Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dcef6c3-52f8-3120-92e7-4f4eb49928e7.roa
File: 1dcef6c3-52f8-3120-92e7-4f4eb49928e7.roa (raw, json)
Hash identifier: M9eZhmsJNGvufIpFx7g1sR0XSH2VZIRGmTe5+YYD1NY=
Subject key identifier: 76:07:AA:A5:25:9E:5D:00:61:9C:A6:0E:7D:E3:9D:EF:27:6E:A5:82
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CB65B724EE7499A828DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dcef6c3-52f8-3120-92e7-4f4eb49928e7.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33657
IP address blocks: 2001:559:c4e9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:b6:5b:72:4e:e7:49:9a:82:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=5ca9778a-6c30-4a58-a3a9-83113c3f1de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4c:72:25:ab:ec:57:f3:7a:20:18:83:6f:c3:
48:76:bc:27:27:da:a6:33:da:54:de:0c:6c:e2:5d:
32:db:02:8e:b0:50:e8:11:08:da:44:2a:19:c8:40:
0a:c6:e3:55:ed:b8:e8:39:a3:9d:3e:8d:a8:79:86:
3b:ab:c3:0f:6b:d7:f7:34:67:21:43:83:9b:80:a5:
00:50:83:aa:23:05:54:c9:f1:ce:f9:31:30:01:d7:
5e:fa:9f:e1:a3:3b:e0:aa:50:7b:02:91:8e:41:67:
b1:74:e1:48:b0:bf:c9:7c:10:16:b0:33:fc:54:1d:
9a:cb:52:aa:fc:47:7f:5a:24:47:e6:38:fa:fb:d1:
6b:76:fd:45:3e:7d:75:a9:cf:44:78:01:d2:d6:af:
b1:18:3e:e6:6a:2c:3c:37:f5:18:96:47:37:ef:29:
d1:f5:e6:0c:82:e7:4c:a5:07:13:5a:5d:03:6c:ec:
9d:1f:76:a5:de:ab:e1:b0:84:68:10:22:4a:5c:35:
f6:26:be:a4:a3:96:63:fa:4b:a1:63:b1:0a:80:8b:
bb:63:26:a0:aa:32:28:93:85:d4:f5:b9:ef:03:d1:
5c:ca:0a:32:26:f0:c7:eb:5c:d9:ab:8e:8b:37:c9:
18:64:86:aa:43:52:3a:e4:d9:25:68:20:ff:32:8c:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:07:AA:A5:25:9E:5D:00:61:9C:A6:0E:7D:E3:9D:EF:27:6E:A5:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dcef6c3-52f8-3120-92e7-4f4eb49928e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c4e9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:fa:15:d8:b2:1e:0a:e9:d8:92:12:a0:1b:db:a2:6f:19:fd:
6a:35:ef:01:9e:a1:40:82:56:df:a4:34:99:8f:53:13:58:ee:
ef:4d:12:5d:67:fb:52:37:c8:8e:81:43:8d:24:61:f4:98:a8:
dc:07:18:1f:f8:97:34:99:ca:42:72:57:41:96:d6:7f:47:0e:
7f:d3:0b:1b:7a:1a:a6:ae:00:9b:ec:f6:27:63:ae:ee:19:14:
0a:7e:a4:aa:e6:96:f3:43:0e:a6:c5:c0:22:b8:3f:4d:76:68:
97:05:ff:87:8f:ce:d3:c0:aa:12:44:42:45:5f:84:0f:1d:e1:
b8:c5:b3:73:46:c7:88:9b:51:40:aa:1f:58:3f:e2:b0:9b:a3:
85:6f:43:b3:df:90:99:15:17:7f:5e:52:4d:1d:b4:67:33:2a:
dd:b7:c3:09:8a:1f:f3:ab:88:93:be:08:ca:e7:41:fb:4d:61:
e4:49:9f:17:d1:18:b5:c1:9a:57:16:24:68:3a:ea:be:29:57:
87:a6:72:84:9d:a0:a6:83:85:29:31:35:75:91:82:5e:ce:c6:
fd:39:bd:f1:7c:c9:6b:ce:24:94:36:67:fa:00:8b:bd:83:4f:
f1:d4:ef:4a:3f:55:12:71:93:7c:6a:ce:41:db:cf:8a:0d:bb:
c0:00:ec:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebLZbck7nSZqCjcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NWNhOTc3OGEtNmMzMC00YTU4LWEzYTktODMxMTNjM2YxZGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUxyJavsV/N6IBiDb8NIdrwnJ9qmM9pU3gxs
4l0y2wKOsFDoEQjaRCoZyEAKxuNV7bjoOaOdPo2oeYY7q8MPa9f3NGchQ4ObgKUA
UIOqIwVUyfHO+TEwAdde+p/hozvgqlB7ApGOQWexdOFIsL/JfBAWsDP8VB2ay1Kq
/Ed/WiRH5jj6+9Frdv1FPn11qc9EeAHS1q+xGD7maiw8N/UYlkc37ynR9eYMgudM
pQcTWl0DbOydH3al3qvhsIRoECJKXDX2Jr6ko5Zj+kuhY7EKgIu7YyagqjIok4XU
9bnvA9FcygoyJvDH61zZq46LN8kYZIaqQ1I65NklaCD/Mow7rQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHYHqqUlnl0AYZymDn3jne8nbqWCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWRjZWY2YzMtNTJmOC0z
MTIwLTkyZTctNGY0ZWI0OTkyOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcTp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABT6FdiyHgrp2JISoBvbom8Z/Wo17wGeoUCCVt+kNJmPUxNY7u9N
El1n+1I3yI6BQ40kYfSYqNwHGB/4lzSZykJyV0GW1n9HDn/TCxt6GqauAJvs9idj
ru4ZFAp+pKrmlvNDDqbFwCK4P012aJcF/4ePztPAqhJEQkVfhA8d4bjFs3NGx4ib
UUCqH1g/4rCbo4VvQ7PfkJkVF39eUk0dtGczKt23wwmKH/OriJO+CMrnQftNYeRJ
nxfRGLXBmlcWJGg66r4pV4emcoSdoKaDhSkxNXWRgl7Oxv05vfF8yWvOJJQ2Z/oA
i72DT/HU70o/VRJxk3xqzkHbz4oNu8AA7P8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:08 2025 by rpki-client