Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99c94ed8-9c4c-3dcd-9054-0c4b3ede2a9b.roa
File: 99c94ed8-9c4c-3dcd-9054-0c4b3ede2a9b.roa (raw, json)
Hash identifier: qXSI2YvEgk/8MJ/JWbwr13Wa6w46bFojqZPAHif2Y4Q=
Subject key identifier: CC:2F:87:48:CC:04:7C:B6:43:A5:FC:4F:86:70:95:85:CC:A2:C9:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7064561EC55A6535E9E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99c94ed8-9c4c-3dcd-9054-0c4b3ede2a9b.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 66.30.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:06:45:61:ec:55:a6:53:5e:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=b81898f2-0d83-4a44-8c8e-39892e76c1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:13:c7:26:40:9d:2e:1d:ca:30:25:fa:ab:
8c:ac:63:0c:99:68:0b:77:cc:09:76:0f:67:e0:b0:
6a:ee:4e:1f:32:e9:74:0f:a4:67:00:ad:27:40:d8:
e1:98:d4:64:17:9d:89:1b:ec:68:8a:35:e2:40:48:
1d:4b:e1:c4:f5:70:46:b5:08:b6:a1:4d:c6:a4:44:
85:63:89:f2:f3:2a:3e:a3:2f:0b:d1:d3:2d:49:c5:
0e:a4:e5:ff:10:20:bb:87:b6:27:9c:1a:50:db:75:
a2:45:db:f4:84:15:75:f6:51:53:40:95:5f:fe:ae:
31:d9:44:6d:3c:55:98:fb:cd:ff:b8:02:c8:90:a1:
cc:11:f4:df:b4:8b:71:26:62:cd:d0:b3:1f:da:e6:
9b:fe:8f:1b:d3:e3:9b:b4:23:c2:48:84:98:bb:50:
5d:52:9b:d0:ac:40:26:a4:90:95:87:43:84:b1:2e:
6a:5d:7c:95:3f:56:14:31:18:95:e7:96:9d:df:aa:
c8:49:ff:d4:27:f1:59:f3:40:b7:88:60:52:84:a0:
75:ed:96:70:d7:ba:c7:5a:57:ef:f8:82:f9:cf:a1:
d4:fe:7f:1d:c2:e8:27:45:98:7a:05:d2:43:c6:56:
5d:d8:c3:6f:ac:c2:9a:14:0a:dd:92:62:98:c5:48:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2F:87:48:CC:04:7C:B6:43:A5:FC:4F:86:70:95:85:CC:A2:C9:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99c94ed8-9c4c-3dcd-9054-0c4b3ede2a9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.30.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:b4:88:00:e7:d0:78:d9:6e:1d:19:ff:ae:6f:c4:8b:f1:15:
2b:5d:15:09:69:15:00:58:72:db:97:69:db:55:5e:3f:e2:fd:
a0:1a:15:58:93:ce:ce:b5:79:2f:98:7b:46:47:b2:3d:db:d9:
dd:53:09:47:b9:35:6a:49:8c:ab:ef:66:75:cb:dc:cf:b3:a7:
4c:36:6e:11:c4:bb:fb:1a:11:2e:73:48:0d:e4:29:72:0e:41:
2e:33:11:a2:98:53:cb:61:49:7c:03:d5:37:91:47:99:69:c6:
ab:e1:44:ca:56:d9:6a:80:23:a2:4c:36:2d:6a:ac:af:46:19:
76:86:51:04:02:b9:4f:17:82:8a:16:9a:a5:04:b2:6b:cd:73:
86:f2:e1:55:af:02:88:8d:44:c3:ce:b6:1a:fb:e4:2e:db:6f:
ee:7d:15:77:d5:04:e9:88:28:ca:58:cf:52:8f:a9:38:7c:16:
90:b8:82:27:eb:39:f4:c0:f4:8b:b1:c0:cb:2c:b2:41:69:aa:
36:4f:d6:6e:2a:8a:3c:a6:cd:aa:20:c6:35:11:84:4d:b8:9d:
42:4a:00:51:5b:9c:f8:28:0b:40:97:8b:2c:20:64:2c:9b:7c:
2a:f0:ee:31:ec:51:d5:f2:51:9f:95:88:d0:da:b0:77:ba:c7:
4b:e0:48:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09wZFYexVplNengAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YjgxODk4ZjItMGQ4My00YTQ0LThjOGUtMzk4OTJlNzZjMWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UMTxyZAnS4dyjAl+quMrGMMmWgLd8wJdg9n
4LBq7k4fMul0D6RnAK0nQNjhmNRkF52JG+xoijXiQEgdS+HE9XBGtQi2oU3GpESF
Y4ny8yo+oy8L0dMtScUOpOX/ECC7h7YnnBpQ23WiRdv0hBV19lFTQJVf/q4x2URt
PFWY+83/uALIkKHMEfTftItxJmLN0LMf2uab/o8b0+ObtCPCSISYu1BdUpvQrEAm
pJCVh0OEsS5qXXyVP1YUMRiV55ad36rISf/UJ/FZ80C3iGBShKB17ZZw17rHWlfv
+IL5z6HU/n8dwugnRZh6BdJDxlZd2MNvrMKaFArdkmKYxUjkrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwvh0jMBHy2Q6X8T4ZwlYXMosnjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTljOTRlZDgtOWM0Yy0z
ZGNkLTkwNTQtMGM0YjNlZGUyYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQh5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEC0iADn0HjZbh0Z/65vxIvxFStdFQlpFQBYctuXadtVXj/i/aAaFViT
zs61eS+Ye0ZHsj3b2d1TCUe5NWpJjKvvZnXL3M+zp0w2bhHEu/saES5zSA3kKXIO
QS4zEaKYU8thSXwD1TeRR5lpxqvhRMpW2WqAI6JMNi1qrK9GGXaGUQQCuU8XgooW
mqUEsmvNc4by4VWvAoiNRMPOthr75C7bb+59FXfVBOmIKMpYz1KPqTh8FpC4gifr
OfTA9IuxwMssskFpqjZP1m4qijymzaogxjURhE24nUJKAFFbnPgoC0CXiywgZCyb
fCrw7jHsUdXyUZ+ViNDasHe6x0vgSJs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:45 2025 by rpki-client