Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4e8664-f250-3786-9d18-262b43938166.roa
File: 7a4e8664-f250-3786-9d18-262b43938166.roa (raw, json)
Hash identifier: F343sUXlxrT/GtVkOdoczI7xVqxhinu1W4aaaH2zW6s=
Subject key identifier: 6E:AA:3E:DA:89:C7:10:5D:8F:71:B8:A0:20:5F:9E:8D:BC:9E:95:1C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB08E482E52746781B01C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4e8664-f250-3786-9d18-262b43938166.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 69.242.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:8e:48:2e:52:74:67:81:b0:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=7ec5ab2d-a196-4046-ae31-a77aae30f6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:5c:41:bb:cc:e8:d9:58:ae:da:cb:32:c4:
5f:91:13:77:3f:5f:2f:1c:0d:f7:72:78:07:55:80:
7a:fa:32:02:f3:ea:c8:f5:6a:81:e7:04:5c:ae:bd:
7b:f9:52:bd:12:55:9f:c8:55:38:34:8c:0b:8f:1f:
8e:52:fe:98:a1:8f:04:26:42:ba:a2:35:fa:71:b9:
ca:91:75:8c:c3:78:bb:94:06:6e:2a:95:ab:b3:3e:
8b:ec:31:76:06:e8:ec:49:49:21:6f:18:0d:20:5f:
ca:81:d6:25:53:af:79:2d:f5:37:09:ba:3c:e1:9e:
a5:0a:5a:c2:f2:41:dd:84:ad:13:6d:b6:44:a2:18:
59:8f:25:9c:2a:99:c4:88:9f:65:1b:fd:cf:0d:cb:
d0:b2:77:12:ed:25:a9:e1:af:e3:e6:d8:f1:40:ac:
dc:17:e6:1d:e7:eb:8e:ab:c8:85:aa:1f:48:c6:26:
44:a1:91:75:1a:c2:ed:d3:25:52:2e:45:ff:53:ea:
50:77:bd:10:d1:94:36:aa:6d:d6:dd:ef:01:c5:0b:
f6:14:48:2d:0c:43:10:64:93:fe:aa:f6:e4:64:0e:
fe:67:57:e6:a4:50:75:d7:67:50:89:5a:c5:13:1d:
2b:3e:6d:74:42:f3:83:47:da:88:77:f5:57:18:39:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AA:3E:DA:89:C7:10:5D:8F:71:B8:A0:20:5F:9E:8D:BC:9E:95:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4e8664-f250-3786-9d18-262b43938166.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.242.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:3d:8d:51:47:6c:ff:44:8b:99:a7:01:cf:0f:2b:60:95:a2:
8a:0e:22:06:f7:5c:44:2e:25:58:80:8f:30:f1:f8:f1:83:8b:
3c:ba:20:5b:5e:5b:ba:4c:3f:5f:3d:8d:1d:c5:46:ff:77:84:
f0:70:c5:42:1c:c7:d1:d0:95:dd:62:18:6e:e2:a6:5d:6b:4b:
d9:c7:77:4b:fe:25:cb:07:7b:cd:22:1c:69:d0:a6:c4:44:92:
f2:a8:d6:5e:f1:aa:8a:e7:53:bc:b1:63:9e:85:1c:0e:c2:30:
33:0c:99:44:ea:dc:4e:52:c0:3b:c7:0d:6a:2b:d9:75:ef:b2:
2f:c0:1e:3f:8d:1d:e4:f2:0b:af:62:75:0c:8c:ef:2d:2d:7d:
9b:94:7b:56:1c:92:50:62:c4:a6:2a:e6:42:c1:8c:66:d5:34:
51:bf:bf:af:17:dc:e4:7c:8c:f7:6c:fc:de:b8:e4:61:9e:2e:
a6:48:32:d1:7c:11:a4:20:d9:bf:b9:eb:ae:16:4e:ac:23:d3:
75:93:a4:68:72:5a:52:9f:d3:ff:8c:a9:fb:74:68:d1:28:61:
ca:3e:26:e2:04:58:0f:a2:9c:81:27:f1:74:99:74:c7:5b:d8:
d0:b4:03:2a:38:ef:c5:a8:50:08:23:8b:1c:5d:b8:93:ee:c3:
59:66:2a:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssI5ILlJ0Z4GwHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
N2VjNWFiMmQtYTE5Ni00MDQ2LWFlMzEtYTc3YWFlMzBmNmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriZcQbvM6NlYrtrLMsRfkRN3P18vHA33cngH
VYB6+jIC8+rI9WqB5wRcrr17+VK9ElWfyFU4NIwLjx+OUv6YoY8EJkK6ojX6cbnK
kXWMw3i7lAZuKpWrsz6L7DF2BujsSUkhbxgNIF/KgdYlU695LfU3Cbo84Z6lClrC
8kHdhK0TbbZEohhZjyWcKpnEiJ9lG/3PDcvQsncS7SWp4a/j5tjxQKzcF+Yd5+uO
q8iFqh9IxiZEoZF1GsLt0yVSLkX/U+pQd70Q0ZQ2qm3W3e8BxQv2FEgtDEMQZJP+
qvbkZA7+Z1fmpFB112dQiVrFEx0rPm10QvODR9qId/VXGDk64wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6qPtqJxxBdj3G4oCBfno28npUcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2E0ZTg2NjQtZjI1MC0z
Nzg2LTlkMTgtMjYyYjQzOTM4MTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRfImMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEg9jVFHbP9Ei5mnAc8PK2CVoooOIgb3XEQuJViAjzDx+PGDizy6IFte
W7pMP189jR3FRv93hPBwxUIcx9HQld1iGG7ipl1rS9nHd0v+JcsHe80iHGnQpsRE
kvKo1l7xqornU7yxY56FHA7CMDMMmUTq3E5SwDvHDWor2XXvsi/AHj+NHeTyC69i
dQyM7y0tfZuUe1YcklBixKYq5kLBjGbVNFG/v68X3OR8jPds/N645GGeLqZIMtF8
EaQg2b+5664WTqwj03WTpGhyWlKf0/+Mqft0aNEoYco+JuIEWA+inIEn8XSZdMdb
2NC0Ayo478WoUAgjixxduJPuw1lmKkg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:35 2025 by rpki-client