZWE2OS0z
YWJmLWI5NjctNjcxZWY5MjQ0OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJHqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2HtSEXVSLWmk0ARXxLr2hY4L59F1hwtzm4XoAMor67Tcs5HrC6LIvX
Brh0KWVx1JoH2H+082RcMQkIH4K3eAJ5DCFpY7bMlYScYq/1jDF2/cztazQGeD1l
0YORrdEtu0Kx8gXLgqnAZ8x4/sWzrx16LVOo8otKhc6Kv7nLWayzbTaVg99lpLBv
s+/XcLo/fJlJAlILnwBthYh/T1lEjRQA3rbDFxbkhLLLo9TdcM/i8bcZ+cTBp2S5
EXAzznQzwitNEw3iDZWgaJFnT1P6nxvyncZxCURivlrtQnjabnXR0VSi8ADAvwet
zASGyWNLMtRtl6hP+yBWyFSlRkRMfz8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:01 2025 by rpki-client