Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e8a83b9-901d-3ea7-a913-7aa2084d6897.roa
File: 4e8a83b9-901d-3ea7-a913-7aa2084d6897.roa (raw, json)
Hash identifier: CuwQhmcpkXwpalSTMFFv/QPndGyR9p5pE+aME+anUZ0=
Subject key identifier: 4C:DB:DD:9B:FC:D8:EF:2C:5F:12:7C:A9:13:7C:F9:E3:8F:BC:F8:20
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C6CF76EC56E5E94FB30F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e8a83b9-901d-3ea7-a913-7aa2084d6897.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7015
IP address blocks: 24.63.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:6c:f7:6e:c5:6e:5e:94:fb:30:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=80cfda9a-071d-4eb2-b607-774108ab7602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:d5:6d:56:60:7f:c7:98:90:19:a8:2b:a7:
90:13:06:4b:af:9e:ee:83:b4:c2:47:ee:43:25:7d:
01:eb:f8:03:d2:f7:bc:f5:d9:2e:ac:f3:1c:17:be:
4f:7e:03:9c:90:f5:ab:62:67:5e:bd:3e:5b:64:a6:
ad:92:9e:8b:b7:d7:57:8f:49:26:1c:18:d5:c9:b0:
cd:ce:34:2a:3d:4d:f2:72:d5:7a:a7:6e:d2:a9:f0:
3d:e9:6b:9e:51:b5:03:90:7e:89:b3:8a:27:36:92:
ce:72:9d:7a:96:f5:63:20:73:34:1e:f3:92:37:52:
05:98:1a:c4:4d:7c:3d:17:4c:71:66:90:0f:a1:ca:
62:dd:45:cb:fb:88:e5:71:8a:fb:29:cc:e9:b2:6e:
43:1c:8b:e1:45:31:5d:ec:ef:12:fd:e4:c3:dd:55:
ad:6e:43:b3:8a:40:8f:86:e1:8b:03:93:7e:a8:35:
7c:bb:b6:bc:6c:85:9f:13:65:9f:63:58:94:3d:00:
f9:14:3c:d8:74:9f:b1:57:49:56:3b:a5:76:d7:50:
dd:e2:63:0d:15:2d:47:14:5d:d9:8e:c6:00:0a:8c:
4e:49:f3:7b:58:21:c3:5a:42:f5:83:7d:2b:7b:73:
d0:9e:14:97:48:1f:52:1e:bf:f1:97:ff:aa:bd:d1:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:DD:9B:FC:D8:EF:2C:5F:12:7C:A9:13:7C:F9:E3:8F:BC:F8:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e8a83b9-901d-3ea7-a913-7aa2084d6897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.63.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:13:ad:d7:63:a7:e4:51:48:93:d7:3b:cb:4e:10:68:89:0a:
10:7b:64:7d:ce:56:a3:13:82:1d:84:2c:23:14:c6:80:cd:b8:
cb:1a:4a:fd:39:67:c7:9e:90:5b:d3:9c:99:45:26:4c:e2:18:
0c:39:b7:af:4a:5d:d9:c1:36:00:87:50:06:dc:5f:92:91:d4:
d0:85:73:c1:6c:54:d5:1b:35:25:8c:47:83:38:0c:0b:ce:e4:
56:d6:c3:27:63:2c:15:e9:93:fa:53:bb:ae:e2:a5:a8:e2:0d:
db:58:c6:6e:a5:52:36:0f:f8:c9:23:7a:45:21:98:4d:18:cb:
85:22:b1:e6:78:57:14:40:da:29:af:3b:a2:1a:e3:5d:b3:a5:
e5:7f:1f:64:c6:17:e6:dd:6c:60:f3:e5:33:c1:8a:5e:e7:cd:
f3:0e:12:3a:56:ab:83:e3:ce:2e:65:84:2e:e3:3a:ae:90:a9:
b2:be:c7:c4:03:b8:0b:ef:ef:51:25:1e:dc:55:34:0a:da:af:
6e:e4:8d:89:ea:f4:2b:f9:cf:7d:43:e1:7f:74:27:7a:2b:fd:
92:d2:bd:23:6f:a3:15:ac:9d:7b:ca:e0:80:89:c9:e7:06:88:
d4:d9:50:ee:bb:cb:d3:a4:f8:0c:77:99:36:8f:31:81:55:cd:
94:ec:e3:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPGz3bsVuXpT7MPgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
ODBjZmRhOWEtMDcxZC00ZWIyLWI2MDctNzc0MTA4YWI3NjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkevVbVZgf8eYkBmoK6eQEwZLr57ug7TCR+5D
JX0B6/gD0ve89dkurPMcF75PfgOckPWrYmdevT5bZKatkp6Lt9dXj0kmHBjVybDN
zjQqPU3yctV6p27SqfA96WueUbUDkH6Js4onNpLOcp16lvVjIHM0HvOSN1IFmBrE
TXw9F0xxZpAPocpi3UXL+4jlcYr7Kczpsm5DHIvhRTFd7O8S/eTD3VWtbkOzikCP
huGLA5N+qDV8u7a8bIWfE2WfY1iUPQD5FDzYdJ+xV0lWO6V211Dd4mMNFS1HFF3Z
jsYACoxOSfN7WCHDWkL1g30re3PQnhSXSB9SHr/xl/+qvdH/BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEzb3Zv82O8sXxJ8qRN8+eOPvPggMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGU4YTgzYjktOTAxZC0z
ZWE3LWE5MTMtN2FhMjA4NGQ2ODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGD+sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwTrddjp+RRSJPXO8tOEGiJChB7ZH3OVqMTgh2ELCMUxoDNuMsaSv05
Z8eekFvTnJlFJkziGAw5t69KXdnBNgCHUAbcX5KR1NCFc8FsVNUbNSWMR4M4DAvO
5FbWwydjLBXpk/pTu67ipajiDdtYxm6lUjYP+MkjekUhmE0Yy4UiseZ4VxRA2imv
O6Ia412zpeV/H2TGF+bdbGDz5TPBil7nzfMOEjpWq4Pjzi5lhC7jOq6QqbK+x8QD
uAvv71ElHtxVNArar27kjYnq9Cv5z31D4X90J3or/ZLSvSNvoxWsnXvK4ICJyecG
iNTZUO67y9Ok+Ax3mTaPMYFVzZTs4+U=
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:10:07 2025 by rpki-client