Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92b28edc-dce3-39a7-9e1d-71f54397d22d.roa
File: 92b28edc-dce3-39a7-9e1d-71f54397d22d.roa (raw, json)
Hash identifier: HMbZkIbArY5TglPIOxMmXMujdT6O/dYqo/79XbCqa6s=
Subject key identifier: 21:17:5F:72:98:A6:9E:56:10:62:0B:9C:FD:7D:BC:0C:DC:CD:EB:25
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D9F80CF3F2D6FE6F01000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92b28edc-dce3-39a7-9e1d-71f54397d22d.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 65.96.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:9f:80:cf:3f:2d:6f:e6:f0:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=e9249d46-64fb-409c-b682-73011e627255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3f:44:70:5f:77:17:35:ef:a0:bf:9e:41:2e:
20:5d:0d:f2:6d:46:d4:02:44:75:c5:b6:9f:18:96:
c8:6b:6e:c6:a6:1f:56:19:68:0c:87:a1:b0:11:00:
a1:16:ca:15:bc:23:af:bb:dd:50:00:f2:95:de:1f:
59:d2:7e:80:8c:cf:16:d3:9f:1e:c6:fd:a4:00:a9:
70:3d:c0:8c:7b:1c:75:79:e8:77:66:a9:f2:de:70:
8f:09:d8:1e:de:44:8f:e8:ef:8e:72:c9:74:9f:f0:
a8:13:3b:23:24:a4:0b:1d:b8:af:b6:b0:80:7e:25:
42:6b:e6:ef:9b:52:b1:5a:bc:e9:83:3f:b0:f0:fd:
88:1c:ea:59:26:3f:5f:00:f3:24:53:80:c6:f5:fa:
19:a2:fd:49:df:5f:e0:14:ab:c3:92:65:89:88:eb:
c2:c7:9b:86:71:78:3e:ea:3a:1d:b0:96:3a:5d:7a:
82:2d:ed:78:0c:cd:aa:9c:a8:fc:f2:db:6a:97:0d:
27:08:d8:d6:1c:36:5f:01:82:65:13:5d:09:4d:01:
cd:59:13:e2:5f:ba:f2:e4:dd:21:ef:e5:af:22:14:
77:cf:ee:99:71:79:55:aa:9a:f6:15:92:67:4e:36:
6e:b3:66:0c:77:fb:71:b0:32:49:e0:f5:0e:7c:02:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:5F:72:98:A6:9E:56:10:62:0B:9C:FD:7D:BC:0C:DC:CD:EB:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92b28edc-dce3-39a7-9e1d-71f54397d22d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
65.96.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:3a:ec:51:cb:e1:c7:7a:23:3c:9f:5b:c9:01:95:db:d3:55:
a4:b2:8b:26:a8:22:0b:ac:1b:d9:af:58:af:5c:e5:5c:f0:f6:
08:51:22:de:a0:e8:3d:f2:9a:b0:7b:95:60:7a:cc:2b:3a:0e:
00:c0:a8:e6:b1:23:21:75:4f:4e:80:3a:bd:71:56:bd:41:f9:
4c:c1:5f:e1:d9:5b:c8:28:ba:d1:49:45:35:76:33:69:74:b3:
67:3b:79:2b:33:89:77:e7:98:36:ae:80:1e:c4:10:43:55:f3:
60:e6:89:aa:5c:67:13:bb:94:86:21:af:92:38:96:e0:38:22:
af:fc:a8:f8:5d:9b:18:27:52:6e:b5:30:5c:a2:ee:0b:06:50:
52:d5:26:e1:d6:f5:d7:99:97:d3:c8:31:1d:b2:28:5d:de:77:
d0:f9:48:82:58:54:3a:6a:c1:6f:25:92:23:37:1c:1a:5b:35:
66:da:b4:e6:8f:f7:e0:e1:d4:6b:9c:30:6e:a7:ac:c9:48:c4:
18:a6:99:4e:66:ce:0d:81:ea:22:cf:56:2d:07:f6:df:c3:5b:
66:b6:87:3e:f9:4a:d9:c5:e6:c6:01:ca:f8:f1:3f:f8:ce:f6:
39:cd:0a:4f:0c:36:e3:f7:d1:13:ff:c2:a8:27:a4:a0:45:9c:
60:5d:60:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebZ+Azz8tb+bwEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZTkyNDlkNDYtNjRmYi00MDljLWI2ODItNzMwMTFlNjI3MjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT9EcF93FzXvoL+eQS4gXQ3ybUbUAkR1xbaf
GJbIa27Gph9WGWgMh6GwEQChFsoVvCOvu91QAPKV3h9Z0n6AjM8W058exv2kAKlw
PcCMexx1eeh3Zqny3nCPCdge3kSP6O+Ocsl0n/CoEzsjJKQLHbivtrCAfiVCa+bv
m1KxWrzpgz+w8P2IHOpZJj9fAPMkU4DG9foZov1J31/gFKvDkmWJiOvCx5uGcXg+
6jodsJY6XXqCLe14DM2qnKj88ttqlw0nCNjWHDZfAYJlE10JTQHNWRPiX7ry5N0h
7+WvIhR3z+6ZcXlVqpr2FZJnTjZus2YMd/txsDJJ4PUOfAIWdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCEXX3KYpp5WEGILnP19vAzczeslMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTJiMjhlZGMtZGNlMy0z
OWE3LTllMWQtNzFmNTQzOTdkMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQWAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACc67FHL4cd6IzyfW8kBldvTVaSyiyaoIgusG9mvWK9c5Vzw9ghRIt6g
6D3ymrB7lWB6zCs6DgDAqOaxIyF1T06AOr1xVr1B+UzBX+HZW8goutFJRTV2M2l0
s2c7eSsziXfnmDaugB7EEENV82DmiapcZxO7lIYhr5I4luA4Iq/8qPhdmxgnUm61
MFyi7gsGUFLVJuHW9deZl9PIMR2yKF3ed9D5SIJYVDpqwW8lkiM3HBpbNWbatOaP
9+Dh1GucMG6nrMlIxBimmU5mzg2B6iLPVi0H9t/DW2a2hz75StnF5sYByvjxP/jO
9jnNCk8MNuP30RP/wqgnpKBFnGBdYNM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:06 2025 by rpki-client