Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdd0b3d2-c18a-3172-85f1-7101c830c4ff.roa
File: fdd0b3d2-c18a-3172-85f1-7101c830c4ff.roa (raw, json)
Hash identifier: P2AUnkP/9vtuiO2i5Xbo06XkHxIl7MOun+38ChhmhIo=
Subject key identifier: 3C:45:CB:93:54:CF:B8:28:AF:A0:F3:4A:6B:6E:DA:01:BE:32:88:5D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ED7CC80A68613AC2AC280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdd0b3d2-c18a-3172-85f1-7101c830c4ff.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.24.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:d7:cc:80:a6:86:13:ac:2a:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=322ec4e9-454b-45a0-88f5-2c4eb10b94eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:eb:ba:a7:39:14:e7:9a:ba:3d:c7:7f:da:73:
4d:61:60:46:1d:22:e0:27:ae:e9:7e:64:da:75:07:
f2:5d:17:c7:c1:82:2e:be:af:a2:cc:58:84:ef:0a:
a8:e2:01:30:20:85:93:b9:fa:c9:64:08:70:9a:97:
c3:32:d2:28:f5:19:de:2f:f3:c2:3f:64:82:09:6a:
b8:01:06:c5:a2:94:4b:8d:25:ec:5c:aa:64:5d:4b:
95:dd:d2:84:7e:43:df:76:30:c1:0e:5b:56:ef:b7:
68:4b:24:7e:b2:a1:c2:df:1d:40:47:3e:4f:33:e1:
a1:a9:80:eb:4a:82:50:f4:65:1a:d7:8e:4d:a2:bc:
2f:9f:bd:e3:0b:6b:16:91:f1:24:db:56:40:01:85:
9a:94:ea:33:db:79:4d:c6:f6:09:75:31:13:25:7c:
6e:ac:4c:1f:3d:0f:12:c6:66:23:c0:5b:21:e3:de:
32:f2:25:5f:85:77:69:3b:9e:72:c5:88:aa:25:6e:
c8:59:07:5e:f6:5e:bb:fa:91:ea:14:e9:94:cc:32:
17:1f:6c:7c:c8:e5:92:4a:dc:b2:6b:28:f6:43:91:
ef:de:75:b9:56:55:94:2b:13:d6:08:c9:b6:c3:a3:
4d:09:2d:11:36:d6:0b:e7:ee:fc:10:e0:aa:82:98:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:45:CB:93:54:CF:B8:28:AF:A0:F3:4A:6B:6E:DA:01:BE:32:88:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdd0b3d2-c18a-3172-85f1-7101c830c4ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.24.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:94:ac:1a:8c:d8:a3:e3:cb:1b:db:98:77:dd:80:dd:9d:3d:
fa:4c:d8:20:a9:07:a7:47:e1:61:bb:96:a3:4a:a6:33:91:a0:
48:c2:ea:8e:59:7b:d9:66:91:c0:d9:84:75:48:e8:06:67:e2:
fe:b4:89:85:48:63:cd:81:8b:8c:28:07:c0:85:a8:0b:5e:a9:
71:33:d1:ac:ee:f8:a4:e8:67:c7:0e:11:86:fe:5f:a7:d1:42:
fd:49:2b:92:8a:47:42:77:b2:7f:10:f2:e2:a4:50:e2:a6:91:
eb:74:ff:83:f5:91:ea:8f:b6:ca:61:19:7d:c3:de:67:3d:c1:
6e:c4:4d:bd:44:ea:4a:1b:ae:bf:44:05:28:1a:47:a9:c4:d6:
29:5b:c8:e9:13:20:17:9e:c6:7d:86:e0:03:ab:22:68:05:d9:
7d:55:e4:c2:f5:2a:14:5a:ac:60:fc:90:a5:e5:d8:bf:75:78:
c4:db:0e:99:df:6b:c7:10:05:dd:e3:30:4d:4b:c4:23:2e:1a:
f3:73:0b:2a:fc:ba:ae:d2:32:f0:37:ae:ea:78:fb:86:15:63:
74:26:45:73:77:10:46:5e:a9:44:52:86:36:ec:dd:2b:a3:e4:
a6:cc:e5:16:61:cf:50:7c:e6:8e:f0:ae:e2:72:cf:85:d6:6e:
a2:4f:e3:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPtfMgKaGE6wqwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MzIyZWM0ZTktNDU0Yi00NWEwLTg4ZjUtMmM0ZWIxMGI5NGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeu6pzkU55q6Pcd/2nNNYWBGHSLgJ67pfmTa
dQfyXRfHwYIuvq+izFiE7wqo4gEwIIWTufrJZAhwmpfDMtIo9RneL/PCP2SCCWq4
AQbFopRLjSXsXKpkXUuV3dKEfkPfdjDBDltW77doSyR+sqHC3x1ARz5PM+GhqYDr
SoJQ9GUa145Norwvn73jC2sWkfEk21ZAAYWalOoz23lNxvYJdTETJXxurEwfPQ8S
xmYjwFsh494y8iVfhXdpO55yxYiqJW7IWQde9l67+pHqFOmUzDIXH2x8yOWSStyy
ayj2Q5Hv3nW5VlWUKxPWCMm2w6NNCS0RNtYL5+78EOCqgpjIRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxFy5NUz7gor6DzSmtu2gG+MohdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmRkMGIzZDItYzE4YS0z
MTcyLTg1ZjEtNzEwMWM4MzBjNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBiOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOUrBqM2KPjyxvbmHfdgN2dPfpM2CCpB6dH4WG7lqNKpjORoEjC6o5Z
e9lmkcDZhHVI6AZn4v60iYVIY82Bi4woB8CFqAteqXEz0azu+KToZ8cOEYb+X6fR
Qv1JK5KKR0J3sn8Q8uKkUOKmket0/4P1keqPtsphGX3D3mc9wW7ETb1E6kobrr9E
BSgaR6nE1ilbyOkTIBeexn2G4AOrImgF2X1V5ML1KhRarGD8kKXl2L91eMTbDpnf
a8cQBd3jME1LxCMuGvNzCyr8uq7SMvA3rup4+4YVY3QmRXN3EEZeqURShjbs3Suj
5KbM5RZhz1B85o7wruJyz4XWbqJP45o=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:42 2025 by rpki-client