Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bfb2089-a959-371c-81a1-68a807a40878.roa
File: 3bfb2089-a959-371c-81a1-68a807a40878.roa (raw, json)
Hash identifier: JuXwyd05I5WjU3HEHuwHCqeRjQRvunIQz1stoUvCJvo=
Subject key identifier: A1:AE:28:77:0F:44:05:2C:F5:98:88:4F:CC:64:A7:4A:A3:2B:75:03
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BC7FE69D02FBB17EA8600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bfb2089-a959-371c-81a1-68a807a40878.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7725
IP address blocks: 96.108.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:c7:fe:69:d0:2f:bb:17:ea:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=d0912c92-18f1-4e01-8612-d17ff07b8471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:4f:5f:fa:36:f1:fe:c7:29:07:cb:b4:94:
2e:b2:3c:45:e2:be:12:6f:3b:f6:38:97:11:ca:fc:
83:10:90:32:88:e3:8a:56:28:bd:fc:cc:a9:73:e8:
5d:91:85:f5:29:85:71:b0:ab:3a:54:fe:08:60:11:
b8:d5:8c:7f:54:31:0a:18:95:6a:01:fa:52:42:96:
97:90:05:64:a3:e5:a1:2d:07:2e:f7:c6:d2:13:94:
53:13:f4:12:08:1c:e1:f0:77:ec:28:71:32:82:db:
c8:ed:54:cf:e1:83:7c:56:59:99:2d:32:31:dc:b6:
62:07:ea:74:84:22:3f:df:fd:b6:91:2a:10:05:cb:
0a:c4:57:f7:5c:5c:25:b4:13:2e:3b:e2:14:e0:f8:
11:89:3b:5c:21:81:0c:07:a5:d1:fa:fa:d5:bf:82:
1e:f2:b4:35:0e:c1:ac:47:55:af:e7:87:29:7c:ea:
e6:38:c6:c2:c0:88:56:d2:86:c8:45:39:f5:0b:26:
71:68:94:26:19:2c:af:74:ca:82:57:ad:06:3c:71:
61:06:66:d2:44:91:74:0c:a8:6f:6a:26:0d:25:ce:
8a:c5:2d:11:dd:56:ad:38:01:8d:fc:3f:b5:32:92:
42:cc:d7:80:1e:10:3a:6c:08:5c:11:74:3e:93:5b:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AE:28:77:0F:44:05:2C:F5:98:88:4F:CC:64:A7:4A:A3:2B:75:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bfb2089-a959-371c-81a1-68a807a40878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.108.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:94:b4:94:fc:48:f0:4c:46:77:ba:16:a7:62:ef:eb:0e:60:
d4:66:93:bc:08:9a:ce:94:5b:90:04:8f:c5:c9:1d:b7:c0:db:
0b:e7:39:0a:a7:26:e3:05:1c:6a:83:d5:5a:51:b2:76:67:65:
a8:bc:cd:30:01:66:c1:44:00:7d:19:c9:22:07:0c:57:f2:f3:
38:d7:48:42:48:17:e9:3c:1a:b2:c1:fb:fb:0c:56:2f:30:b2:
a2:f4:1b:b5:7a:52:6e:e6:1e:50:00:bb:91:99:36:4b:62:c2:
b7:55:38:0c:25:65:91:ef:8e:7d:d5:a0:66:67:ea:58:1c:d8:
f2:8b:fe:5f:91:72:e6:47:7d:b1:7d:c8:18:5f:ff:36:e2:64:
7e:3c:ab:d5:00:db:a4:85:78:a3:ef:5c:be:35:2c:a3:b8:3a:
46:f6:60:77:7d:80:67:b2:4d:ef:00:2e:e2:06:61:27:ca:34:
3c:57:a8:34:f8:65:00:54:f4:ed:c1:87:db:e7:4f:98:42:fb:
92:4d:cc:a0:87:66:f3:fe:ad:8c:aa:10:a7:59:4b:0c:dd:4a:
40:fc:65:37:89:5a:9d:d0:b5:d3:56:6c:5e:36:bc:04:fb:fc:
97:66:4b:82:64:34:83:91:c0:93:94:5c:59:c9:85:01:c6:58:
9c:ce:e7:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea8f+adAvuxfqhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZDA5MTJjOTItMThmMS00ZTAxLTg2MTItZDE3ZmYwN2I4NDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlodPX/o28f7HKQfLtJQusjxF4r4Sbzv2OJcR
yvyDEJAyiOOKVii9/Mypc+hdkYX1KYVxsKs6VP4IYBG41Yx/VDEKGJVqAfpSQpaX
kAVko+WhLQcu98bSE5RTE/QSCBzh8HfsKHEygtvI7VTP4YN8VlmZLTIx3LZiB+p0
hCI/3/22kSoQBcsKxFf3XFwltBMuO+IU4PgRiTtcIYEMB6XR+vrVv4Ie8rQ1DsGs
R1Wv54cpfOrmOMbCwIhW0obIRTn1CyZxaJQmGSyvdMqCV60GPHFhBmbSRJF0DKhv
aiYNJc6KxS0R3VatOAGN/D+1MpJCzNeAHhA6bAhcEXQ+k1tLZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGuKHcPRAUs9ZiIT8xkp0qjK3UDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JmYjIwODktYTk1OS0z
NzFjLTgxYTEtNjhhODA3YTQwODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYGxyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2UtJT8SPBMRne6Fqdi7+sOYNRmk7wIms6UW5AEj8XJHbfA2wvnOQqn
JuMFHGqD1VpRsnZnZai8zTABZsFEAH0ZySIHDFfy8zjXSEJIF+k8GrLB+/sMVi8w
sqL0G7V6Um7mHlAAu5GZNktiwrdVOAwlZZHvjn3VoGZn6lgc2PKL/l+RcuZHfbF9
yBhf/zbiZH48q9UA26SFeKPvXL41LKO4Okb2YHd9gGeyTe8ALuIGYSfKNDxXqDT4
ZQBU9O3Bh9vnT5hC+5JNzKCHZvP+rYyqEKdZSwzdSkD8ZTeJWp3QtdNWbF42vAT7
/JdmS4JkNIORwJOUXFnJhQHGWJzO598=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:47:20 2025 by rpki-client