Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4883d3c3-6e79-3f73-8b11-27a4e5cf9a1e.roa
File: 4883d3c3-6e79-3f73-8b11-27a4e5cf9a1e.roa (raw, json)
Hash identifier: w/XTMezyTRpRIsA57Odurxt30Huie3JZ2bW67zBSBmQ=
Subject key identifier: A5:DB:2A:1C:62:9C:15:06:18:73:E3:67:A3:36:98:82:9C:68:F3:DC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6B7627A7DAEF76D325CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4883d3c3-6e79-3f73-8b11-27a4e5cf9a1e.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 67.171.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:b7:62:7a:7d:ae:f7:6d:32:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=8345bd27-6526-482b-9c07-8a440a9dfc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:f3:7f:b3:ac:11:e6:ce:c2:22:51:e1:ca:
e8:07:3c:fe:10:a6:05:22:27:b7:1a:d4:93:41:01:
5b:1f:17:b6:05:18:7c:69:45:73:07:33:0c:df:a6:
b5:df:e3:4c:68:38:67:0b:97:4a:f0:6f:84:17:27:
66:87:23:75:ce:75:ee:67:5c:53:e2:95:a5:59:3f:
c1:6d:2c:a6:d0:0d:ab:7d:d6:aa:b4:57:73:23:d8:
9f:c6:21:32:af:d1:90:7f:65:35:3f:50:f0:e1:e9:
d9:e8:73:f3:a2:0d:07:ba:03:cc:fa:01:a6:9a:67:
f0:de:71:ac:63:62:08:30:51:c4:a2:d5:e8:f4:4b:
0a:0a:6b:48:1f:b2:0d:70:36:db:32:4b:7f:a3:4c:
5d:29:6b:03:4a:e5:7c:c4:dd:56:04:34:ce:97:69:
6c:19:0d:ea:d8:3c:f4:ed:95:e7:f2:b9:a7:36:e7:
73:0a:a7:a5:04:a8:28:3e:2e:54:3c:34:c2:df:50:
03:9a:43:be:5c:57:d5:de:4c:b0:14:47:1c:0f:bd:
db:41:aa:35:64:58:1e:75:05:55:9b:ed:05:84:e6:
be:b9:fe:89:58:99:86:ed:44:73:4d:61:02:e9:0e:
bc:e8:a5:13:12:cf:c4:a1:ee:47:05:02:ff:16:6d:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DB:2A:1C:62:9C:15:06:18:73:E3:67:A3:36:98:82:9C:68:F3:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4883d3c3-6e79-3f73-8b11-27a4e5cf9a1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.171.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a4:06:17:32:ee:ab:ca:fc:bc:31:51:2c:e0:37:d8:b3:cc:
c6:fd:b4:fa:3e:58:0e:d0:d5:9b:71:c3:ee:80:cf:d7:ef:2a:
2b:65:d6:e2:8a:18:11:8b:e4:ce:77:2c:59:9a:53:43:89:33:
6c:e0:b8:1e:e5:d3:e6:f8:5a:bd:a3:a0:f3:b6:39:cf:10:ce:
1e:d0:43:2e:f6:8c:ad:42:67:6f:97:cd:5b:07:f6:07:07:09:
89:1c:06:60:32:01:6c:ae:d6:e2:d0:fa:2e:74:ff:c8:8f:7e:
fc:66:c3:55:a7:21:41:db:35:60:2a:81:0b:eb:1c:b8:d8:b3:
46:70:4d:02:b9:02:a0:b4:27:cf:73:18:21:c1:5d:3a:b0:de:
83:fa:b4:3a:c9:7a:f6:b5:1e:03:e4:f1:2c:0b:ca:3b:f5:7e:
a5:c3:f2:a3:fb:59:73:7e:e1:d1:b2:d1:c8:6a:bf:a3:43:55:
a2:14:b9:72:36:ee:3b:38:3a:27:be:ed:dc:6c:97:57:28:9a:
5a:8a:f3:8f:8f:6f:9a:4e:5e:1b:55:d3:f4:96:79:af:38:85:
ed:12:e7:5b:bc:af:90:83:8c:6d:d0:5d:d3:72:6e:a1:0b:c5:
1d:e0:53:09:05:6b:56:26:70:78:c1:9d:9d:cc:98:76:5f:31:
72:98:81:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09rdien2u920yXMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ODM0NWJkMjctNjUyNi00ODJiLTljMDctOGE0NDBhOWRmYzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbfzf7OsEebOwiJR4croBzz+EKYFIie3GtST
QQFbHxe2BRh8aUVzBzMM36a13+NMaDhnC5dK8G+EFydmhyN1znXuZ1xT4pWlWT/B
bSym0A2rfdaqtFdzI9ifxiEyr9GQf2U1P1Dw4enZ6HPzog0HugPM+gGmmmfw3nGs
Y2IIMFHEotXo9EsKCmtIH7INcDbbMkt/o0xdKWsDSuV8xN1WBDTOl2lsGQ3q2Dz0
7ZXn8rmnNudzCqelBKgoPi5UPDTC31ADmkO+XFfV3kywFEccD73bQao1ZFgedQVV
m+0FhOa+uf6JWJmG7URzTWEC6Q686KUTEs/Eoe5HBQL/Fm323QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXbKhxinBUGGHPjZ6M2mIKcaPPcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg4M2QzYzMtNmU3OS0z
ZjczLThiMTEtMjdhNGU1Y2Y5YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6vWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqkBhcy7qvK/LwxUSzgN9izzMb9tPo+WA7Q1Ztxw+6Az9fvKitl1uKK
GBGL5M53LFmaU0OJM2zguB7l0+b4Wr2joPO2Oc8Qzh7QQy72jK1CZ2+XzVsH9gcH
CYkcBmAyAWyu1uLQ+i50/8iPfvxmw1WnIUHbNWAqgQvrHLjYs0ZwTQK5AqC0J89z
GCHBXTqw3oP6tDrJeva1HgPk8SwLyjv1fqXD8qP7WXN+4dGy0chqv6NDVaIUuXI2
7js4Oie+7dxsl1comlqK84+Pb5pOXhtV0/SWea84he0S51u8r5CDjG3QXdNybqEL
xR3gUwkFa1YmcHjBnZ3MmHZfMXKYgSg=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:17 2025 by rpki-client