Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa
File: 7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa (raw, json)
Hash identifier: tfgJfp4apAqU538bOscNJUvxsfA8MNsVR6zj978XvZ0=
Subject key identifier: 4C:F8:49:BD:CB:AA:18:A3:46:D5:CE:D4:8E:66:2F:9C:88:BA:7D:62
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6C2DA81E09A6D853EFDC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 2001:559:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:2d:a8:1e:09:a6:d8:53:ef:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=ca445d3f-0439-4e8f-88c0-03eea397ca58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:55:75:f0:e1:b1:af:e1:53:39:75:7d:23:
c5:92:20:fe:25:9b:a1:c5:2e:8b:f5:19:4c:26:56:
3b:3e:84:99:06:46:46:2a:2f:47:30:79:cb:23:03:
fc:4b:c2:18:a5:36:bc:ce:df:63:db:bf:69:95:71:
c0:d3:90:78:a8:72:af:89:39:80:d5:04:b1:0f:6a:
4e:12:54:ad:b4:ae:94:e7:10:ca:5b:0d:f3:b6:eb:
fc:d9:da:76:7f:7c:91:0c:60:f6:0d:de:66:a1:a1:
cf:14:ba:3b:45:8f:02:94:70:d5:f0:c0:8b:d1:83:
31:96:af:c2:be:84:f8:2f:47:63:30:5d:87:85:a8:
96:8b:b7:17:6e:b9:45:fa:ce:c4:97:9b:ae:c6:36:
b8:7f:8b:44:5c:ee:7c:2b:05:24:8d:8e:30:d7:e1:
4c:86:97:09:e5:7a:76:a6:a6:37:df:9e:ae:b1:32:
50:96:62:e3:29:d5:eb:90:fa:ac:e5:07:63:e0:a7:
5e:03:84:4d:0f:9a:5f:34:38:7e:bb:16:dc:80:40:
a1:78:af:25:7f:35:90:d6:64:3c:53:68:d0:66:e1:
90:d3:9c:b6:a7:5a:7d:4a:b6:db:96:da:06:d0:66:
ab:b8:c1:bf:71:90:21:d9:53:a5:a6:f7:47:81:53:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F8:49:BD:CB:AA:18:A3:46:D5:CE:D4:8E:66:2F:9C:88:BA:7D:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:11::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:81:18:44:5e:b0:2e:cf:03:52:b8:b1:58:ea:58:ab:6b:f5:
06:97:a8:25:e1:80:2d:6b:45:87:b2:1c:6d:50:87:5b:df:18:
47:e9:36:3f:60:c1:84:2d:f4:8b:df:3d:7f:45:7c:cb:7c:ea:
77:97:e6:2f:87:ff:c5:3d:67:44:72:11:fb:7c:90:00:96:4b:
6e:ac:5b:cd:45:89:09:fc:d1:ad:5c:63:ca:78:4e:da:86:50:
56:a6:d9:7a:20:da:48:99:b9:19:28:83:06:3f:2c:2c:4d:96:
f8:3b:32:3c:c9:25:0a:9d:22:4e:86:73:46:fe:da:76:28:ef:
6d:37:d2:a4:eb:60:42:75:de:18:40:ce:51:41:df:71:d0:f9:
c9:b2:1e:b2:d7:c3:dc:f1:ac:0a:e8:c3:a9:c4:30:42:3b:90:
ae:94:6b:c2:b9:fd:99:d8:53:75:99:dd:ad:aa:c6:ba:60:24:
91:ce:79:d9:fb:d5:c1:e1:0d:f7:37:73:2e:65:b3:43:19:e3:
8e:ec:24:01:81:09:2a:61:86:60:c0:42:61:37:a8:8b:ff:8d:
82:da:ed:32:e0:45:2b:34:e2:9c:fe:d1:70:2f:81:62:d3:3a:
bd:6a:b8:38:6b:65:ab:bc:27:f2:24:6c:db:69:06:83:d2:2b:
92:dd:9c:f5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebC2oHgmm2FPv3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
Y2E0NDVkM2YtMDQzOS00ZThmLTg4YzAtMDNlZWEzOTdjYTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj1VdfDhsa/hUzl1fSPFkiD+JZuhxS6L9RlM
JlY7PoSZBkZGKi9HMHnLIwP8S8IYpTa8zt9j279plXHA05B4qHKviTmA1QSxD2pO
ElSttK6U5xDKWw3ztuv82dp2f3yRDGD2Dd5moaHPFLo7RY8ClHDV8MCL0YMxlq/C
voT4L0djMF2HhaiWi7cXbrlF+s7El5uuxja4f4tEXO58KwUkjY4w1+FMhpcJ5Xp2
pqY3356usTJQlmLjKdXrkPqs5Qdj4KdeA4RND5pfNDh+uxbcgECheK8lfzWQ1mQ8
U2jQZuGQ05y2p1p9SrbbltoG0GaruMG/cZAh2VOlpvdHgVMwzQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEz4Sb3LqhijRtXO1I5mL5yIun1iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2QxZjEwMGEtZmIxYS0z
ZjZjLTljMjItNGY3NmYyMzlkYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQAR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC6BGEResC7PA1K4sVjqWKtr9QaXqCXhgC1rRYeyHG1Qh1vfGEfp
Nj9gwYQt9IvfPX9FfMt86neX5i+H/8U9Z0RyEft8kACWS26sW81FiQn80a1cY8p4
TtqGUFam2Xog2kiZuRkogwY/LCxNlvg7MjzJJQqdIk6Gc0b+2nYo72030qTrYEJ1
3hhAzlFB33HQ+cmyHrLXw9zxrArow6nEMEI7kK6Ua8K5/ZnYU3WZ3a2qxrpgJJHO
edn71cHhDfc3cy5ls0MZ447sJAGBCSphhmDAQmE3qIv/jYLa7TLgRSs04pz+0XAv
gWLTOr1quDhrZau8J/IkbNtpBoPSK5LdnPU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:24 2025 by rpki-client