Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d82697b-65c2-3d19-9d4d-442b1bee9556.roa
File: 0d82697b-65c2-3d19-9d4d-442b1bee9556.roa (raw, json)
Hash identifier: Cqcbm4X5Pmv6FSXKfy6JxY9LDymKL92ixubQhnTbHyY=
Subject key identifier: C6:7B:55:17:4A:BB:E7:DB:C7:54:6D:22:0F:2A:65:26:E9:8B:2C:73
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F70DFA1EC87ECBE26D5A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d82697b-65c2-3d19-9d4d-442b1bee9556.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 71.234.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:0d:fa:1e:c8:7e:cb:e2:6d:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=b02a42fa-5f0e-41ac-b705-8368514bc45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:d2:c1:3c:a8:0e:73:08:9f:3c:40:80:19:
33:4e:d7:5e:18:3e:3a:84:a6:45:fd:9c:81:c3:5e:
8e:0f:dc:b2:4d:ad:8f:4a:da:77:f1:77:3c:86:27:
fd:bd:c8:67:21:44:66:b0:88:de:5a:e3:ca:8a:1b:
19:ef:bf:31:c1:fa:3f:ed:73:d1:ac:d4:26:df:23:
a4:69:f2:b4:9c:cc:0a:42:21:89:42:0a:79:af:7c:
bd:9d:5a:f2:35:9c:eb:90:c4:51:f8:32:89:43:09:
c2:33:85:ba:15:ed:90:83:ec:3b:95:7d:c6:ac:fe:
bf:ce:40:c4:83:a1:da:22:2c:90:80:ed:c7:4d:82:
ed:e3:95:c0:e3:33:d4:08:f3:1c:ae:1e:24:aa:80:
92:38:45:e0:82:87:56:38:d9:e3:f8:0f:16:c7:0c:
d0:09:07:e8:09:2b:60:23:79:21:ea:18:af:a8:4f:
71:76:13:d0:ec:2f:23:cf:be:2c:a6:7d:af:c9:ed:
28:b7:26:64:93:8d:77:d1:bb:d1:e8:fd:1e:c1:9f:
7f:53:2d:75:79:98:21:39:00:a2:9d:57:e2:6e:e1:
e9:41:be:aa:b3:69:e4:c4:bd:63:a2:74:28:41:09:
aa:cf:16:49:78:3f:39:34:f5:0a:5b:72:6e:00:43:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7B:55:17:4A:BB:E7:DB:C7:54:6D:22:0F:2A:65:26:E9:8B:2C:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d82697b-65c2-3d19-9d4d-442b1bee9556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.234.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:ba:9f:0c:25:e7:57:95:00:88:95:55:be:0d:36:38:61:6a:
fd:8b:dd:c6:36:ec:88:fa:ef:a0:00:0f:75:60:36:f6:8c:9f:
89:d3:09:24:b5:0d:6a:ea:ea:62:50:7b:c5:6c:a0:9e:0f:0b:
ac:9f:3b:32:c1:29:3f:11:2e:9d:8b:4e:5a:c2:00:91:7c:31:
5e:e2:3b:6c:42:f0:c2:4a:98:a9:b8:1b:9d:dd:ba:95:b2:88:
b8:7c:35:40:5e:84:b2:8e:2c:07:c4:cc:83:10:34:79:d7:c9:
aa:3d:d2:ee:a2:04:6c:d0:0c:52:36:0a:9d:75:12:fb:29:71:
df:28:d6:d5:73:04:2b:be:61:2f:db:d8:8a:8f:f1:7f:35:b4:
1a:0e:d5:68:d8:69:df:36:92:7b:8b:ce:00:f7:4d:2d:23:5f:
b9:ea:9a:bb:b9:16:bf:50:f6:10:1c:e0:38:0d:80:77:23:79:
bb:41:4a:88:c3:0a:43:e9:ef:08:32:fb:92:f3:7c:c5:f7:c8:
f6:17:04:03:b7:4e:9d:89:85:cb:88:27:63:43:7b:d6:13:19:
f3:cc:60:c4:58:e4:8e:b5:ed:2d:19:4c:11:f0:43:04:bc:0d:
ac:84:1e:33:4b:12:fc:da:e3:17:27:58:32:8a:73:d2:78:d0:
6b:5e:5f:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09w36Hsh+y+JtWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YjAyYTQyZmEtNWYwZS00MWFjLWI3MDUtODM2ODUxNGJjNDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9/SwTyoDnMInzxAgBkzTtdeGD46hKZF/ZyB
w16OD9yyTa2PStp38Xc8hif9vchnIURmsIjeWuPKihsZ778xwfo/7XPRrNQm3yOk
afK0nMwKQiGJQgp5r3y9nVryNZzrkMRR+DKJQwnCM4W6Fe2Qg+w7lX3GrP6/zkDE
g6HaIiyQgO3HTYLt45XA4zPUCPMcrh4kqoCSOEXggodWONnj+A8WxwzQCQfoCStg
I3kh6hivqE9xdhPQ7C8jz74spn2vye0otyZkk4130bvR6P0ewZ9/Uy11eZghOQCi
nVfibuHpQb6qs2nkxL1jonQoQQmqzxZJeD85NPUKW3JuAENhaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZ7VRdKu+fbx1RtIg8qZSbpiyxzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGQ4MjY5N2ItNjVjMi0z
ZDE5LTlkNGQtNDQyYjFiZWU5NTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+qYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMu6nwwl51eVAIiVVb4NNjhhav2L3cY27Ij676AAD3VgNvaMn4nTCSS1
DWrq6mJQe8VsoJ4PC6yfOzLBKT8RLp2LTlrCAJF8MV7iO2xC8MJKmKm4G53dupWy
iLh8NUBehLKOLAfEzIMQNHnXyao90u6iBGzQDFI2Cp11Evspcd8o1tVzBCu+YS/b
2IqP8X81tBoO1WjYad82knuLzgD3TS0jX7nqmru5Fr9Q9hAc4DgNgHcjebtBSojD
CkPp7wgy+5LzfMX3yPYXBAO3Tp2JhcuIJ2NDe9YTGfPMYMRY5I617S0ZTBHwQwS8
DayEHjNLEvza4xcnWDKKc9J40GteX6I=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:12 2025 by rpki-client