Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872dce16-1198-3397-a5d2-f16924324a66.roa
File: 872dce16-1198-3397-a5d2-f16924324a66.roa (raw, json)
Hash identifier: gwfMEsA9B7zzj458v4rDafkCH1fx8QjStSUmP8YAn/8=
Subject key identifier: B8:F7:16:6C:8C:47:D7:1C:30:A0:D9:3E:D3:F6:A4:2F:0F:4D:8F:5A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D9BE1C50C2CA2B0068AF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872dce16-1198-3397-a5d2-f16924324a66.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33668
IP address blocks: 2001:559:c3c5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:9b:e1:c5:0c:2c:a2:b0:06:8a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1ab34da9-023e-4de4-81b0-9a1a1c99c51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:0c:52:9a:fa:b4:62:71:6e:cc:75:bb:52:
67:f7:3d:28:39:0a:55:42:86:73:4a:b6:df:2c:66:
2b:d9:55:5f:25:df:43:ea:11:4e:31:cd:de:9f:17:
b9:66:0b:b7:c6:4f:32:53:b7:93:55:7c:db:b2:5d:
07:8b:60:7d:86:68:ef:52:01:08:36:1c:48:4a:e5:
7d:f6:c1:a6:79:c0:ce:4f:53:f0:0e:9e:60:af:b4:
72:98:04:73:26:02:47:5d:12:c8:28:91:9c:65:5c:
8c:c7:98:40:02:57:09:6d:ab:69:44:50:10:8e:dc:
96:5b:6d:a6:91:b4:f6:1f:20:30:6c:12:77:d1:05:
73:99:a3:4f:11:af:12:04:50:96:e6:d2:db:07:35:
49:39:13:fe:e4:12:0f:eb:ac:43:73:e4:1e:6b:f0:
8d:b2:49:c9:bf:62:8c:cb:4f:2b:66:32:c9:fd:53:
47:f3:a5:49:72:e6:9e:eb:d7:33:c3:61:c6:b1:c0:
6d:2d:eb:a0:80:14:e4:f4:c5:d7:83:1e:be:b5:73:
33:53:8e:95:33:bc:4d:c6:24:8b:b7:71:b5:0f:72:
db:ef:43:0a:79:1b:7a:4f:4d:5d:7d:10:3e:db:7b:
87:ae:32:c7:b4:f0:1f:b0:88:5a:13:09:92:98:e5:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F7:16:6C:8C:47:D7:1C:30:A0:D9:3E:D3:F6:A4:2F:0F:4D:8F:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/872dce16-1198-3397-a5d2-f16924324a66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c3c5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:96:b8:d4:2e:8d:59:e0:2e:c1:ae:eb:06:be:10:c9:7e:57:
6d:f5:54:dc:43:17:b2:f3:68:bb:18:bf:e8:d3:c3:63:2b:34:
56:f6:b4:81:02:55:8d:4f:9c:92:9c:65:57:30:08:13:62:46:
f8:c5:89:09:7f:d3:91:27:8f:08:8f:ee:98:c5:00:9b:6a:1d:
33:97:98:43:39:d1:ab:bd:47:e4:51:00:96:f0:b7:45:8b:24:
99:39:99:7a:b8:d0:aa:f2:42:cc:60:15:d5:23:c0:24:e1:d8:
48:93:ff:93:c0:f1:75:95:e8:86:75:5e:ec:c9:58:32:84:f7:
42:cd:b1:d6:16:de:59:08:01:86:2c:c2:60:11:26:b2:88:73:
ca:e8:4e:2f:0b:89:d1:5f:c0:95:de:0f:77:f7:7b:92:d2:19:
a5:94:06:0f:c2:a3:59:89:96:cf:c7:2e:85:2f:94:67:8e:3b:
11:f2:11:c0:d0:f6:a4:0b:e0:b5:5c:8c:8c:9e:91:09:8b:f6:
a6:99:07:61:f3:b1:2b:a3:ea:5a:d4:18:91:2d:42:91:e7:16:
85:0f:a9:e8:44:6c:29:2b:76:02:4b:d4:ba:61:50:43:1a:81:
e3:73:85:89:f4:a3:1d:ce:e2:44:26:09:34:86:34:78:27:c8:
90:d7:3a:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebZvhxQwsorAGivAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MWFiMzRkYTktMDIzZS00ZGU0LTgxYjAtOWExYTFjOTljNTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCYMUpr6tGJxbsx1u1Jn9z0oOQpVQoZzSrbf
LGYr2VVfJd9D6hFOMc3enxe5Zgu3xk8yU7eTVXzbsl0Hi2B9hmjvUgEINhxISuV9
9sGmecDOT1PwDp5gr7RymARzJgJHXRLIKJGcZVyMx5hAAlcJbatpRFAQjtyWW22m
kbT2HyAwbBJ30QVzmaNPEa8SBFCW5tLbBzVJORP+5BIP66xDc+Qea/CNsknJv2KM
y08rZjLJ/VNH86VJcuae69czw2HGscBtLeuggBTk9MXXgx6+tXMzU46VM7xNxiSL
t3G1D3Lb70MKeRt6T01dfRA+23uHrjLHtPAfsIhaEwmSmOVpPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLj3FmyMR9ccMKDZPtP2pC8PTY9aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODcyZGNlMTYtMTE5OC0z
Mzk3LWE1ZDItZjE2OTI0MzI0YTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcPF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAN2WuNQujVngLsGu6wa+EMl+V231VNxDF7LzaLsYv+jTw2MrNFb2
tIECVY1PnJKcZVcwCBNiRvjFiQl/05EnjwiP7pjFAJtqHTOXmEM50au9R+RRAJbw
t0WLJJk5mXq40KryQsxgFdUjwCTh2EiT/5PA8XWV6IZ1XuzJWDKE90LNsdYW3lkI
AYYswmARJrKIc8roTi8LidFfwJXeD3f3e5LSGaWUBg/Co1mJls/HLoUvlGeOOxHy
EcDQ9qQL4LVcjIyekQmL9qaZB2HzsSuj6lrUGJEtQpHnFoUPqehEbCkrdgJL1Lph
UEMageNzhYn0ox3O4kQmCTSGNHgnyJDXOt8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:34:17 2025 by rpki-client