Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bd53941-43dd-33b2-abeb-9cd319d1ceed.roa
File: 1bd53941-43dd-33b2-abeb-9cd319d1ceed.roa (raw, json)
Hash identifier: Z1hoZjWa5LmAW/bUfaiEUrNmpJPK1aCTXS6kQIkk/0w=
Subject key identifier: 28:CB:3D:B7:E6:B2:A1:99:C7:00:42:69:C8:5B:78:B5:24:A1:4D:73
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F6520C22D635E78E3BCD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bd53941-43dd-33b2-abeb-9cd319d1ceed.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 96.109.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:52:0c:22:d6:35:e7:8e:3b:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=26af2d18-bd25-452a-affc-14d10958770d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:72:78:35:d6:f5:fb:03:b4:a5:4c:da:f1:
2d:ed:95:c5:e3:a0:44:95:24:fb:a1:92:89:5d:74:
01:be:9a:43:8a:c6:c8:09:8e:07:8d:a0:0a:89:16:
b1:fc:a4:e9:6c:75:0c:22:99:83:33:36:94:8e:ae:
8c:b5:4c:e9:41:52:41:bb:0a:60:30:2a:01:d8:7f:
2a:28:df:ac:60:b3:86:fc:27:5b:34:5d:dd:96:10:
b5:76:1e:51:4c:7e:9c:f3:21:a3:f2:60:9a:29:ce:
4c:5c:a9:e5:70:3e:a3:e8:d1:1c:ed:73:9a:88:ca:
7f:49:47:9e:40:a7:1b:72:03:10:f5:fd:72:35:27:
0d:9a:f8:1f:6c:4e:b5:64:da:19:f5:d1:6a:1a:d0:
e1:d2:8a:04:e9:cb:9d:7c:46:5f:62:13:0a:ab:70:
4c:fd:3e:6e:0d:59:85:2f:fd:2e:fa:ce:4e:21:cf:
34:f5:f9:f6:07:3e:1d:f1:db:6f:77:0d:38:80:cd:
35:b4:fd:26:ed:92:88:90:3b:68:9d:4b:be:2b:15:
48:de:f9:1e:1f:66:4a:30:3e:9b:1d:09:42:13:3c:
bd:87:54:6d:c3:1b:35:4c:6a:39:74:33:6c:5d:00:
2a:b2:af:cf:01:b3:5d:8e:ee:03:64:d1:18:1d:dd:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CB:3D:B7:E6:B2:A1:99:C7:00:42:69:C8:5B:78:B5:24:A1:4D:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bd53941-43dd-33b2-abeb-9cd319d1ceed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.109.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:b5:b1:25:c9:c4:b2:68:4c:e4:1d:e8:4f:70:f4:8d:15:c8:
95:13:0d:24:96:d4:dc:f4:a9:04:97:27:52:7a:85:1f:94:c5:
df:ad:70:0d:56:8c:28:03:15:93:8d:fd:15:72:ac:f4:b6:be:
83:32:77:cc:44:0a:b2:ad:a0:92:d2:4a:7b:ea:d7:d3:d5:9c:
89:b8:0c:93:39:aa:8a:e0:31:ca:93:cb:26:52:c9:85:36:3f:
11:4c:0f:66:2d:ae:ad:87:60:ed:c9:aa:a9:01:c2:98:51:96:
83:fa:a7:5b:30:92:14:08:89:b2:18:38:ef:6f:34:2c:71:c7:
59:60:23:f9:dc:ee:79:d8:f4:b4:80:78:2c:a9:5b:73:52:b5:
d3:a1:fb:05:89:f1:cb:28:76:02:b5:9a:f0:a3:60:5e:66:04:
a0:e1:2e:2d:b6:16:ef:8b:a1:9d:41:3c:cf:b3:74:24:dd:84:
c2:23:9a:98:1d:b1:22:0d:31:39:e5:27:6f:0e:dc:87:e6:0f:
fd:0d:f9:93:59:1c:ee:fc:14:d8:c0:ce:3d:ac:35:ef:e6:34:
8f:df:92:78:64:a5:a0:b5:2f:d5:37:49:f8:7a:a5:c2:43:24:
bb:7d:16:9e:4e:b0:96:aa:69:05:f7:5c:cf:ac:d7:75:4e:72:
ce:b0:58:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lIMItY15447zQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
MjZhZjJkMTgtYmQyNS00NTJhLWFmZmMtMTRkMTA5NTg3NzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8lyeDXW9fsDtKVM2vEt7ZXF46BElST7oZKJ
XXQBvppDisbICY4HjaAKiRax/KTpbHUMIpmDMzaUjq6MtUzpQVJBuwpgMCoB2H8q
KN+sYLOG/CdbNF3dlhC1dh5RTH6c8yGj8mCaKc5MXKnlcD6j6NEc7XOaiMp/SUee
QKcbcgMQ9f1yNScNmvgfbE61ZNoZ9dFqGtDh0ooE6cudfEZfYhMKq3BM/T5uDVmF
L/0u+s5OIc809fn2Bz4d8dtvdw04gM01tP0m7ZKIkDtonUu+KxVI3vkeH2ZKMD6b
HQlCEzy9h1Rtwxs1TGo5dDNsXQAqsq/PAbNdju4DZNEYHd3HdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjLPbfmsqGZxwBCachbeLUkoU1zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWJkNTM5NDEtNDNkZC0z
M2IyLWFiZWItOWNkMzE5ZDFjZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYG1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGC1sSXJxLJoTOQd6E9w9I0VyJUTDSSW1Nz0qQSXJ1J6hR+Uxd+tcA1W
jCgDFZON/RVyrPS2voMyd8xECrKtoJLSSnvq19PVnIm4DJM5qorgMcqTyyZSyYU2
PxFMD2Ytrq2HYO3JqqkBwphRloP6p1swkhQIibIYOO9vNCxxx1lgI/nc7nnY9LSA
eCypW3NStdOh+wWJ8csodgK1mvCjYF5mBKDhLi22Fu+LoZ1BPM+zdCTdhMIjmpgd
sSINMTnlJ28O3IfmD/0N+ZNZHO78FNjAzj2sNe/mNI/fknhkpaC1L9U3Sfh6pcJD
JLt9Fp5OsJaqaQX3XM+s13VOcs6wWHQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:28 2025 by rpki-client