Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2a87dd-f069-37b3-9994-5e833b326e92.roa
File: 6f2a87dd-f069-37b3-9994-5e833b326e92.roa (raw, json)
Hash identifier: 0FTFUHah2jNo67CWOgIE8/0p42LRB3anexLVCGUUjR4=
Subject key identifier: AD:63:F3:15:85:88:4D:7A:95:E7:02:EC:91:29:9C:E4:5F:CF:6F:D3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEF4ED8BC69B7BCEF98580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2a87dd-f069-37b3-9994-5e833b326e92.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 174.57.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:f4:ed:8b:c6:9b:7b:ce:f9:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=084e4fe0-ddf4-4a33-bdfc-22562a97773f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:19:b8:66:71:31:4b:3b:6f:fd:79:55:79:
25:71:7c:a5:26:5d:06:79:7a:b0:02:a2:c7:20:f9:
25:45:ba:36:51:19:f7:28:85:36:b4:6d:34:b4:c2:
07:ed:64:cc:87:74:e2:c0:12:02:fd:6b:99:b0:5c:
0b:5d:ea:41:03:d0:4c:b7:7b:ca:1f:b3:b1:e5:ea:
38:68:f8:1e:d6:f3:b0:c0:48:0f:bd:9d:fe:3b:75:
a5:81:7a:36:b0:96:09:2a:fb:4a:b5:b1:33:da:04:
40:d5:72:58:18:ad:a6:60:37:54:43:76:53:47:a7:
9d:15:e5:ae:d5:3e:da:5b:36:d4:78:21:2b:ea:a8:
6c:4a:eb:6a:6c:6c:be:bb:66:a5:86:11:ca:1e:0e:
dd:ae:d7:30:f0:73:4d:2d:c1:99:ef:4c:9d:36:ee:
88:18:3d:ec:39:ce:6d:c8:98:f1:ad:36:ef:80:dd:
71:cd:4e:92:b2:4d:bd:81:05:a8:17:54:8b:2c:84:
f0:c0:41:a4:51:8c:72:72:ba:5d:12:9c:22:0e:b9:
19:4e:73:06:4e:98:6b:30:53:d9:64:bf:c7:59:0c:
55:0a:c2:73:2c:e9:28:1e:37:be:06:18:36:0e:51:
53:b9:c6:f0:c3:2b:f2:9a:08:ad:49:52:34:3a:86:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:63:F3:15:85:88:4D:7A:95:E7:02:EC:91:29:9C:E4:5F:CF:6F:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2a87dd-f069-37b3-9994-5e833b326e92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.57.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:65:5f:8e:81:43:df:a5:08:fd:cd:a5:3d:37:0b:3e:8a:0e:
ca:98:eb:70:84:ba:dc:42:b2:d8:48:17:7d:41:77:eb:13:ae:
91:ed:6a:9e:4a:91:f1:f2:a1:b7:8f:39:70:58:eb:a2:73:78:
50:9c:b9:a2:92:30:87:d4:84:6e:a8:09:e7:33:0d:23:90:f6:
0c:ea:d8:50:35:d0:66:b8:26:c0:6f:dd:c4:2c:68:20:a4:73:
03:53:da:ef:02:31:f6:75:c1:0d:ba:2d:be:ce:6c:80:6c:69:
84:7a:09:4c:09:84:c6:19:22:89:fd:9f:51:c2:87:d0:12:d4:
a7:78:af:a2:af:5b:c5:83:b5:da:e4:ac:2c:6f:fa:6d:22:f4:
8f:71:56:bc:21:6a:df:6f:0e:1a:bd:fc:3b:9b:b1:34:90:03:
73:30:f3:1b:23:50:f5:34:ff:14:41:de:63:80:72:ca:93:17:
d0:6b:c6:c8:63:60:6a:4a:ff:22:88:bc:93:55:7d:f7:04:fa:
9a:be:33:98:d2:26:4d:95:60:37:9a:26:47:28:00:c6:41:8e:
71:28:5a:4d:e1:12:a0:e2:fc:df:2f:0d:fe:27:a1:03:13:63:
34:66:22:16:8a:a1:99:3d:1f:a0:42:2b:62:6c:8d:dd:15:3a:
fc:cf:4e:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrvTti8abe875hYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MDg0ZTRmZTAtZGRmNC00YTMzLWJkZmMtMjI1NjJhOTc3NzNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM4ZuGZxMUs7b/15VXklcXylJl0GeXqwAqLH
IPklRbo2URn3KIU2tG00tMIH7WTMh3TiwBIC/WuZsFwLXepBA9BMt3vKH7Ox5eo4
aPge1vOwwEgPvZ3+O3WlgXo2sJYJKvtKtbEz2gRA1XJYGK2mYDdUQ3ZTR6edFeWu
1T7aWzbUeCEr6qhsSutqbGy+u2alhhHKHg7drtcw8HNNLcGZ70ydNu6IGD3sOc5t
yJjxrTbvgN1xzU6Ssk29gQWoF1SLLITwwEGkUYxycrpdEpwiDrkZTnMGTphrMFPZ
ZL/HWQxVCsJzLOkoHje+Bhg2DlFTucbwwyvymgitSVI0OoYh9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK1j8xWFiE16lecC7JEpnORfz2/TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmYyYTg3ZGQtZjA2OS0z
N2IzLTk5OTQtNWU4MzNiMzI2ZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrjmoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNlX46BQ9+lCP3NpT03Cz6KDsqY63CEutxCsthIF31Bd+sTrpHtap5K
kfHyobePOXBY66JzeFCcuaKSMIfUhG6oCeczDSOQ9gzq2FA10Ga4JsBv3cQsaCCk
cwNT2u8CMfZ1wQ26Lb7ObIBsaYR6CUwJhMYZIon9n1HCh9AS1Kd4r6KvW8WDtdrk
rCxv+m0i9I9xVrwhat9vDhq9/DubsTSQA3Mw8xsjUPU0/xRB3mOAcsqTF9Brxshj
YGpK/yKIvJNVffcE+pq+M5jSJk2VYDeaJkcoAMZBjnEoWk3hEqDi/N8vDf4noQMT
YzRmIhaKoZk9H6BCK2Jsjd0VOvzPTiA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:22:40 2025 by rpki-client