Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f4aa7d7-525b-3b41-aa22-0828f8c5bacc.roa
File: 8f4aa7d7-525b-3b41-aa22-0828f8c5bacc.roa (raw, json)
Hash identifier: EYfWd/tbGiHexZKagyLgLYBUk+ZOlc7djIBZ9IXdDkM=
Subject key identifier: 4C:83:89:07:09:59:A0:58:C2:C7:1A:15:BA:B1:00:74:BC:36:78:FC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D6B2F194DC557BA1BF3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f4aa7d7-525b-3b41-aa22-0828f8c5bacc.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33651
IP address blocks: 2001:559:376::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:6b:2f:19:4d:c5:57:ba:1b:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=f5adc6f0-456e-4fd8-ab71-9f6a856779d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d4:25:6d:39:cc:68:aa:d3:9c:2c:ba:7c:2d:
af:7c:72:1c:ab:1d:6b:88:ae:cf:fd:eb:19:7d:f3:
cf:e2:1a:d0:ac:f6:ac:0f:5a:08:23:8f:6b:c9:55:
3f:13:82:06:ed:0e:61:e1:97:b9:b6:49:9c:f9:67:
77:3f:aa:01:04:50:6b:4a:0b:82:c8:14:3a:d7:66:
2b:cc:53:36:24:20:0d:bd:27:86:d3:43:44:39:35:
9f:85:f9:58:8c:32:32:fe:da:cd:aa:b8:39:9f:cd:
e6:6f:6c:ba:ee:42:7c:09:d4:fe:20:37:a0:23:ef:
9f:5c:1f:52:25:59:bb:05:f8:5a:f7:76:22:85:30:
46:88:c3:f2:27:a8:b6:c2:5f:f4:66:ea:38:db:fe:
a1:e4:a8:34:83:cb:48:2e:5a:60:52:2a:1f:57:a3:
39:e1:dd:e8:66:6b:63:bf:1e:7c:6f:2f:13:c9:61:
d1:d9:0d:80:9c:be:7f:09:44:e1:8a:f0:7c:32:26:
b9:b6:df:55:42:69:f3:de:1d:bf:fd:e5:56:7e:d6:
59:48:47:b3:18:12:8d:fd:bb:fe:0f:53:34:44:45:
87:f9:6c:99:7d:10:62:e9:52:6c:39:c4:df:19:1f:
14:44:06:ee:6e:6f:41:78:19:8d:89:da:75:97:e7:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:83:89:07:09:59:A0:58:C2:C7:1A:15:BA:B1:00:74:BC:36:78:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f4aa7d7-525b-3b41-aa22-0828f8c5bacc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:376::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:91:83:9f:d7:44:61:a8:26:13:01:1b:3e:fd:7d:a6:a1:fb:
9b:25:9c:3f:7b:aa:fe:c0:6f:e6:1d:5b:78:3b:50:be:9b:ee:
06:9b:01:f2:b7:34:37:a4:0e:c9:cd:1f:08:c9:02:6c:1f:ba:
7c:1b:52:88:a1:ec:02:49:91:f2:67:8e:6c:f3:e4:a8:ab:58:
fb:d5:c5:06:73:a1:95:3b:d8:3c:39:d7:e1:5f:a1:0f:a3:3c:
76:d0:ea:b7:bd:9b:f8:03:c2:db:8c:9c:73:09:55:bb:5d:1a:
e2:5f:ff:ec:fa:2e:3f:8d:37:9a:04:cc:de:d0:0d:7f:8e:99:
4e:ab:df:7b:3d:71:a8:04:7d:98:55:c5:e0:bb:89:8d:1c:bb:
19:98:ab:f2:ca:a5:82:dd:5d:c1:02:75:d1:2a:6d:2d:da:e2:
e8:cb:aa:2f:1f:f2:fe:e8:8f:34:2c:5f:4c:1d:5f:8b:af:a8:
97:5e:0a:46:04:96:96:c8:5b:f8:89:11:ce:6d:20:b4:a4:95:
cb:7e:5c:c2:3a:83:61:e9:78:3a:f3:45:0a:52:5e:d5:7d:f6:
89:b9:0a:0d:63:5e:fd:45:99:09:1f:36:6f:95:66:fb:86:2d:
8f:b6:35:e0:79:7b:bf:d7:c2:aa:b2:bc:04:37:5c:50:7b:d9:
3d:7d:ce:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebWsvGU3FV7ob88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZjVhZGM2ZjAtNDU2ZS00ZmQ4LWFiNzEtOWY2YTg1Njc3OWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9QlbTnMaKrTnCy6fC2vfHIcqx1riK7P/esZ
ffPP4hrQrPasD1oII49ryVU/E4IG7Q5h4Ze5tkmc+Wd3P6oBBFBrSguCyBQ612Yr
zFM2JCANvSeG00NEOTWfhflYjDIy/trNqrg5n83mb2y67kJ8CdT+IDegI++fXB9S
JVm7Bfha93YihTBGiMPyJ6i2wl/0Zuo42/6h5Kg0g8tILlpgUiofV6M54d3oZmtj
vx58by8TyWHR2Q2AnL5/CUThivB8Mia5tt9VQmnz3h2//eVWftZZSEezGBKN/bv+
D1M0REWH+WyZfRBi6VJsOcTfGR8URAbubm9BeBmNidp1l+c5OwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEyDiQcJWaBYwscaFbqxAHS8Nnj8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGY0YWE3ZDctNTI1Yi0z
YjQxLWFhMjItMDgyOGY4YzViYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQN2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHmRg5/XRGGoJhMBGz79faah+5slnD97qv7Ab+YdW3g7UL6b7gab
AfK3NDekDsnNHwjJAmwfunwbUoih7AJJkfJnjmzz5KirWPvVxQZzoZU72Dw51+Ff
oQ+jPHbQ6re9m/gDwtuMnHMJVbtdGuJf/+z6Lj+NN5oEzN7QDX+OmU6r33s9cagE
fZhVxeC7iY0cuxmYq/LKpYLdXcECddEqbS3a4ujLqi8f8v7ojzQsX0wdX4uvqJde
CkYElpbIW/iJEc5tILSklct+XMI6g2HpeDrzRQpSXtV99om5Cg1jXv1FmQkfNm+V
ZvuGLY+2NeB5e7/XwqqyvAQ3XFB72T19zj4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:10 2025 by rpki-client