Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36d82055-1915-3c7f-abf0-f42305a828fb.roa
File: 36d82055-1915-3c7f-abf0-f42305a828fb.roa (raw, json)
Hash identifier: BzqcvZKKSHY9vOvYSAu56RzsECeFgtq+Hi2iiq9CmLw=
Subject key identifier: 32:71:80:17:A3:3E:3A:47:FB:1D:04:01:85:EC:41:18:95:54:06:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF300FAE17575AF76CD480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36d82055-1915-3c7f-abf0-f42305a828fb.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 24.13.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:30:0f:ae:17:57:5a:f7:6c:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=5a7a5528-33ab-4605-9b44-ff39465624b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:aa:3f:8e:c2:76:78:46:ae:22:a0:ae:02:
41:39:b2:71:10:22:95:dc:73:eb:f7:2a:64:8d:6f:
10:4c:22:1d:cc:82:f2:13:6b:1d:2a:bd:5b:14:c9:
54:fe:e0:b0:48:a1:06:9b:5b:5a:4e:00:9b:c7:cf:
01:a7:c0:e7:57:fb:2e:b4:56:d0:67:63:19:be:1f:
e4:cf:4c:f0:d3:38:bf:51:2f:c7:fd:6f:65:1f:ef:
a4:37:11:eb:64:64:7d:d0:26:5d:40:da:50:65:aa:
c5:4c:fe:32:16:fd:f4:11:6f:f6:2d:ff:09:ee:46:
09:24:8d:28:af:10:29:03:be:f5:e1:a2:c4:6d:de:
c2:8a:87:d4:14:0e:a2:ff:60:c7:11:8e:ee:5a:ce:
db:62:13:8e:db:fb:05:aa:47:82:8a:8c:cb:93:46:
ed:f6:30:10:71:b9:0b:85:c6:35:e3:d3:8a:fd:16:
64:8c:3e:cd:ed:18:c6:c1:29:7c:78:ef:0c:96:b7:
89:fb:e0:47:f3:d0:29:db:54:30:76:1d:c5:ee:34:
bf:4f:2a:a1:5d:b3:df:da:d0:17:c7:fc:fc:66:90:
6f:cc:c0:b3:5e:90:4e:9f:b8:75:3e:76:b8:1f:83:
92:cb:02:da:be:71:37:37:53:e9:ec:0b:9c:0e:51:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:71:80:17:A3:3E:3A:47:FB:1D:04:01:85:EC:41:18:95:54:06:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36d82055-1915-3c7f-abf0-f42305a828fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.13.246.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:64:b4:2b:6a:cf:79:20:be:c8:1f:96:0a:4b:8d:51:60:ff:
5c:1e:dd:66:a3:76:53:4a:3b:d7:f1:ba:20:5f:60:29:cf:5d:
d8:b0:31:88:0f:28:ca:1b:bf:87:7e:f2:12:47:ee:ba:0c:de:
5a:d9:27:af:e2:e2:1b:2f:c3:a0:b2:94:78:87:13:63:4c:2e:
24:f6:5e:e0:37:c6:39:c8:22:d1:94:19:49:75:71:b5:13:00:
e6:5c:c3:df:6f:a9:e6:a4:d2:f7:6e:94:a5:b3:2e:7b:5a:f0:
ef:1a:ae:d3:06:8f:44:7c:0f:84:29:cb:99:39:ac:aa:0e:22:
7e:1b:11:04:2d:ec:b8:33:50:7d:26:0c:76:55:d9:88:5d:e6:
02:a2:b0:df:5e:21:9b:07:5b:e0:e8:28:d1:4b:43:97:99:0b:
3c:f1:5e:c2:eb:92:6f:22:03:83:37:fd:6e:1d:d8:44:4a:37:
2d:ac:72:9e:b4:2b:6e:6e:62:57:dd:dd:2a:b3:a0:0e:83:c8:
25:e0:8e:91:23:e4:9d:97:a5:30:b4:cb:22:f1:17:ee:a1:d1:
b9:07:59:81:43:cc:e9:a8:e1:6a:27:5d:6c:2e:e7:01:51:d2:
ff:9a:b5:f4:93:5f:ca:3e:d8:3c:38:dd:ab:54:da:80:75:be:
7b:b1:54:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrzAPrhdXWvds1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NWE3YTU1MjgtMzNhYi00NjA1LTliNDQtZmYzOTQ2NTYyNGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnKqP47CdnhGriKgrgJBObJxECKV3HPr9ypk
jW8QTCIdzILyE2sdKr1bFMlU/uCwSKEGm1taTgCbx88Bp8DnV/sutFbQZ2MZvh/k
z0zw0zi/US/H/W9lH++kNxHrZGR90CZdQNpQZarFTP4yFv30EW/2Lf8J7kYJJI0o
rxApA7714aLEbd7CiofUFA6i/2DHEY7uWs7bYhOO2/sFqkeCiozLk0bt9jAQcbkL
hcY149OK/RZkjD7N7RjGwSl8eO8MlreJ++BH89Ap21Qwdh3F7jS/TyqhXbPf2tAX
x/z8ZpBvzMCzXpBOn7h1Pna4H4OSywLavnE3N1Pp7AucDlE2uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJxgBejPjpH+x0EAYXsQRiVVAZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzZkODIwNTUtMTkxNS0z
YzdmLWFiZjAtZjQyMzA1YTgyOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGA32MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtktCtqz3kgvsgflgpLjVFg/1we3WajdlNKO9fxuiBfYCnPXdiwMYgP
KMobv4d+8hJH7roM3lrZJ6/i4hsvw6CylHiHE2NMLiT2XuA3xjnIItGUGUl1cbUT
AOZcw99vqeak0vdulKWzLnta8O8artMGj0R8D4Qpy5k5rKoOIn4bEQQt7LgzUH0m
DHZV2Yhd5gKisN9eIZsHW+DoKNFLQ5eZCzzxXsLrkm8iA4M3/W4d2ERKNy2scp60
K25uYlfd3SqzoA6DyCXgjpEj5J2XpTC0yyLxF+6h0bkHWYFDzOmo4WonXWwu5wFR
0v+atfSTX8o+2Dw43atU2oB1vnuxVM0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:21:49 2025 by rpki-client