Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa
File: 8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa (raw, json)
Hash identifier: 2Jjxz3lx8QZ/T4bhnGWYXuyF7qHQlHKqdzDprMfPGWY=
Subject key identifier: 72:87:6A:14:0F:C8:78:4E:C3:1B:DB:C7:61:19:40:4D:BA:C5:D6:39
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF2FF8F18F0DD5DD221980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 24.13.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:2f:f8:f1:8f:0d:d5:dd:22:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=6a0b0bdc-457c-442b-8b27-9b7b12e3a067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:fb:7a:11:b4:1e:e9:f8:61:85:54:bf:46:
30:e9:b9:1a:67:c8:68:f7:78:54:42:df:45:82:ef:
b8:6f:01:9e:8a:7e:46:fa:da:ef:33:09:7c:26:86:
a6:c2:ea:c5:8f:ec:67:2e:09:3a:ac:df:5e:63:90:
aa:c3:a5:47:22:22:8e:b1:85:dc:57:ed:24:80:2d:
dd:90:3d:af:a7:be:24:8b:ff:f2:30:44:46:f9:d1:
38:75:c5:b3:61:eb:e4:df:60:1d:42:1a:9b:0f:41:
85:64:33:fb:97:4f:24:c1:c3:08:9b:50:1c:0d:c9:
47:3d:0d:c1:37:26:1b:72:4d:1a:ac:bb:e4:27:fb:
bd:36:b1:ec:bb:29:7c:fa:93:41:5b:7c:9d:8d:0c:
28:30:e4:84:9f:28:54:b6:d4:3d:77:75:0a:e5:2b:
f0:27:ce:41:8e:31:84:de:6f:46:6d:62:35:3a:fe:
73:13:c7:0a:54:f5:d0:8d:55:70:66:76:eb:6a:c3:
6b:fc:e3:c5:a3:ef:95:10:fa:c8:54:8c:ea:57:16:
ae:55:b6:5b:f3:a9:ad:e4:6d:70:7c:5c:49:16:66:
13:cd:ce:ec:33:44:d3:54:6f:c8:3c:48:98:5b:ed:
5c:cb:7a:a4:9b:c2:a3:80:27:46:ec:53:8e:52:01:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:87:6A:14:0F:C8:78:4E:C3:1B:DB:C7:61:19:40:4D:BA:C5:D6:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8d22b9-cf57-3f2f-a8a3-c8e8ecb6254e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.13.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:cf:f3:fe:7b:5e:55:2a:72:c5:e2:65:cf:9f:50:10:f2:12:
35:25:f7:c9:8b:81:23:bf:49:26:d5:0d:ed:e6:d2:7d:d1:3b:
f0:3b:8d:7a:88:4f:a2:b5:df:a8:53:9c:7c:a0:f8:1e:29:f8:
00:83:dc:41:d2:b3:99:b0:3d:da:a1:ce:22:c0:5e:b3:26:56:
c7:f5:b5:20:45:db:98:e6:07:98:1e:49:f4:cc:65:4a:2a:a6:
39:63:1b:6d:a8:68:ba:5a:80:fe:80:4e:8d:f2:46:94:18:0c:
5b:17:4b:1e:d1:fb:0b:00:02:96:00:e5:9c:af:bd:4b:ff:ad:
f7:e3:da:c7:3f:2a:ce:38:17:5f:04:04:62:8e:67:aa:cc:a6:
49:d2:e8:8b:6a:20:ba:eb:4b:39:9f:9a:d8:04:1d:c6:6d:08:
4c:45:a6:18:ea:be:5d:0d:3c:7a:e8:ef:39:c4:89:d9:93:dd:
97:24:9b:60:a1:a5:6e:07:43:56:79:e6:18:d3:5c:65:c5:62:
6e:11:4e:bd:00:f5:97:f8:69:cf:c2:58:22:50:9e:6f:61:a8:
f1:77:86:7d:eb:3e:ce:48:40:e8:c8:3c:c1:16:e8:33:09:20:
b4:4f:73:ae:99:24:4f:fb:c0:77:f9:87:a2:4b:80:a5:89:e7:
f4:af:20:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksry/48Y8N1d0iGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NmEwYjBiZGMtNDU3Yy00NDJiLThiMjctOWI3YjEyZTNhMDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlP7ehG0Hun4YYVUv0Yw6bkaZ8ho93hUQt9F
gu+4bwGein5G+trvMwl8JoamwurFj+xnLgk6rN9eY5Cqw6VHIiKOsYXcV+0kgC3d
kD2vp74ki//yMERG+dE4dcWzYevk32AdQhqbD0GFZDP7l08kwcMIm1AcDclHPQ3B
NyYbck0arLvkJ/u9NrHsuyl8+pNBW3ydjQwoMOSEnyhUttQ9d3UK5SvwJ85BjjGE
3m9GbWI1Ov5zE8cKVPXQjVVwZnbrasNr/OPFo++VEPrIVIzqVxauVbZb86mt5G1w
fFxJFmYTzc7sM0TTVG/IPEiYW+1cy3qkm8KjgCdG7FOOUgH2bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHKHahQPyHhOwxvbx2EZQE26xdY5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ4ZDIyYjktY2Y1Ny0z
ZjJmLWE4YTMtYzhlOGVjYjYyNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGA3cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIfP8/57XlUqcsXiZc+fUBDyEjUl98mLgSO/SSbVDe3m0n3RO/A7jXqI
T6K136hTnHyg+B4p+ACD3EHSs5mwPdqhziLAXrMmVsf1tSBF25jmB5geSfTMZUoq
pjljG22oaLpagP6ATo3yRpQYDFsXSx7R+wsAApYA5ZyvvUv/rffj2sc/Ks44F18E
BGKOZ6rMpknS6ItqILrrSzmfmtgEHcZtCExFphjqvl0NPHro7znEidmT3Zckm2Ch
pW4HQ1Z55hjTXGXFYm4RTr0A9Zf4ac/CWCJQnm9hqPF3hn3rPs5IQOjIPMEW6DMJ
ILRPc66ZJE/7wHf5h6JLgKWJ5/SvIGc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:37 2025 by rpki-client