Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cca3c24-29d9-3ef1-8e07-6edff44aa176.roa
File: 3cca3c24-29d9-3ef1-8e07-6edff44aa176.roa (raw, json)
Hash identifier: gj1c1Md5UbnytIdeDk4cduaXE5KYllY8zEL5Gq94upU=
Subject key identifier: 68:06:DC:EC:48:BE:F3:43:77:69:A6:40:9C:94:20:7F:0F:2B:F3:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F6406392462F7E97F80780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cca3c24-29d9-3ef1-8e07-6edff44aa176.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 96.113.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:40:63:92:46:2f:7e:97:f8:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=474cc9ca-f378-42bd-96e5-e45dedae7edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:b0:3c:3e:53:40:61:1f:46:47:6c:0c:fc:
04:67:f8:4a:96:61:f4:3d:a0:50:9e:d1:8c:dd:d5:
8f:c7:38:e9:2d:cf:5e:0b:55:0f:1c:07:f8:cc:30:
29:46:9c:e7:aa:c5:87:0a:26:86:49:71:dd:bb:0d:
fc:8f:e4:f7:42:6d:ee:fa:d4:f7:d9:69:97:75:b3:
a9:ae:43:0b:4b:40:39:4d:05:18:b5:44:4e:7e:e7:
8b:cd:90:ae:05:77:13:50:e4:ff:8e:a5:fc:e2:d4:
70:86:ee:d2:4f:4e:5b:93:e7:ca:f3:12:ce:36:06:
74:c3:9d:e3:2f:e7:62:e5:7d:a1:e7:dd:d4:16:91:
3e:a2:3d:7c:36:35:2d:4f:a3:a9:2f:ac:93:af:7a:
f4:17:05:b5:46:1a:65:3a:ae:e9:6e:4a:d4:28:f8:
a7:3f:2f:d2:99:7f:e9:18:5c:e9:f2:de:7f:9d:25:
b1:f7:e3:25:0a:e5:56:5e:86:71:d2:6a:a6:b2:dd:
4f:db:56:23:b0:6f:ec:31:5e:50:1d:b6:26:65:21:
5e:85:b8:89:03:0e:d3:83:a1:d4:3d:2c:24:11:99:
be:33:e3:18:5b:3a:44:32:39:30:ed:e0:3d:f2:a3:
ff:da:b7:e1:73:6d:36:7c:e2:9b:44:5a:ba:31:bc:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:06:DC:EC:48:BE:F3:43:77:69:A6:40:9C:94:20:7F:0F:2B:F3:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cca3c24-29d9-3ef1-8e07-6edff44aa176.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.113.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:d4:8b:0c:75:5d:b9:79:cf:08:cc:17:9c:8e:45:9f:61:ac:
2a:bb:cd:0e:7a:e2:6d:21:99:36:73:07:8e:11:35:9d:59:ef:
ea:5e:11:03:32:86:19:8f:41:5b:2c:f9:29:ae:bb:e4:1e:16:
17:d8:84:44:e2:e9:67:21:3c:78:9e:12:1c:bd:39:3a:eb:05:
7d:8f:cc:7b:0c:de:97:dd:ae:f1:db:f3:aa:d7:3a:fd:64:42:
72:e2:d3:4a:12:b8:00:5a:e6:d2:ef:90:00:0c:66:48:64:87:
4d:be:6e:d0:85:1f:bd:45:46:f3:d2:b6:45:ea:eb:f7:f6:fb:
74:f1:68:a4:2e:46:3b:7e:92:d7:44:54:34:1b:f6:36:8f:e0:
8b:8b:15:03:d0:79:b7:7f:b4:ba:d2:d2:65:7e:eb:6f:e6:dd:
3c:95:96:55:97:ca:82:fb:17:21:de:ef:23:84:17:c0:f9:fb:
4a:79:97:2d:b1:44:d6:8e:57:87:ff:52:35:ea:31:1b:3c:a9:
81:6d:84:e1:c4:ae:5d:cb:21:64:1d:3c:f6:6d:63:1a:05:d2:
e5:6b:b5:fe:f3:64:4a:7c:71:d8:f2:64:30:af:d0:f9:93:9d:
14:56:f1:db:1a:98:32:1f:24:7e:fe:be:52:e0:7b:71:70:6f:
e8:05:33:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9kBjkkYvfpf4B4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
NDc0Y2M5Y2EtZjM3OC00MmJkLTk2ZTUtZTQ1ZGVkYWU3ZWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSawPD5TQGEfRkdsDPwEZ/hKlmH0PaBQntGM
3dWPxzjpLc9eC1UPHAf4zDApRpznqsWHCiaGSXHduw38j+T3Qm3u+tT32WmXdbOp
rkMLS0A5TQUYtUROfueLzZCuBXcTUOT/jqX84tRwhu7ST05bk+fK8xLONgZ0w53j
L+di5X2h593UFpE+oj18NjUtT6OpL6yTr3r0FwW1RhplOq7pbkrUKPinPy/SmX/p
GFzp8t5/nSWx9+MlCuVWXoZx0mqmst1P21YjsG/sMV5QHbYmZSFehbiJAw7Tg6HU
PSwkEZm+M+MYWzpEMjkw7eA98qP/2rfhc202fOKbRFq6Mbw3/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgG3OxIvvNDd2mmQJyUIH8PK/O3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NjYTNjMjQtMjlkOS0z
ZWYxLThlMDctNmVkZmY0NGFhMTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYHEIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzUiwx1Xbl5zwjMF5yORZ9hrCq7zQ564m0hmTZzB44RNZ1Z7+peEQMy
hhmPQVss+Smuu+QeFhfYhETi6WchPHieEhy9OTrrBX2PzHsM3pfdrvHb86rXOv1k
QnLi00oSuABa5tLvkAAMZkhkh02+btCFH71FRvPStkXq6/f2+3TxaKQuRjt+ktdE
VDQb9jaP4IuLFQPQebd/tLrS0mV+62/m3TyVllWXyoL7FyHe7yOEF8D5+0p5ly2x
RNaOV4f/UjXqMRs8qYFthOHErl3LIWQdPPZtYxoF0uVrtf7zZEp8cdjyZDCv0PmT
nRRW8dsamDIfJH7+vlLge3Fwb+gFM0w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:54 2025 by rpki-client