Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dab5cd4-37a0-3bc8-b401-5edd3942103b.roa
File: 4dab5cd4-37a0-3bc8-b401-5edd3942103b.roa (raw, json)
Hash identifier: yWnZusTPh/9B7JjBCnsBObFsf14qtRE3000LKh0ytYw=
Subject key identifier: 24:B8:76:09:6C:43:AC:39:AA:F1:D3:CE:AA:40:87:8D:15:7E:A5:38
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DDEB5F4F83B0D94C0C100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dab5cd4-37a0-3bc8-b401-5edd3942103b.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33287
IP address blocks: 76.124.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:de:b5:f4:f8:3b:0d:94:c0:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=3120f678-0ca5-4ce5-b310-5febbd386f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:73:4f:e5:0a:48:91:b1:9a:38:80:9b:94:
71:df:04:2d:bc:03:41:d3:64:8d:9d:a0:73:43:b8:
c9:6d:aa:e4:d0:8b:ea:c1:fb:2a:cf:92:88:1b:ec:
f1:92:40:8b:e0:84:06:7a:b6:89:00:4c:20:14:1c:
f2:76:58:2b:ae:87:b1:e7:2b:89:f4:39:af:26:f2:
ea:9d:74:5a:21:f8:3d:a5:36:38:1c:fa:ca:a0:71:
db:dc:d7:0f:fa:fd:fa:48:b7:a7:51:df:ed:91:ec:
8b:4f:ec:66:74:6c:27:9b:44:df:7c:aa:1a:ea:e2:
ce:30:08:76:42:3e:8e:18:72:ff:3d:47:1c:4e:5a:
d4:1c:91:9f:b5:65:40:68:6b:77:4f:26:29:9c:67:
9c:0f:9c:53:49:b0:a6:46:c7:6f:d2:be:8a:b2:6c:
42:ad:05:57:ae:fe:5f:be:6d:fa:08:d6:23:b6:25:
b4:f4:62:93:76:b1:b4:4c:cc:41:0b:f8:f5:36:eb:
83:fe:26:6d:0e:54:26:35:1e:60:cd:12:c7:80:02:
2b:62:df:c6:f4:56:10:04:fd:9c:91:a7:f9:cb:ac:
66:49:76:54:41:08:33:ff:54:03:ed:0e:89:1e:40:
b1:e1:3e:3d:57:0f:ee:00:cf:1d:19:32:40:fa:18:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:76:09:6C:43:AC:39:AA:F1:D3:CE:AA:40:87:8D:15:7E:A5:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dab5cd4-37a0-3bc8-b401-5edd3942103b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.124.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:b4:fa:d8:56:ba:63:e3:83:dd:96:03:c2:dd:3c:a0:a3:42:
8f:e0:81:c1:ec:b6:6c:2b:c6:56:17:41:6e:25:90:67:bc:5d:
00:e6:03:b6:f4:f1:63:59:a6:b4:c7:a4:c7:86:ce:d9:70:c3:
64:8c:9f:df:13:4e:f0:bb:3e:fe:d6:38:8c:9c:fc:6c:f5:f0:
ba:aa:6b:e0:79:89:f1:78:01:3b:cd:89:47:f9:31:ae:1e:67:
f5:9d:2b:1f:c1:1f:56:9d:1e:13:ce:13:cf:da:8c:a4:7e:26:
a2:f4:7b:83:ca:c9:ba:c2:c1:51:41:be:ac:2f:23:ee:fe:53:
83:0c:1b:3b:04:99:a1:02:5b:57:79:8e:5f:44:02:d6:37:17:
33:74:0c:24:24:73:f6:96:4e:d8:c1:28:50:0e:dd:b8:5c:a5:
8d:e7:3b:57:2d:24:2a:94:3f:aa:27:60:e0:37:31:a7:de:ea:
b7:ab:d8:92:00:15:1d:fa:98:59:3d:cf:fa:27:d0:bd:38:bf:
be:ec:33:d6:8d:f3:93:e9:62:53:ec:a8:71:62:2b:40:48:fa:
4a:9e:8d:f3:c2:a1:de:ac:64:7d:b4:bd:eb:ee:0c:66:db:3d:
1c:e4:12:6a:81:63:7f:cf:32:2b:c2:14:d7:2e:94:66:8a:3c:
1a:c0:ed:22
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiebd619Pg7DZTAwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MzEyMGY2NzgtMGNhNS00Y2U1LWIzMTAtNWZlYmJkMzg2ZjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmadzT+UKSJGxmjiAm5Rx3wQtvANB02SNnaBz
Q7jJbark0Ivqwfsqz5KIG+zxkkCL4IQGeraJAEwgFBzydlgrroex5yuJ9DmvJvLq
nXRaIfg9pTY4HPrKoHHb3NcP+v36SLenUd/tkeyLT+xmdGwnm0TffKoa6uLOMAh2
Qj6OGHL/PUccTlrUHJGftWVAaGt3TyYpnGecD5xTSbCmRsdv0r6KsmxCrQVXrv5f
vm36CNYjtiW09GKTdrG0TMxBC/j1NuuD/iZtDlQmNR5gzRLHgAIrYt/G9FYQBP2c
kaf5y6xmSXZUQQgz/1QD7Q6JHkCx4T49Vw/uAM8dGTJA+hhCBQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCS4dglsQ6w5qvHTzqpAh40VfqU4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGRhYjVjZDQtMzdhMC0z
YmM4LWI0MDEtNWVkZDM5NDIxMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMATHwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbrT62Fa6Y+OD3ZYDwt08oKNCj+CBwey2bCvGVhdBbiWQZ7xdAOYDtvTx
Y1mmtMekx4bO2XDDZIyf3xNO8Ls+/tY4jJz8bPXwuqpr4HmJ8XgBO82JR/kxrh5n
9Z0rH8EfVp0eE84Tz9qMpH4movR7g8rJusLBUUG+rC8j7v5TgwwbOwSZoQJbV3mO
X0QC1jcXM3QMJCRz9pZO2MEoUA7duFyljec7Vy0kKpQ/qidg4Dcxp97qt6vYkgAV
HfqYWT3P+ifQvTi/vuwz1o3zk+liU+yocWIrQEj6Sp6N88Kh3qxkfbS96+4MZts9
HOQSaoFjf88yK8IU1y6UZoo8GsDtIg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:25 2025 by rpki-client