Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f574d8a-eaad-3228-b73d-47946fd554ba.roa
File: 3f574d8a-eaad-3228-b73d-47946fd554ba.roa (raw, json)
Hash identifier: Ki2WifOc5Gk6PLdHu2wKievXd52OlP9mdw90TlgVqKc=
Subject key identifier: 42:04:18:3E:40:37:0D:83:63:42:F6:71:9A:C9:D7:A7:C1:D3:70:12
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D15AE1CED7F994B47DD20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f574d8a-eaad-3228-b73d-47946fd554ba.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 19047
IP address blocks: 2001:559:0:88::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:15:ae:1c:ed:7f:99:4b:47:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=b9e20395-bf38-47f9-9ca1-6d5f24acc7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:b5:2f:17:6c:4b:dc:23:01:9b:23:0f:6f:
cf:6b:e9:d7:97:08:75:9f:a2:e8:61:f9:67:dd:70:
92:5d:fc:c1:c8:ad:72:dc:f4:bd:16:46:1f:3b:c7:
80:90:c7:48:f2:81:74:0a:c7:33:c1:5d:b6:41:5e:
bb:7e:88:5a:21:78:54:97:bd:b8:89:ae:3e:ac:2a:
3f:1d:ec:40:56:76:56:97:ad:85:1c:7a:b0:6f:22:
af:ae:0c:f9:d3:3b:44:f1:e6:fc:97:41:c3:7d:67:
98:10:87:bb:f2:0a:66:56:6d:01:b0:d0:59:0d:f5:
34:6c:9e:71:48:d9:0d:4d:fa:af:e2:74:d9:a3:61:
f0:d8:3b:1c:11:96:bb:9b:be:2a:c3:3f:f6:68:b2:
88:09:dd:36:6a:33:5d:03:f1:c9:e4:12:37:aa:2d:
77:1f:9c:92:c9:a6:ad:d3:c1:30:f0:af:7d:71:d8:
39:67:1d:29:23:57:8a:9f:0a:6e:fe:f4:d7:0f:f1:
e6:42:ab:6a:db:f6:4f:a8:f8:d1:93:f2:a7:3d:61:
5b:5e:f7:9b:8f:99:ac:c4:1f:75:48:4d:f1:23:81:
37:cc:f9:de:86:a1:08:e0:65:6b:07:74:27:58:11:
80:5a:21:dd:58:56:e5:5a:fc:b1:a6:27:09:f3:93:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:04:18:3E:40:37:0D:83:63:42:F6:71:9A:C9:D7:A7:C1:D3:70:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f574d8a-eaad-3228-b73d-47946fd554ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:0:88::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:ab:65:7b:95:2f:63:e1:f8:15:32:d2:fa:78:30:e8:fa:9b:
c3:75:99:af:e5:e6:44:08:bf:dd:6b:45:e4:96:e1:a4:41:69:
1f:27:9b:17:79:de:c2:2c:18:c3:43:c7:60:8c:75:8d:4a:0c:
c7:6d:4f:8d:48:a7:cb:02:08:3a:d6:c7:e1:c5:13:1e:2a:79:
50:ad:da:47:4c:da:70:a9:52:e7:49:76:f8:77:f4:53:fe:8f:
d1:51:43:19:85:33:58:38:f5:3e:85:33:f6:20:bb:79:86:eb:
19:6b:8e:48:d0:2d:87:9c:b3:4b:69:62:28:77:5e:8f:47:d2:
d4:34:dc:7c:01:48:c7:c0:d1:62:a3:e6:93:62:81:f0:ad:01:
d0:76:01:8c:d0:6f:07:99:95:9a:1f:75:49:c5:f9:66:91:1d:
ff:c2:59:f7:52:28:5c:99:6f:bd:ec:f8:28:1c:31:f3:14:28:
51:88:f1:bc:e8:bc:0f:d3:50:47:72:74:d4:b6:29:af:9c:54:
2d:ba:7e:99:24:3b:7d:9d:81:d4:04:c1:bb:90:05:a9:f5:16:
ed:5e:aa:7b:d1:b3:9a:c8:46:3d:57:d0:e4:e7:e4:e8:85:c6:
e9:af:80:ba:0a:51:66:d3:93:dc:c8:56:b4:48:a1:ba:13:02:
ff:9f:6b:e6
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEiebRWuHO1/mUtH3SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
YjllMjAzOTUtYmYzOC00N2Y5LTljYTEtNmQ1ZjI0YWNjN2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQi1LxdsS9wjAZsjD2/Pa+nXlwh1n6LoYfln
3XCSXfzByK1y3PS9FkYfO8eAkMdI8oF0CsczwV22QV67fohaIXhUl724ia4+rCo/
HexAVnZWl62FHHqwbyKvrgz50ztE8eb8l0HDfWeYEIe78gpmVm0BsNBZDfU0bJ5x
SNkNTfqv4nTZo2Hw2DscEZa7m74qwz/2aLKICd02ajNdA/HJ5BI3qi13H5ySyaat
08Ew8K99cdg5Zx0pI1eKnwpu/vTXD/HmQqtq2/ZPqPjRk/KnPWFbXvebj5msxB91
SE3xI4E3zPnehqEI4GVrB3QnWBGAWiHdWFblWvyxpicJ85OQ6QIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFEIEGD5ANw2DY0L2cZrJ16fB03ASMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y1NzRkOGEtZWFhZC0z
MjI4LWI3M2QtNDc5NDZmZDU1NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA
AIgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEA3atle5UvY+H4FTLS+ngw6Pqbw3WZr+XmRAi/3WtF5JbhpEFp
HyebF3newiwYw0PHYIx1jUoMx21PjUinywIIOtbH4cUTHip5UK3aR0zacKlS50l2
+Hf0U/6P0VFDGYUzWDj1PoUz9iC7eYbrGWuOSNAth5yzS2liKHdej0fS1DTcfAFI
x8DRYqPmk2KB8K0B0HYBjNBvB5mVmh91ScX5ZpEd/8JZ91IoXJlvvez4KBwx8xQo
UYjxvOi8D9NQR3J01LYpr5xULbp+mSQ7fZ2B1ATBu5AFqfUW7V6qe9GzmshGPVfQ
5Ofk6IXG6a+AugpRZtOT3MhWtEihuhMC/59r5g==
-----END CERTIFICATE-----
Generated at Thu Apr 10 08:23:00 2025 by rpki-client