Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9954cb8b-eb7a-3c3a-8916-a4e51b6eaa12.roa
File: 9954cb8b-eb7a-3c3a-8916-a4e51b6eaa12.roa (raw, json)
Hash identifier: PaxXEqCHkpQjg9R5/wrod545VX6frOVEdV8tA2Sr9/k=
Subject key identifier: 5E:E7:3F:7F:80:54:46:21:31:60:15:CC:AA:76:3D:24:02:6D:76:1F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8C404098B984E68640E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9954cb8b-eb7a-3c3a-8916-a4e51b6eaa12.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 76.24.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:c4:04:09:8b:98:4e:68:64:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d753c904-091d-44ce-8ac6-a512ea64889c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dd:3b:5c:c0:e4:99:b0:92:8f:a4:c2:e8:df:
5d:c3:4e:e3:68:54:53:eb:db:ef:db:47:86:1f:d8:
0f:47:cd:a6:36:03:0c:40:18:6a:ad:83:0a:e1:2c:
d1:55:e1:a5:05:b3:12:8a:e9:8c:0b:71:0d:af:4f:
1c:fd:de:c5:aa:a2:f1:59:dd:33:6c:db:20:7b:18:
70:0d:f2:28:b5:e5:ec:d3:4c:83:dd:c4:33:bc:2f:
f3:75:10:c3:77:09:ca:42:64:d2:5d:98:74:69:1d:
e0:43:7a:bb:9c:72:b5:65:76:13:4a:64:70:05:3b:
c5:4b:05:37:fe:09:89:1e:21:51:3c:a6:9c:b5:41:
c2:08:bb:0a:ad:27:00:46:e8:a7:28:de:7c:2d:63:
05:d5:d4:f9:50:6d:95:3b:20:b2:82:ea:94:17:a5:
96:c2:30:b5:84:ce:bf:f5:53:3c:2d:cd:1a:52:f9:
99:af:b2:18:63:88:cf:6c:09:dd:21:75:23:bb:4c:
ab:fa:14:69:c6:6b:98:07:74:cd:a4:d6:3a:e4:67:
02:34:28:2f:8f:d4:11:17:83:9e:2d:db:e3:06:49:
70:c2:64:82:dc:c4:0e:2c:ea:75:6d:db:e2:5a:97:
b0:4c:f8:10:55:7a:98:0f:ef:bf:cd:5e:c7:29:6a:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E7:3F:7F:80:54:46:21:31:60:15:CC:AA:76:3D:24:02:6D:76:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9954cb8b-eb7a-3c3a-8916-a4e51b6eaa12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.24.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:c7:c5:62:c4:ae:1d:01:5b:9f:ac:88:dd:ac:61:78:01:7d:
e8:0d:6f:54:fa:94:99:44:61:6b:f0:5f:a3:05:95:3f:e4:41:
09:2a:2c:50:92:64:11:c2:b4:e7:84:cb:1b:59:99:36:60:32:
5f:e0:2b:4f:c5:91:1f:c7:68:b9:6f:99:f3:e9:4a:4a:55:c1:
d9:4e:38:bc:a1:fc:27:9c:5d:e2:a2:21:c4:cc:da:7d:f2:1c:
e0:d9:a1:52:3a:7b:1e:96:68:29:00:7b:39:1c:c6:d3:e7:29:
0c:1a:5a:ec:fd:97:ab:72:34:33:b2:4e:d3:21:ea:b3:a2:49:
7b:72:a9:0f:f2:2f:88:99:69:b7:88:72:35:66:0d:6d:45:b9:
b4:5e:04:a5:f8:fd:bd:58:72:4c:56:b5:10:be:f0:26:21:10:
0a:43:f2:b0:5a:94:28:6c:69:97:55:63:91:0a:2e:13:91:f8:
32:e3:9a:19:f2:3a:a6:03:2e:32:8e:27:32:af:b9:d4:69:50:
7c:9a:28:6a:f0:39:90:ee:54:c6:4c:9c:a7:23:25:6e:81:3a:
82:16:d8:36:b6:04:49:c3:f9:a0:f0:b4:61:3c:48:16:f6:c0:
ed:1f:c7:cf:0e:79:7e:54:3b:60:bf:a2:0f:15:d9:c2:a3:cb:
d4:53:4b:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+MQECYuYTmhkDkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ZDc1M2M5MDQtMDkxZC00NGNlLThhYzYtYTUxMmVhNjQ4ODljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8N07XMDkmbCSj6TC6N9dw07jaFRT69vv20eG
H9gPR82mNgMMQBhqrYMK4SzRVeGlBbMSiumMC3ENr08c/d7FqqLxWd0zbNsgexhw
DfIoteXs00yD3cQzvC/zdRDDdwnKQmTSXZh0aR3gQ3q7nHK1ZXYTSmRwBTvFSwU3
/gmJHiFRPKactUHCCLsKrScARuinKN58LWMF1dT5UG2VOyCyguqUF6WWwjC1hM6/
9VM8Lc0aUvmZr7IYY4jPbAndIXUju0yr+hRpxmuYB3TNpNY65GcCNCgvj9QRF4Oe
LdvjBklwwmSC3MQOLOp1bdviWpewTPgQVXqYD++/zV7HKWqGVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7nP3+AVEYhMWAVzKp2PSQCbXYfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTk1NGNiOGItZWI3YS0z
YzNhLTg5MTYtYTRlNTFiNmVhYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBjMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3HxWLErh0BW5+siN2sYXgBfegNb1T6lJlEYWvwX6MFlT/kQQkqLFCS
ZBHCtOeEyxtZmTZgMl/gK0/FkR/HaLlvmfPpSkpVwdlOOLyh/CecXeKiIcTM2n3y
HODZoVI6ex6WaCkAezkcxtPnKQwaWuz9l6tyNDOyTtMh6rOiSXtyqQ/yL4iZabeI
cjVmDW1FubReBKX4/b1YckxWtRC+8CYhEApD8rBalChsaZdVY5EKLhOR+DLjmhny
OqYDLjKOJzKvudRpUHyaKGrwOZDuVMZMnKcjJW6BOoIW2Da2BEnD+aDwtGE8SBb2
wO0fx88OeX5UO2C/og8V2cKjy9RTSwY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:13:02 2025 by rpki-client