Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af2f61d-8f0d-34de-9b2b-b2529c2c5de1.roa
File: 3af2f61d-8f0d-34de-9b2b-b2529c2c5de1.roa (raw, json)
Hash identifier: cISL8hOUvLjZEHtIgyMnQNhSjdUClExcajxLul4UuX8=
Subject key identifier: 5A:16:02:3A:A6:C1:D7:00:1D:80:DB:E6:43:47:69:73:15:F6:D2:47
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D43DB35115514F2FAED00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af2f61d-8f0d-34de-9b2b-b2529c2c5de1.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 21508
IP address blocks: 69.139.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:43:db:35:11:55:14:f2:fa:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=4df203aa-c24f-44bc-9077-946df0263c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:af:3b:ac:70:79:ac:b3:12:01:dd:6e:ee:
ef:1a:f7:92:40:0a:ee:88:ea:c4:c6:a3:39:e7:54:
67:f8:28:5c:64:2f:39:ed:89:56:74:ca:74:60:0c:
42:9d:ec:8e:82:72:32:0e:b5:b0:86:d7:9b:b5:92:
7c:3e:f6:08:ee:1f:3a:17:69:ac:28:3d:df:ca:ef:
e4:b1:2c:67:8d:ca:0b:ce:8b:7f:5e:f7:90:c3:8c:
a8:fc:48:48:c9:60:5d:e5:25:f7:03:06:48:45:e5:
63:f9:4d:fa:8a:0a:f7:98:cc:09:8c:73:2b:10:17:
e7:ee:6c:14:f5:84:be:b0:c4:99:f9:a7:3f:f4:f6:
fd:55:37:e4:9b:11:c1:f0:68:4b:eb:21:88:e7:58:
39:92:bd:42:1f:75:85:b7:fa:bf:ff:75:51:93:b2:
01:72:19:9e:f5:c4:99:6b:c9:ef:85:25:6f:15:c4:
4c:1d:01:41:44:28:8e:ed:eb:34:01:58:08:03:82:
c0:24:47:72:8a:e0:f6:1e:52:7a:c2:7c:15:22:3d:
07:2a:da:39:7f:2d:a8:35:e3:e6:2a:91:66:9e:c2:
f8:e1:65:9a:07:64:4c:0c:0e:5a:0f:ad:e9:c5:f5:
84:a3:b9:4e:6e:6a:4e:ef:af:88:39:b9:b8:72:bc:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:02:3A:A6:C1:D7:00:1D:80:DB:E6:43:47:69:73:15:F6:D2:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af2f61d-8f0d-34de-9b2b-b2529c2c5de1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.139.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:54:36:5c:2f:3b:84:1c:3b:dd:e7:63:31:19:73:c7:b6:3e:
24:40:f6:2c:06:99:1f:1a:80:56:fe:ce:f4:ae:28:33:2e:d5:
75:7c:7f:ba:84:81:28:c9:58:88:f3:e0:44:9b:96:64:bb:5f:
8c:a0:29:43:ef:bd:c8:44:a9:3f:bf:fb:03:30:cb:3a:04:d6:
20:91:33:06:79:66:bf:4d:7a:34:89:44:ca:b2:4c:04:79:ad:
12:f7:2f:3a:c1:be:98:96:70:10:75:81:fa:cd:c1:46:38:86:
37:aa:ec:f2:ac:2b:a7:46:ed:16:b7:e1:00:dc:b6:43:1f:b8:
7e:8d:51:52:40:9e:3c:e6:20:69:f8:8d:0a:10:42:14:a2:92:
77:fd:bf:ba:bf:76:bc:d9:f5:19:72:75:ab:4b:dc:a2:d9:e1:
d6:f4:a8:d2:8b:fe:1b:9a:79:13:c5:f8:6e:10:7d:88:5e:ca:
42:af:4b:37:3b:9b:ac:33:44:6c:cb:3e:d3:f1:7b:e0:64:d8:
4c:96:97:c4:ee:bf:c7:d9:da:6a:a3:23:44:9f:10:44:cc:c2:
a3:aa:97:87:44:19:72:bf:8d:59:a5:a5:c8:00:af:d3:5d:ce:
a9:2d:5b:20:2a:ee:6b:7b:2a:01:7c:ec:42:0e:00:32:37:5c:
76:61:d2:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebUPbNRFVFPL67QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NGRmMjAzYWEtYzI0Zi00NGJjLTkwNzctOTQ2ZGYwMjYzYzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozuvO6xweayzEgHdbu7vGveSQAruiOrExqM5
51Rn+ChcZC857YlWdMp0YAxCneyOgnIyDrWwhtebtZJ8PvYI7h86F2msKD3fyu/k
sSxnjcoLzot/XveQw4yo/EhIyWBd5SX3AwZIReVj+U36igr3mMwJjHMrEBfn7mwU
9YS+sMSZ+ac/9Pb9VTfkmxHB8GhL6yGI51g5kr1CH3WFt/q//3VRk7IBchme9cSZ
a8nvhSVvFcRMHQFBRCiO7es0AVgIA4LAJEdyiuD2HlJ6wnwVIj0HKto5fy2oNePm
KpFmnsL44WWaB2RMDA5aD63pxfWEo7lObmpO76+IObm4crxrlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFoWAjqmwdcAHYDb5kNHaXMV9tJHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FmMmY2MWQtOGYwZC0z
NGRlLTliMmItYjI1MjljMmM1ZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARYu6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdUNlwvO4QcO93nYzEZc8e2PiRA9iwGmR8agFb+zvSuKDMu1XV8f7qE
gSjJWIjz4ESblmS7X4ygKUPvvchEqT+/+wMwyzoE1iCRMwZ5Zr9NejSJRMqyTAR5
rRL3LzrBvpiWcBB1gfrNwUY4hjeq7PKsK6dG7Ra34QDctkMfuH6NUVJAnjzmIGn4
jQoQQhSiknf9v7q/drzZ9RlydatL3KLZ4db0qNKL/huaeRPF+G4QfYheykKvSzc7
m6wzRGzLPtPxe+Bk2EyWl8Tuv8fZ2mqjI0SfEETMwqOql4dEGXK/jVmlpcgAr9Nd
zqktWyAq7mt7KgF87EIOADI3XHZh0s0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:13:12 2025 by rpki-client