Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27895bad-466b-3654-8ca4-a0fdd071fb8b.roa
File: 27895bad-466b-3654-8ca4-a0fdd071fb8b.roa (raw, json)
Hash identifier: SioLQ73fPSJDVmJCvlgEXsPkz+svEiBQKc+4j744dy4=
Subject key identifier: D1:91:17:B1:57:12:63:DD:92:85:56:BC:F5:D5:66:7F:A1:B9:A2:FF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF2ECEC708CADBBC25D1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27895bad-466b-3654-8ca4-a0fdd071fb8b.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 24.1.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:2e:ce:c7:08:ca:db:bc:25:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=cb0ab576-9eb3-481a-9169-a4f4eaadb337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:8f:78:d2:a5:ae:cd:ba:54:9c:65:9b:3e:
d4:df:eb:2d:bf:6e:b1:21:ee:64:c5:0c:d7:79:c9:
5e:6e:f0:01:7d:66:98:69:2f:f8:1b:54:f9:87:06:
30:73:14:f3:e9:5c:b7:67:ab:9b:d0:53:af:b0:5b:
4c:b7:82:6c:79:e3:e6:df:eb:de:18:5f:c0:ff:83:
39:33:c6:fd:23:b5:42:0d:2b:fe:f9:9d:31:6f:ef:
02:96:03:44:b4:78:4d:15:41:8c:0f:50:73:77:06:
fe:69:6a:f5:76:10:17:3a:66:bc:28:c9:d3:44:ef:
8a:23:81:21:86:1f:2a:6f:80:09:6f:63:b9:e6:be:
a4:c0:60:0d:53:0e:59:4d:58:27:b4:fb:61:85:f9:
6f:d0:2a:28:0a:b1:99:6e:94:87:f3:06:a3:c7:43:
a7:07:9f:2c:35:37:8b:89:49:c9:e2:92:e6:1d:7b:
84:71:aa:4d:2b:48:f6:e2:81:02:b9:78:a2:94:06:
50:ff:3a:61:95:3d:db:a4:8f:4c:96:45:f1:08:78:
2a:83:f3:f3:26:c7:69:08:9a:bd:9f:a5:f8:9c:98:
20:71:57:29:84:28:47:0f:96:c0:2b:b3:6c:bc:c6:
22:24:6c:a8:4b:09:99:76:88:ae:fb:58:a7:58:25:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:91:17:B1:57:12:63:DD:92:85:56:BC:F5:D5:66:7F:A1:B9:A2:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27895bad-466b-3654-8ca4-a0fdd071fb8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.26.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:9e:83:b5:7c:3d:ff:f4:bb:ea:9e:0a:31:f3:3b:03:cd:9b:
dc:ce:99:b1:8f:a7:5b:30:f1:70:7e:9d:a4:01:3b:91:9c:81:
cd:ed:6c:ce:fc:e9:e9:66:1e:a0:26:63:a8:29:1e:c0:18:8f:
99:3c:ba:ee:ad:fe:30:36:04:d1:55:b8:09:80:fc:06:99:3f:
ee:b1:3c:6e:77:b9:88:33:ca:dd:29:81:3d:eb:51:9f:94:e1:
e6:9c:55:b4:e4:e2:93:03:39:ae:b1:0a:b7:46:76:3d:d6:28:
29:1c:f9:2f:a1:0a:9f:a5:28:49:85:71:b6:7e:fc:5f:df:fe:
0a:e7:6c:a3:53:50:a1:6f:24:1c:10:7a:de:ee:a5:09:38:92:
c8:28:04:a4:f9:db:04:06:6a:d5:d9:04:14:a5:1f:23:d4:03:
45:24:4c:f3:b6:6e:d5:75:e4:82:86:b7:89:48:33:0c:75:4e:
6d:47:2e:9c:e0:71:e1:77:80:a7:c5:36:d6:60:14:76:a5:d0:
06:a0:05:fe:ec:4b:cb:35:b4:b5:af:e3:e3:3d:9d:a4:72:6d:
f9:f3:88:d5:6e:6c:4a:eb:a2:5e:83:49:bb:24:80:dd:27:07:
43:de:3a:92:fe:7a:47:00:dd:26:7d:7b:c4:36:04:aa:87:68:
12:e9:f2:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksry7OxwjK27wl0cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2IwYWI1NzYtOWViMy00ODFhLTkxNjktYTRmNGVhYWRiMzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH6PeNKlrs26VJxlmz7U3+stv26xIe5kxQzX
eclebvABfWaYaS/4G1T5hwYwcxTz6Vy3Z6ub0FOvsFtMt4JseePm3+veGF/A/4M5
M8b9I7VCDSv++Z0xb+8ClgNEtHhNFUGMD1Bzdwb+aWr1dhAXOma8KMnTRO+KI4Eh
hh8qb4AJb2O55r6kwGANUw5ZTVgntPthhflv0CooCrGZbpSH8wajx0OnB58sNTeL
iUnJ4pLmHXuEcapNK0j24oECuXiilAZQ/zphlT3bpI9MlkXxCHgqg/PzJsdpCJq9
n6X4nJggcVcphChHD5bAK7NsvMYiJGyoSwmZdoiu+1inWCV3VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNGRF7FXEmPdkoVWvPXVZn+huaL/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjc4OTViYWQtNDY2Yi0z
NjU0LThjYTQtYTBmZGQwNzFmYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAEaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqeg7V8Pf/0u+qeCjHzOwPNm9zOmbGPp1sw8XB+naQBO5Gcgc3tbM78
6elmHqAmY6gpHsAYj5k8uu6t/jA2BNFVuAmA/AaZP+6xPG53uYgzyt0pgT3rUZ+U
4eacVbTk4pMDOa6xCrdGdj3WKCkc+S+hCp+lKEmFcbZ+/F/f/grnbKNTUKFvJBwQ
et7upQk4ksgoBKT52wQGatXZBBSlHyPUA0UkTPO2btV15IKGt4lIMwx1Tm1HLpzg
ceF3gKfFNtZgFHal0AagBf7sS8s1tLWv4+M9naRybfnziNVubErrol6DSbskgN0n
B0PeOpL+ekcA3SZ9e8Q2BKqHaBLp8oo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:51:17 2025 by rpki-client