Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fc5c091-0a56-390d-ac58-e34fd593304b.roa
File: 4fc5c091-0a56-390d-ac58-e34fd593304b.roa (raw, json)
Hash identifier: bXqIVSleX6ky0kSecrxQMl8i7s+HB7pK4xm60VCrsJc=
Subject key identifier: A1:15:4C:30:E0:6E:00:2D:5F:2B:53:5E:8C:82:E9:67:64:BA:C4:FF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F85565C6977644F7FCAB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fc5c091-0a56-390d-ac58-e34fd593304b.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 24.2.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:55:65:c6:97:76:44:f7:fc:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=c8eaedd0-dbec-4322-98ca-25cfaf816cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:0f:71:e3:b7:06:1f:f4:a5:53:0c:8a:3b:
90:10:d5:ec:c5:05:ae:9f:c6:9c:86:1b:60:19:28:
97:03:59:3a:83:f9:b8:2d:35:64:bb:fb:f7:16:48:
97:f9:69:e0:35:82:f0:a2:bc:3a:e9:ca:51:9f:96:
0f:d7:78:be:43:f7:4e:67:72:ba:e9:fd:5f:6b:5b:
7d:97:7a:f4:22:70:f5:f7:3d:86:57:9f:d9:c8:b1:
6a:ab:9d:4a:11:3a:40:38:1f:ee:59:86:ae:f6:58:
4a:9b:db:01:91:ac:e6:03:bb:dd:b0:29:7d:a5:91:
aa:d9:e7:2b:78:95:a7:3c:54:60:c1:53:c9:26:ba:
56:ef:39:51:27:cf:6c:a2:7f:c1:f0:ff:59:8b:2a:
7f:47:53:5f:26:03:d0:ee:ac:df:15:24:5f:e1:bb:
a5:26:0a:52:80:86:6c:4f:ee:dd:5a:0e:9e:e6:35:
bf:80:e3:91:35:20:86:1d:7e:08:50:0b:74:75:05:
72:79:99:49:95:2f:08:63:41:16:7d:c3:6c:9b:6e:
d8:5d:a9:a4:86:14:3f:d9:1b:00:fd:8c:c8:8c:6d:
5c:19:fe:3d:a8:db:c7:47:25:2d:77:7d:6d:ef:95:
40:8c:af:20:25:63:5e:c7:1c:4f:f9:2c:2c:ab:80:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:15:4C:30:E0:6E:00:2D:5F:2B:53:5E:8C:82:E9:67:64:BA:C4:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fc5c091-0a56-390d-ac58-e34fd593304b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.2.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:73:70:a3:73:64:2c:0b:7b:5c:03:7b:89:74:03:00:85:2a:
9d:9f:b3:d1:01:28:fd:a2:95:3f:5f:c6:41:e0:8b:ea:cf:c5:
2c:2b:fe:cf:45:2f:b0:e0:30:3c:c3:bc:bb:5d:43:b9:5e:a2:
86:86:86:fd:b9:f9:4a:69:11:a2:d5:45:bb:02:d9:aa:87:8d:
a0:47:1d:f6:e9:a6:42:e8:7b:45:4d:99:66:c9:df:f6:ae:a7:
55:d6:a3:cc:d3:9c:5c:36:6e:36:d4:3b:54:7f:a9:b6:3d:59:
80:23:56:d4:44:fc:26:5f:bd:62:80:19:46:a2:b2:db:5e:c4:
f6:23:cb:38:bb:42:8b:70:79:24:91:83:c0:5f:c4:84:d8:1d:
d5:4f:d0:1c:05:31:7b:8b:8e:c4:5b:56:0b:05:e9:9a:23:e5:
80:ed:a8:67:b3:cb:b3:09:a6:a5:08:3b:a4:7d:54:89:38:a8:
77:0d:1b:1e:5c:de:c8:e9:d1:06:89:96:07:31:3d:0f:68:60:
ad:e3:10:c6:33:08:16:52:13:ee:16:e7:55:30:7b:91:81:64:
3b:dc:23:ff:2e:27:94:c4:6f:e8:f5:a4:ba:6f:81:a5:fa:57:
31:04:4c:87:0c:02:68:94:41:2c:3b:58:e4:39:0b:4e:c8:16:
72:89:a3:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+FVlxpd2RPf8q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YzhlYWVkZDAtZGJlYy00MzIyLTk4Y2EtMjVjZmFmODE2Y2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF0PceO3Bh/0pVMMijuQENXsxQWun8achhtg
GSiXA1k6g/m4LTVku/v3FkiX+WngNYLworw66cpRn5YP13i+Q/dOZ3K66f1fa1t9
l3r0InD19z2GV5/ZyLFqq51KETpAOB/uWYau9lhKm9sBkazmA7vdsCl9pZGq2ecr
eJWnPFRgwVPJJrpW7zlRJ89son/B8P9Ziyp/R1NfJgPQ7qzfFSRf4bulJgpSgIZs
T+7dWg6e5jW/gOORNSCGHX4IUAt0dQVyeZlJlS8IY0EWfcNsm27YXamkhhQ/2RsA
/YzIjG1cGf49qNvHRyUtd31t75VAjK8gJWNexxxP+Swsq4C5wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKEVTDDgbgAtXytTXoyC6WdkusT/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGZjNWMwOTEtMGE1Ni0z
OTBkLWFjNTgtZTM0ZmQ1OTMzMDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAL+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlzcKNzZCwLe1wDe4l0AwCFKp2fs9EBKP2ilT9fxkHgi+rPxSwr/s9F
L7DgMDzDvLtdQ7leooaGhv25+UppEaLVRbsC2aqHjaBHHfbppkLoe0VNmWbJ3/au
p1XWo8zTnFw2bjbUO1R/qbY9WYAjVtRE/CZfvWKAGUaisttexPYjyzi7QotweSSR
g8BfxITYHdVP0BwFMXuLjsRbVgsF6Zoj5YDtqGezy7MJpqUIO6R9VIk4qHcNGx5c
3sjp0QaJlgcxPQ9oYK3jEMYzCBZSE+4W51Uwe5GBZDvcI/8uJ5TEb+j1pLpvgaX6
VzEETIcMAmiUQSw7WOQ5C07IFnKJo0E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:29 2025 by rpki-client