Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/571acddf-38a4-3f78-93c4-29ce1bb34c89.roa
File: 571acddf-38a4-3f78-93c4-29ce1bb34c89.roa (raw, json)
Hash identifier: l5fbAX6hxCuTyHj8Blyur+bZ/exrD34mYkO7oRcKsUM=
Subject key identifier: 39:5B:94:E8:6E:D3:E4:3B:FA:1B:67:05:77:90:69:39:37:9F:19:AB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C855D89FA96511F5C2800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/571acddf-38a4-3f78-93c4-29ce1bb34c89.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 24.125.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:85:5d:89:fa:96:51:1f:5c:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=e9587948-c395-43da-bfec-a9c5670807c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:13:46:b8:c4:60:77:2d:cf:d4:7f:a0:d7:
e8:4d:e4:24:96:75:f5:cd:f0:58:0d:c0:c8:8d:0b:
7b:dc:3e:27:05:4f:e9:90:c4:55:38:7b:d6:1a:43:
9a:c9:b6:32:2b:70:47:9c:50:6d:15:23:37:f3:6b:
92:e6:06:d6:5a:be:63:dd:0c:44:26:ae:08:c0:f7:
96:99:29:f9:36:19:7c:e0:93:81:ab:18:be:f8:c3:
65:af:f7:6f:6b:91:0f:38:47:a7:e3:49:59:37:41:
81:27:b3:29:0a:5c:84:d9:3c:f9:b8:15:88:4a:81:
3f:94:46:c5:da:56:85:36:cd:d9:7f:66:39:aa:2e:
d6:2e:43:eb:98:57:63:80:d6:50:ff:7d:fd:c4:03:
3f:a6:6a:97:59:43:70:f7:6c:a9:ab:1d:0a:cb:6d:
7f:62:92:70:1b:8d:08:bd:f7:f6:a5:1a:7d:71:d6:
66:9d:a3:b6:aa:88:40:ce:18:bf:29:e0:42:6c:c8:
ea:67:db:3e:13:bb:e4:86:57:5c:5b:d6:ab:fa:40:
19:65:51:7f:2a:45:4b:3c:f5:26:04:c2:92:09:11:
e7:40:45:b6:a6:e9:de:d4:dd:d0:25:e6:30:de:cb:
d3:54:33:7f:3d:59:28:08:48:ff:bb:19:22:8c:ac:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5B:94:E8:6E:D3:E4:3B:FA:1B:67:05:77:90:69:39:37:9F:19:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/571acddf-38a4-3f78-93c4-29ce1bb34c89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.125.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:d6:3f:04:df:58:b5:df:ec:0f:53:bf:52:0e:63:d1:3f:73:
62:da:a7:ef:9a:38:d7:34:a1:d6:a0:aa:8e:fb:1c:6b:c4:4d:
87:7e:32:03:97:a8:33:02:58:bd:40:80:ff:a3:d0:aa:bc:a2:
27:91:29:0d:9b:21:4b:ac:aa:41:22:cc:46:b1:55:a4:77:43:
b1:3e:61:85:88:7a:8a:65:fe:ae:37:3d:58:51:ab:75:ea:b6:
7e:e5:9e:7e:e1:15:5b:5d:70:f0:99:b6:4d:98:ea:4f:47:f9:
1a:de:57:94:5a:9d:38:e1:8a:df:f6:4b:1c:80:76:f2:c4:ee:
7a:a7:34:b1:90:fd:39:d6:63:2b:aa:4a:32:37:5c:d6:61:b3:
5d:b8:2e:89:ed:8c:04:34:74:ed:c4:20:82:0a:75:11:d1:f4:
c8:ef:18:c7:14:25:fd:cc:ac:53:81:2c:99:7f:9d:d4:01:41:
af:86:e9:df:71:e9:e8:22:f2:bc:bc:76:93:75:85:22:78:40:
c3:30:01:a8:e0:bc:a5:10:26:c3:c8:92:7e:d2:4b:07:f5:f5:
1b:40:29:92:e9:26:f3:6e:60:a3:07:e4:9d:81:d1:a0:88:b0:
57:c4:97:33:e2:b1:85:d3:20:c1:97:13:2e:69:b7:03:21:bc:
d2:11:c2:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPIVdifqWUR9cKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZTk1ODc5NDgtYzM5NS00M2RhLWJmZWMtYTljNTY3MDgwN2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQsTRrjEYHctz9R/oNfoTeQklnX1zfBYDcDI
jQt73D4nBU/pkMRVOHvWGkOaybYyK3BHnFBtFSM382uS5gbWWr5j3QxEJq4IwPeW
mSn5Nhl84JOBqxi++MNlr/dva5EPOEen40lZN0GBJ7MpClyE2Tz5uBWISoE/lEbF
2laFNs3Zf2Y5qi7WLkPrmFdjgNZQ/339xAM/pmqXWUNw92ypqx0Ky21/YpJwG40I
vff2pRp9cdZmnaO2qohAzhi/KeBCbMjqZ9s+E7vkhldcW9ar+kAZZVF/KkVLPPUm
BMKSCRHnQEW2pune1N3QJeYw3svTVDN/PVkoCEj/uxkijKyuBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlblOhu0+Q7+htnBXeQaTk3nxmrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTcxYWNkZGYtMzhhNC0z
Zjc4LTkzYzQtMjljZTFiYjM0Yzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGH08MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTWPwTfWLXf7A9Tv1IOY9E/c2Lap++aONc0odagqo77HGvETYd+MgOX
qDMCWL1AgP+j0Kq8oieRKQ2bIUusqkEizEaxVaR3Q7E+YYWIeopl/q43PVhRq3Xq
tn7lnn7hFVtdcPCZtk2Y6k9H+RreV5RanTjhit/2SxyAdvLE7nqnNLGQ/TnWYyuq
SjI3XNZhs124LontjAQ0dO3EIIIKdRHR9MjvGMcUJf3MrFOBLJl/ndQBQa+G6d9x
6egi8ry8dpN1hSJ4QMMwAajgvKUQJsPIkn7SSwf19RtAKZLpJvNuYKMH5J2B0aCI
sFfElzPisYXTIMGXEy5ptwMhvNIRwu8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:04 2025 by rpki-client