Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/542e0c45-f095-3f7d-b769-516de6eda7c1.roa
File: 542e0c45-f095-3f7d-b769-516de6eda7c1.roa (raw, json)
Hash identifier: 7lds2Z9nhXYd7YRBtGcF1s6DORJeOcxMdkBcnNxkwy0=
Subject key identifier: DB:79:C0:F0:5A:25:C4:1F:2B:36:F3:35:B6:03:EF:77:5A:41:45:97
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584921842996F6ABC7ED8F229F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/542e0c45-f095-3f7d-b769-516de6eda7c1.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 33655
IP address blocks: 23.25.184.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:29:96:f6:ab:c7:ed:8f:22:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=a548fc5f-a4cf-47e8-9c97-5cdf099d111f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:16:ff:cb:68:df:5a:34:bc:97:75:15:54:
50:29:6b:ce:26:d5:af:e7:09:32:cc:99:a8:98:8a:
00:cd:97:23:f7:df:c9:7a:7a:54:35:d2:46:cc:16:
6d:4d:e7:11:db:d6:64:73:67:54:f4:96:3b:96:21:
87:25:34:83:65:59:f0:f3:e3:4a:28:85:1f:9f:78:
83:3d:7e:b3:f1:cc:17:15:8c:46:c0:38:26:3b:8d:
87:29:a7:96:6e:dc:47:49:d8:00:e6:73:bd:03:f9:
c0:e3:3b:1e:41:22:5c:59:94:d0:83:5b:0a:55:f3:
6d:58:66:a7:80:6e:e9:f9:5f:ec:d2:58:1b:28:f4:
72:c3:c8:c9:69:2f:6d:77:62:7c:ce:6d:54:5a:34:
2a:4b:0c:e5:75:7e:14:96:ee:8e:bc:07:30:96:02:
41:90:29:97:13:8b:f5:1a:cc:01:58:af:6e:dc:34:
fb:12:66:91:7a:ac:85:ad:f3:25:56:c1:61:3d:45:
72:99:85:a3:df:78:c2:47:29:cd:32:32:1b:cf:26:
e1:9a:a9:a5:98:0e:da:c8:73:92:a6:59:91:7a:83:
91:45:ef:90:05:4f:d1:3a:38:07:ca:da:88:fa:39:
5c:b4:0a:b0:90:4f:e8:c6:b2:d6:29:f4:b0:8b:ac:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:79:C0:F0:5A:25:C4:1F:2B:36:F3:35:B6:03:EF:77:5A:41:45:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/542e0c45-f095-3f7d-b769-516de6eda7c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.25.184.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:19:ed:2b:08:51:1c:38:33:80:9e:33:38:0b:a1:d7:0f:37:
49:4f:74:96:23:ac:64:dc:31:85:4e:bf:0c:3b:78:1d:00:44:
7c:fd:64:7f:ce:44:0d:6c:35:35:b9:1e:cb:3f:9d:6c:8f:b1:
59:0a:03:70:c5:f3:dc:1a:b2:5a:9d:99:1d:a1:cf:f5:63:96:
99:76:70:91:7a:9d:6e:7b:a4:ba:64:9d:50:6b:3e:34:73:49:
80:f2:36:89:73:a5:85:5c:ca:9d:44:fd:4a:4f:4c:91:ea:df:
86:51:b5:8c:60:1d:aa:6f:c7:c6:f7:04:8f:d6:52:ab:25:47:
39:ea:6d:00:be:a0:d6:39:04:5f:c6:d4:f0:42:0b:fa:1a:88:
70:e2:6e:4e:50:1a:3c:06:a3:91:91:ff:ee:23:36:1c:b2:b4:
3d:a1:3b:18:29:9a:81:89:09:7c:94:51:4d:07:81:3d:71:bd:
1f:9b:b6:6c:d7:fa:a2:d3:ac:b2:76:98:e6:39:a2:71:62:23:
8c:a6:40:d9:52:51:af:7d:62:fe:fc:57:be:90:71:2a:27:80:
4c:81:38:bd:9b:6b:21:b8:15:a7:87:cc:d0:9a:48:69:34:c7:
7d:c2:a6:8d:f6:85:76:85:ea:06:4a:c1:c8:6b:07:d1:3e:38:
a4:4a:07:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhCmW9qvH7Y8in4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
YTU0OGZjNWYtYTRjZi00N2U4LTljOTctNWNkZjA5OWQxMTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/oW/8to31o0vJd1FVRQKWvOJtWv5wkyzJmo
mIoAzZcj99/JenpUNdJGzBZtTecR29Zkc2dU9JY7liGHJTSDZVnw8+NKKIUfn3iD
PX6z8cwXFYxGwDgmO42HKaeWbtxHSdgA5nO9A/nA4zseQSJcWZTQg1sKVfNtWGan
gG7p+V/s0lgbKPRyw8jJaS9td2J8zm1UWjQqSwzldX4Ulu6OvAcwlgJBkCmXE4v1
GswBWK9u3DT7EmaReqyFrfMlVsFhPUVymYWj33jCRynNMjIbzybhmqmlmA7ayHOS
plmReoORRe+QBU/ROjgHytqI+jlctAqwkE/oxrLWKfSwi6xAIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNt5wPBaJcQfKzbzNbYD73daQUWXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQyZTBjNDUtZjA5NS0z
ZjdkLWI3NjktNTE2ZGU2ZWRhN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFxm4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL0Z7SsIURw4M4CeMzgLodcPN0lPdJYjrGTcMYVOvww7eB0ARHz9ZH/O
RA1sNTW5Hss/nWyPsVkKA3DF89waslqdmR2hz/Vjlpl2cJF6nW57pLpknVBrPjRz
SYDyNolzpYVcyp1E/UpPTJHq34ZRtYxgHapvx8b3BI/WUqslRznqbQC+oNY5BF/G
1PBCC/oaiHDibk5QGjwGo5GR/+4jNhyytD2hOxgpmoGJCXyUUU0HgT1xvR+btmzX
+qLTrLJ2mOY5onFiI4ymQNlSUa99Yv78V76QcSongEyBOL2bayG4FaeHzNCaSGk0
x33Cpo32hXaF6gZKwchrB9E+OKRKB8A=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:23:08 2025 by rpki-client