Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa
File: 0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa (raw, json)
Hash identifier: 3gVFo7YfqJORO7mAqLxwbeolOe8oIgvRRgYByeG7WCQ=
Subject key identifier: 97:5E:99:8E:9E:6A:B4:30:27:9E:D6:0D:57:4E:24:25:35:A4:B6:EF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CEC748165DAE48ADB5000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 69.138.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:ec:74:81:65:da:e4:8a:db:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=b1034662-011b-4d6f-bdb9-9faf76b602f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:43:41:a1:a1:24:10:1c:69:75:38:67:c0:
fc:d2:ff:67:e5:d0:f6:9a:35:fb:61:89:9e:10:58:
31:a0:a9:98:16:50:0b:8f:2f:65:c6:49:cf:f9:d5:
00:fa:5a:74:50:7e:ce:c0:e3:2a:63:fd:eb:ee:70:
54:62:c2:37:4a:24:34:64:ad:86:df:04:d5:c1:a5:
23:6f:5f:ef:39:3c:9a:2b:97:e8:12:ef:74:d0:6c:
3d:96:48:d4:7e:11:f7:2d:71:bd:d7:63:3a:a7:6d:
41:10:22:9a:8e:57:18:47:ca:4b:76:c0:79:36:16:
82:8b:84:ab:75:8e:19:4a:1d:9a:06:ca:35:3e:fd:
76:8a:fc:66:2a:00:34:73:4d:00:8a:b1:56:c4:db:
97:a9:3f:50:9f:75:af:fe:61:c9:ca:2f:79:88:39:
d6:21:00:bd:2f:99:f8:b8:fb:e6:df:f9:83:6b:89:
aa:bc:1a:c9:3c:9b:df:75:7a:d6:95:29:6f:7f:da:
17:bd:85:ba:82:3d:3c:d1:9d:5f:40:26:dd:a0:39:
7c:58:42:cd:26:c8:a3:cd:02:cc:6a:37:ab:47:63:
11:d0:1c:07:e9:9a:b5:f2:ad:dd:f9:0a:ca:b2:e2:
32:04:ff:3b:99:86:b1:67:ac:87:06:ec:93:45:b7:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:99:8E:9E:6A:B4:30:27:9E:D6:0D:57:4E:24:25:35:A4:B6:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.138.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:4e:98:9a:2e:16:f9:3d:e5:2d:85:17:33:ac:dd:27:48:27:
fb:45:c1:7d:4c:b9:de:68:73:54:50:8c:f6:3b:61:13:71:14:
44:2c:a0:c5:42:85:1d:0f:c9:a1:17:ec:cd:e6:71:77:b3:69:
0c:06:6d:91:01:52:92:27:a5:3a:90:a8:b4:0f:e7:2c:a3:ca:
a4:7e:4d:bd:c2:6d:ff:3a:d1:79:ea:a2:a6:e2:96:90:0b:b7:
cd:0b:11:ba:82:ad:b8:24:f1:53:98:84:b4:a5:19:17:c3:d4:
c1:a4:35:bd:d5:e2:21:db:0b:68:68:8c:4a:c2:b6:05:7f:b4:
1f:7e:2d:58:23:4c:52:39:b3:2e:8a:d4:51:42:23:f3:a9:a9:
e7:33:ff:a7:60:77:fa:3d:a8:0b:02:0f:ea:0a:07:cf:d9:c9:
04:c9:06:cd:f0:ba:36:7b:ba:1c:86:d6:14:ed:a7:15:bd:8a:
ed:61:1e:c6:8d:30:ce:33:16:5d:ef:20:7f:18:a1:d8:cf:cb:
d1:51:ac:99:5b:1a:7e:ca:15:e6:55:69:47:b8:39:c8:3f:f3:
32:ec:48:48:d9:5e:9a:c2:60:57:7a:5f:7d:6d:af:4e:cc:4d:
3b:17:c2:ba:9c:77:e9:bf:b4:04:f1:c3:89:cb:73:b2:55:ee:
2c:1e:be:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebOx0gWXa5IrbUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
YjEwMzQ2NjItMDExYi00ZDZmLWJkYjktOWZhZjc2YjYwMmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIdDQaGhJBAcaXU4Z8D80v9n5dD2mjX7YYme
EFgxoKmYFlALjy9lxknP+dUA+lp0UH7OwOMqY/3r7nBUYsI3SiQ0ZK2G3wTVwaUj
b1/vOTyaK5foEu900Gw9lkjUfhH3LXG912M6p21BECKajlcYR8pLdsB5NhaCi4Sr
dY4ZSh2aBso1Pv12ivxmKgA0c00AirFWxNuXqT9Qn3Wv/mHJyi95iDnWIQC9L5n4
uPvm3/mDa4mqvBrJPJvfdXrWlSlvf9oXvYW6gj080Z1fQCbdoDl8WELNJsijzQLM
ajerR2MR0BwH6Zq18q3d+QrKsuIyBP87mYaxZ6yHBuyTRbf+/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdemY6earQwJ57WDVdOJCU1pLbvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGFhMmJiZjItOGY0YS0z
NzczLWIxMWUtOTliYzJhYjU2YmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRYooMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKJOmJouFvk95S2FFzOs3SdIJ/tFwX1Mud5oc1RQjPY7YRNxFEQsoMVC
hR0PyaEX7M3mcXezaQwGbZEBUpInpTqQqLQP5yyjyqR+Tb3Cbf860XnqoqbilpAL
t80LEbqCrbgk8VOYhLSlGRfD1MGkNb3V4iHbC2hojErCtgV/tB9+LVgjTFI5sy6K
1FFCI/Opqecz/6dgd/o9qAsCD+oKB8/ZyQTJBs3wujZ7uhyG1hTtpxW9iu1hHsaN
MM4zFl3vIH8YodjPy9FRrJlbGn7KFeZVaUe4Ocg/8zLsSEjZXprCYFd6X31tr07M
TTsXwrqcd+m/tATxw4nLc7JV7iwevl8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:36 2025 by rpki-client