Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e1d8b16-88b7-3929-85b8-6970a672e325.roa
File: 8e1d8b16-88b7-3929-85b8-6970a672e325.roa (raw, json)
Hash identifier: SKBReCKQbmWPGt0e+qhiLP9KHh8ZxjFWcapfwNccnzs=
Subject key identifier: A6:0C:BD:9A:EB:8E:91:41:CC:B7:76:22:D9:AB:A8:B7:C2:13:BF:8C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F763CC5B010F55604AC300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e1d8b16-88b7-3929-85b8-6970a672e325.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 76.19.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:63:cc:5b:01:0f:55:60:4a:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=4c401134-dfd7-4a9f-89ec-ca72bbfbcde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:8a:98:dc:42:84:24:c2:9d:53:23:a4:fa:
65:18:de:56:7d:8e:80:ed:91:2f:2e:79:02:37:aa:
3d:62:71:c1:6b:2e:7c:21:25:28:ac:7e:73:b0:3a:
5b:29:b8:48:79:a5:21:45:e8:d4:9c:41:0b:07:d3:
cd:49:4a:59:23:44:b7:50:41:be:18:b6:46:ec:33:
9a:64:dc:9c:ed:81:ec:a8:95:02:0e:79:a0:c5:2e:
f6:9e:cc:3d:44:30:b8:6e:10:74:92:1f:b8:cd:5e:
81:de:0b:39:9f:a3:ea:11:b1:85:20:80:a8:0c:9c:
d0:07:17:4c:18:a9:29:3c:94:82:0f:31:8e:1c:ad:
a4:76:51:0d:df:3e:53:85:6e:d1:4d:7c:c3:d4:45:
e5:aa:bf:69:d7:72:af:8d:92:8e:e4:4e:4b:e6:2a:
6a:15:c9:df:e8:60:de:55:2d:db:be:00:04:66:d4:
85:75:14:2d:92:46:33:d8:ab:98:ee:ff:88:dc:40:
60:a8:9f:ba:2a:b3:44:83:38:2c:ec:6d:4c:1f:42:
78:41:dc:40:51:a9:25:74:72:d1:4c:a5:71:8e:19:
28:58:ac:98:2d:be:22:bb:69:d3:2c:8d:68:5d:34:
20:25:bf:ea:99:bc:ef:0d:08:5d:7d:dd:e9:28:3a:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0C:BD:9A:EB:8E:91:41:CC:B7:76:22:D9:AB:A8:B7:C2:13:BF:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e1d8b16-88b7-3929-85b8-6970a672e325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.19.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:c8:9b:f1:52:79:be:27:b3:86:3b:b2:c6:e1:fe:cf:53:68:
ac:34:60:06:f3:24:b5:54:f8:5c:86:67:5b:f1:08:66:d4:5d:
9d:c6:91:3a:81:d7:f9:9f:fa:b8:f8:e7:3f:25:b5:9d:5a:c1:
a8:07:e6:aa:be:4e:83:c9:ec:8c:90:f9:0f:ae:a2:70:24:1a:
fe:0a:33:16:a4:73:00:32:01:7e:84:fc:75:b7:5b:95:5b:51:
04:13:0f:6e:4b:db:9d:50:ed:a4:05:a2:e8:4d:37:75:f4:f3:
65:64:3e:eb:1e:94:63:8d:67:c0:7c:30:f5:1b:e7:4c:65:97:
1e:9b:2c:86:32:d3:aa:69:13:2d:6f:2c:23:72:f3:45:1e:a2:
f8:b7:77:72:5a:5b:95:57:92:2a:de:0e:cd:8d:e9:b2:8b:94:
b4:b9:88:9a:9f:47:6f:07:50:8c:fc:56:f4:d4:42:9c:3c:02:
ef:2e:e7:fb:a4:26:9b:21:e6:3c:16:ab:44:5a:84:6d:96:bc:
ac:2b:63:d4:16:5e:d3:ac:1d:76:d7:1e:01:4e:91:8c:1b:b3:
30:96:db:9e:09:4d:5f:c9:1f:ed:54:77:50:c5:18:e4:76:14:
9a:8c:08:3b:29:12:bb:cc:e0:b1:0f:03:e6:c9:a4:fc:af:8b:
9a:a6:16:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj092PMWwEPVWBKwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NGM0MDExMzQtZGZkNy00YTlmLTg5ZWMtY2E3MmJiZmJjZGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYeKmNxChCTCnVMjpPplGN5WfY6A7ZEvLnkC
N6o9YnHBay58ISUorH5zsDpbKbhIeaUhRejUnEELB9PNSUpZI0S3UEG+GLZG7DOa
ZNyc7YHsqJUCDnmgxS72nsw9RDC4bhB0kh+4zV6B3gs5n6PqEbGFIICoDJzQBxdM
GKkpPJSCDzGOHK2kdlEN3z5ThW7RTXzD1EXlqr9p13KvjZKO5E5L5ipqFcnf6GDe
VS3bvgAEZtSFdRQtkkYz2KuY7v+I3EBgqJ+6KrNEgzgs7G1MH0J4QdxAUakldHLR
TKVxjhkoWKyYLb4iu2nTLI1oXTQgJb/qmbzvDQhdfd3pKDpOXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKYMvZrrjpFBzLd2ItmrqLfCE7+MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGUxZDhiMTYtODhiNy0z
OTI5LTg1YjgtNjk3MGE2NzJlMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBNmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvIm/FSeb4ns4Y7ssbh/s9TaKw0YAbzJLVU+FyGZ1vxCGbUXZ3GkTqB
1/mf+rj45z8ltZ1awagH5qq+ToPJ7IyQ+Q+uonAkGv4KMxakcwAyAX6E/HW3W5Vb
UQQTD25L251Q7aQFouhNN3X082VkPuselGONZ8B8MPUb50xllx6bLIYy06ppEy1v
LCNy80Ueovi3d3JaW5VXkireDs2N6bKLlLS5iJqfR28HUIz8VvTUQpw8Au8u5/uk
Jpsh5jwWq0RahG2WvKwrY9QWXtOsHXbXHgFOkYwbszCW254JTV/JH+1Ud1DFGOR2
FJqMCDspErvM4LEPA+bJpPyvi5qmFrI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:07 2025 by rpki-client