Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91d3b4a1-bf22-3e63-945a-080687bacddc.roa
File: 91d3b4a1-bf22-3e63-945a-080687bacddc.roa (raw, json)
Hash identifier: zsZh01WxxSB/keB+CyZFLvqugtvYXiqbw7pr/2nB7XA=
Subject key identifier: 18:BB:C2:C8:30:E1:3C:8F:8B:35:F4:66:8B:2F:22:E0:FC:24:78:DA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFDAF5F247A7788AB6EC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91d3b4a1-bf22-3e63-945a-080687bacddc.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 24.23.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:da:f5:f2:47:a7:78:8a:b6:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=d4bab8fb-27ed-41de-ac59-24efda2afac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:90:c1:61:0d:40:5e:4b:54:9c:bb:2c:70:
dc:3c:2b:a6:e5:92:b2:bb:e4:82:af:05:ad:39:9c:
65:cb:58:c4:22:61:be:1c:08:4f:42:50:d0:cc:91:
78:43:96:05:57:cd:a5:31:c8:22:ac:00:c2:3f:d2:
cf:08:81:74:0b:20:c8:a4:6c:ad:42:a2:fb:56:99:
1a:fc:f7:7b:c1:66:ad:c3:cf:d6:ef:e9:fd:5b:f6:
45:95:04:b1:21:aa:57:f6:88:8c:2f:c7:a9:0d:5c:
a7:f6:40:d0:97:6e:45:c8:49:65:06:86:67:fc:56:
1b:67:28:11:ca:20:21:f1:c6:cc:3d:c8:ab:31:38:
95:03:18:aa:c1:35:1d:af:b1:67:de:dc:f6:d3:0d:
8d:59:47:88:16:11:58:e0:40:9a:62:bf:85:cd:09:
58:f2:8a:84:fe:95:4d:45:b4:81:28:5e:e2:d5:d1:
b1:2c:05:c6:80:ed:fc:13:0a:c3:9e:8e:7a:f9:03:
b4:af:4e:8b:76:1e:8e:68:62:b6:7b:4a:68:f7:25:
86:19:63:fd:4f:bc:23:83:13:c1:e1:6e:20:87:ed:
a3:68:2f:1b:37:d6:0f:fc:0d:d4:68:54:54:f3:15:
b4:56:50:2f:3f:70:8f:34:42:5e:c5:24:c1:14:fe:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BB:C2:C8:30:E1:3C:8F:8B:35:F4:66:8B:2F:22:E0:FC:24:78:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91d3b4a1-bf22-3e63-945a-080687bacddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.23.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:00:4e:2d:12:4d:51:ad:4b:05:ff:d2:f9:47:21:74:ec:be:
b5:bd:dd:b8:fe:51:c6:6a:3c:be:17:39:f7:38:d4:06:c2:71:
58:36:45:e4:78:1b:1f:64:5d:ce:94:d7:37:14:49:d5:48:6a:
c9:ff:a2:6f:5e:0d:51:a2:83:39:ec:f4:4c:14:b5:f8:51:69:
89:80:3a:f7:8a:50:ab:e4:79:56:75:b2:d8:4b:86:07:87:85:
6c:b1:f0:e4:85:c9:b0:4f:13:49:97:14:51:9e:bd:6c:de:c1:
ee:a0:8e:31:f0:60:b0:17:ad:2e:5a:ac:6e:65:08:75:75:84:
df:23:66:2f:6a:6f:f2:ed:26:d6:ff:05:d9:32:ed:d0:24:3c:
3b:82:a3:6a:a2:7a:f8:44:f1:1e:93:bc:ab:b0:54:b6:21:2a:
51:7f:dc:86:5a:92:0a:05:f9:94:fb:85:53:26:7c:db:24:90:
7b:b4:a5:7f:f8:38:0a:d6:62:f3:4b:ec:6d:07:d2:f4:11:7b:
6f:c6:31:83:f9:5d:32:d6:87:22:fd:b9:a9:6b:ea:b8:ac:13:
11:4f:dc:83:9d:ea:9a:4e:ec:15:37:65:7f:6b:c3:aa:7e:ac:
8c:2c:fc:a5:98:98:3f:9f:93:a6:d4:df:60:d9:63:00:fd:c6:
59:a4:f0:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr9r18keneIq27IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDRiYWI4ZmItMjdlZC00MWRlLWFjNTktMjRlZmRhMmFmYWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxSQwWENQF5LVJy7LHDcPCum5ZKyu+SCrwWt
OZxly1jEImG+HAhPQlDQzJF4Q5YFV82lMcgirADCP9LPCIF0CyDIpGytQqL7Vpka
/Pd7wWatw8/W7+n9W/ZFlQSxIapX9oiML8epDVyn9kDQl25FyEllBoZn/FYbZygR
yiAh8cbMPcirMTiVAxiqwTUdr7Fn3tz20w2NWUeIFhFY4ECaYr+FzQlY8oqE/pVN
RbSBKF7i1dGxLAXGgO38EwrDno56+QO0r06Ldh6OaGK2e0po9yWGGWP9T7wjgxPB
4W4gh+2jaC8bN9YP/A3UaFRU8xW0VlAvP3CPNEJexSTBFP4EjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBi7wsgw4TyPizX0ZosvIuD8JHjaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTFkM2I0YTEtYmYyMi0z
ZTYzLTk0NWEtMDgwNjg3YmFjZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBesMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN0ATi0STVGtSwX/0vlHIXTsvrW93bj+UcZqPL4XOfc41AbCcVg2ReR4
Gx9kXc6U1zcUSdVIasn/om9eDVGigzns9EwUtfhRaYmAOveKUKvkeVZ1sthLhgeH
hWyx8OSFybBPE0mXFFGevWzewe6gjjHwYLAXrS5arG5lCHV1hN8jZi9qb/LtJtb/
Bdky7dAkPDuCo2qievhE8R6TvKuwVLYhKlF/3IZakgoF+ZT7hVMmfNskkHu0pX/4
OArWYvNL7G0H0vQRe2/GMYP5XTLWhyL9ualr6risExFP3IOd6ppO7BU3ZX9rw6p+
rIws/KWYmD+fk6bU32DZYwD9xlmk8KY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:05:07 2025 by rpki-client