Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c29446-28e1-3a59-8e35-bbbb36707c03.roa
File: 97c29446-28e1-3a59-8e35-bbbb36707c03.roa (raw, json)
Hash identifier: JILfC/GN3qwoJ0boJ4sroG9ZXWWvr61hSFhFd70/a8c=
Subject key identifier: CC:38:F3:70:F1:F2:A2:ED:E1:01:2E:41:1C:81:A4:F4:93:A7:0C:E5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0931499124122D04A1480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c29446-28e1-3a59-8e35-bbbb36707c03.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 71.224.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:93:14:99:12:41:22:d0:4a:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=4f372dbb-f9c1-4d62-a26d-c70d9cc5abd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:cf:ed:b8:e1:51:98:29:09:4e:49:e9:f1:
d1:ec:5a:51:d9:d5:f9:a3:fd:7e:fb:97:1c:0f:01:
da:91:92:95:f9:c7:01:57:80:08:af:06:72:a1:dc:
bd:97:c0:27:33:32:f3:f8:06:73:ad:a4:13:d3:11:
69:35:41:05:33:90:8f:36:9d:bf:3f:14:9b:1f:09:
52:fc:ec:27:0f:c4:4c:07:30:10:3f:cf:35:eb:f4:
af:ac:1b:28:94:a4:f2:b5:5b:e2:88:69:e0:ab:49:
35:8d:4a:aa:ba:21:8c:03:38:00:3d:03:c0:ca:61:
81:5b:08:dd:b0:c7:0e:36:2a:9b:da:a5:77:18:19:
4b:a1:2c:76:5f:cf:3b:53:1f:25:0a:d4:57:3f:3c:
e9:a3:2b:cd:d3:48:7c:74:41:98:c5:69:b2:77:4d:
47:ff:31:d0:a0:17:fb:8a:cd:b0:03:b0:5d:be:73:
17:81:23:17:f6:b9:39:c3:31:a3:1f:b7:81:90:99:
fa:6d:96:07:f0:c3:55:6c:05:48:b7:cc:dd:a3:44:
6d:a3:c3:91:eb:99:7b:59:c9:af:94:1d:da:3f:17:
cf:32:66:76:fb:dd:67:0e:61:40:e3:ab:9a:ce:81:
b3:aa:10:06:62:f2:94:5d:2f:ce:4a:8a:5f:af:4d:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:38:F3:70:F1:F2:A2:ED:E1:01:2E:41:1C:81:A4:F4:93:A7:0C:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c29446-28e1-3a59-8e35-bbbb36707c03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.224.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:63:46:b2:68:a1:b3:c9:d4:77:c6:ef:75:14:8c:cb:ea:b9:
11:88:52:34:b8:c9:ee:22:47:34:96:3f:fc:ad:7c:94:bb:26:
4f:cd:5d:6b:9e:4b:ee:00:28:d7:b2:95:44:a3:d0:9c:99:37:
d2:f8:c5:a0:8c:48:c3:e7:4e:1b:35:95:4c:fa:04:3c:19:bb:
98:5b:8a:ef:64:31:dc:e5:c5:30:8d:02:54:b7:65:51:ef:1b:
55:4f:a5:a1:7d:8e:d9:14:d2:1c:a4:2c:04:9e:96:d0:31:fc:
fb:f2:9b:d2:51:bf:75:3c:cc:98:5a:53:8e:8a:8a:fd:1c:ab:
8a:8f:50:1e:e1:de:a3:9a:90:19:5f:6e:70:11:34:24:54:f3:
98:95:38:9f:98:16:5c:96:54:e7:69:1b:d8:b0:db:92:de:0d:
5e:03:48:2f:c5:1c:90:5a:1a:be:17:83:1a:f4:aa:4c:37:d5:
4c:f0:a9:2f:f6:19:ec:d5:d1:50:95:48:e2:17:48:55:15:69:
84:61:fb:96:85:55:57:aa:f3:52:a1:33:30:6d:5c:23:82:19:
99:ce:3b:0d:38:23:4e:8e:c4:5a:9e:85:a2:aa:13:fe:ae:f6:
37:33:31:d9:13:0e:4b:68:87:1d:96:36:9b:c9:15:0f:1d:80:
3b:b5:01:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssJMUmRJBItBKFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NGYzNzJkYmItZjljMS00ZDYyLWEyNmQtYzcwZDljYzVhYmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/jP7bjhUZgpCU5J6fHR7FpR2dX5o/1++5cc
DwHakZKV+ccBV4AIrwZyody9l8AnMzLz+AZzraQT0xFpNUEFM5CPNp2/PxSbHwlS
/OwnD8RMBzAQP8816/SvrBsolKTytVviiGngq0k1jUqquiGMAzgAPQPAymGBWwjd
sMcONiqb2qV3GBlLoSx2X887Ux8lCtRXPzzpoyvN00h8dEGYxWmyd01H/zHQoBf7
is2wA7BdvnMXgSMX9rk5wzGjH7eBkJn6bZYH8MNVbAVIt8zdo0Rto8OR65l7Wcmv
lB3aPxfPMmZ2+91nDmFA46uazoGzqhAGYvKUXS/OSopfr01NYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMw483Dx8qLt4QEuQRyBpPSTpwzlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTdjMjk0NDYtMjhlMS0z
YTU5LThlMzUtYmJiYjM2NzA3YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+B4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANhjRrJoobPJ1HfG73UUjMvquRGIUjS4ye4iRzSWP/ytfJS7Jk/NXWue
S+4AKNeylUSj0JyZN9L4xaCMSMPnThs1lUz6BDwZu5hbiu9kMdzlxTCNAlS3ZVHv
G1VPpaF9jtkU0hykLASeltAx/Pvym9JRv3U8zJhaU46Kiv0cq4qPUB7h3qOakBlf
bnARNCRU85iVOJ+YFlyWVOdpG9iw25LeDV4DSC/FHJBaGr4Xgxr0qkw31UzwqS/2
GezV0VCVSOIXSFUVaYRh+5aFVVeq81KhMzBtXCOCGZnOOw04I06OxFqehaKqE/6u
9jczMdkTDktohx2WNpvJFQ8dgDu1ATk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:24 2025 by rpki-client