Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d5a450-f01b-34e9-aed6-7f26ab12c1dc.roa
File: 20d5a450-f01b-34e9-aed6-7f26ab12c1dc.roa (raw, json)
Hash identifier: NKDnMBEhmddQ8LL6ICIFM5dkxVRNnLjeFl067pSKX70=
Subject key identifier: AD:08:0E:FE:33:9A:F6:6A:01:44:4F:37:20:84:C3:0E:ED:44:7A:02
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203CB4980C682B42E20EC300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d5a450-f01b-34e9-aed6-7f26ab12c1dc.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 76.111.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:b4:98:0c:68:2b:42:e2:0e:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=95783f82-a892-4dfb-bfb7-856aceebcde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:c2:d8:1e:7d:e2:d4:07:3b:14:03:43:dd:
f4:9f:ea:5a:65:19:f0:d1:bc:d2:7d:c8:72:11:f0:
d4:0b:75:7c:6c:cf:2a:fd:06:f6:00:4a:00:fd:cf:
2b:02:a9:6b:35:69:7e:01:04:c5:2b:a2:54:51:37:
70:3e:6d:61:1f:a4:e9:d2:ae:f3:d3:27:0f:7b:80:
76:d2:0a:9d:c9:f0:46:97:10:3d:f8:ce:a1:23:ef:
41:66:9e:63:4e:b2:32:5c:1f:a5:2c:5e:99:00:8a:
8c:f0:50:5a:e0:1d:f1:cb:45:c2:fc:a0:d6:e2:6b:
1e:8d:17:21:e6:03:26:48:1a:fe:96:17:ac:19:55:
f0:ce:36:1d:5d:2c:49:63:15:76:7f:49:91:44:95:
5d:5f:45:d8:34:77:b4:96:d1:73:f8:1e:08:80:1c:
90:4e:8c:ae:07:f3:f4:3a:e5:fd:1d:14:fd:f6:a9:
25:e2:57:55:b4:cb:02:d4:a1:02:cd:b6:2b:07:f3:
4a:2b:bb:86:32:0b:e1:c7:69:3c:11:22:e5:7e:46:
e6:59:35:79:84:4d:8d:31:85:5f:0e:a4:51:6d:03:
a8:48:21:23:b8:1e:4f:65:1f:5f:07:75:9c:dc:b8:
8a:0c:c2:2d:02:9c:b8:fa:a9:48:7c:16:56:43:a3:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:08:0E:FE:33:9A:F6:6A:01:44:4F:37:20:84:C3:0E:ED:44:7A:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d5a450-f01b-34e9-aed6-7f26ab12c1dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.111.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d3:28:9a:1a:7f:28:d1:6d:30:2f:d2:f0:4c:b4:b1:ea:17:
67:73:a4:83:c5:95:3d:7d:fe:70:9d:c5:f9:a7:f8:8a:b5:10:
c5:dc:c6:78:95:0a:a5:85:c9:b4:71:90:49:e2:25:17:cf:f0:
bb:ce:eb:20:a5:c5:8a:93:3c:c8:f9:d2:69:20:64:eb:b1:bf:
51:8d:a3:e6:cc:a9:86:37:3d:7d:48:0e:99:19:7c:b1:7e:bb:
92:8d:0b:b1:0d:05:b6:21:8d:3e:61:c7:68:05:2a:12:90:04:
07:07:a7:b1:ad:c4:98:d7:68:a7:10:d8:9c:c9:a3:14:87:ae:
79:35:56:f3:be:d7:4e:79:a8:ee:8b:7d:4d:f2:bc:e5:37:58:
ef:3e:01:38:33:c7:37:a7:35:89:74:d7:b6:2d:f9:b7:b3:e9:
97:d6:7e:12:73:27:1f:47:e2:6d:d2:1c:42:74:ff:d3:cf:27:
3a:23:4f:cb:48:87:42:1b:ae:10:5a:2f:f3:40:2d:21:45:c7:
76:e2:86:df:a5:87:1d:90:d0:2d:48:0f:de:cd:55:8c:e8:30:
17:e4:8f:a9:9f:58:09:09:e8:80:1c:d9:ee:d3:05:b3:46:0a:
00:bd:2c:98:fb:62:51:12:51:44:ca:cd:35:b2:74:f4:9a:bb:
65:70:8e:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPLSYDGgrQuIOwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
OTU3ODNmODItYTg5Mi00ZGZiLWJmYjctODU2YWNlZWJjZGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwrC2B594tQHOxQDQ930n+paZRnw0bzSfchy
EfDUC3V8bM8q/Qb2AEoA/c8rAqlrNWl+AQTFK6JUUTdwPm1hH6Tp0q7z0ycPe4B2
0gqdyfBGlxA9+M6hI+9BZp5jTrIyXB+lLF6ZAIqM8FBa4B3xy0XC/KDW4msejRch
5gMmSBr+lhesGVXwzjYdXSxJYxV2f0mRRJVdX0XYNHe0ltFz+B4IgByQToyuB/P0
OuX9HRT99qkl4ldVtMsC1KECzbYrB/NKK7uGMgvhx2k8ESLlfkbmWTV5hE2NMYVf
DqRRbQOoSCEjuB5PZR9fB3Wc3LiKDMItApy4+qlIfBZWQ6PEgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0IDv4zmvZqAURPNyCEww7tRHoCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBkNWE0NTAtZjAxYi0z
NGU5LWFlZDYtN2YyNmFiMTJjMWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTG8wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3TKJoafyjRbTAv0vBMtLHqF2dzpIPFlT19/nCdxfmn+Iq1EMXcxniV
CqWFybRxkEniJRfP8LvO6yClxYqTPMj50mkgZOuxv1GNo+bMqYY3PX1IDpkZfLF+
u5KNC7ENBbYhjT5hx2gFKhKQBAcHp7GtxJjXaKcQ2JzJoxSHrnk1VvO+1055qO6L
fU3yvOU3WO8+ATgzxzenNYl017Yt+bez6ZfWfhJzJx9H4m3SHEJ0/9PPJzojT8tI
h0IbrhBaL/NALSFFx3biht+lhx2Q0C1ID97NVYzoMBfkj6mfWAkJ6IAc2e7TBbNG
CgC9LJj7YlESUUTKzTWydPSau2Vwjgo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:14:34 2025 by rpki-client