Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b9b3e8d-b616-30da-bb01-16a48a1e1969.roa
File: 9b9b3e8d-b616-30da-bb01-16a48a1e1969.roa (raw, json)
Hash identifier: JXwz3xoE5wVDuz+8paHl4/1H1q3AEfxnYECFm+jKHRw=
Subject key identifier: 2F:E1:4E:E8:7C:10:12:B5:3F:B2:EF:3D:BC:C1:9B:DD:CE:40:65:16
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F655AC327538B032FBE020
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b9b3e8d-b616-30da-bb01-16a48a1e1969.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 96.97.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:55:ac:32:75:38:b0:32:fb:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=96de00be-8341-4760-85e5-13661dae066e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:9d:1f:46:fc:b4:a5:b8:a6:7a:49:1e:a1:
6c:c7:25:d9:65:e6:d1:ed:33:6f:de:b1:14:e1:1c:
07:22:27:29:72:ab:8c:6f:e8:19:f0:37:44:1b:9a:
5f:47:44:1d:91:ec:84:8f:bf:44:08:9d:be:77:3e:
67:d5:9b:3c:95:82:cb:9e:95:65:6a:0e:81:e0:54:
40:a1:98:02:55:bc:59:91:db:de:bc:0b:99:64:73:
88:bb:02:31:81:ea:51:55:f6:ca:ad:23:22:90:8a:
6b:13:f7:c0:8f:d7:3a:f5:5f:3f:7e:a6:16:d1:77:
e8:8f:c5:e5:34:c1:9c:05:32:9a:f5:1f:b1:14:05:
7a:75:51:3b:9f:92:26:8d:6b:be:9c:3d:d2:4b:3d:
33:6a:97:1f:86:c4:86:6d:e6:80:77:0d:7b:79:92:
50:4e:e3:48:24:ec:5a:c9:dc:86:0c:ca:ff:50:33:
f6:39:84:da:94:7a:dc:c8:93:8d:30:d0:01:00:4c:
7e:de:8c:87:7b:f6:eb:36:06:e0:7b:51:03:ea:9b:
01:e8:c8:81:8a:bc:2a:8b:c4:6e:dc:61:c9:44:7c:
30:4f:32:db:d3:ee:a0:f1:19:2a:d2:2a:fc:c5:a8:
7b:92:51:c8:5b:5e:15:fd:35:a7:2f:d4:90:c5:e3:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:4E:E8:7C:10:12:B5:3F:B2:EF:3D:BC:C1:9B:DD:CE:40:65:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b9b3e8d-b616-30da-bb01-16a48a1e1969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.97.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:1c:8a:a3:e0:ed:a8:69:11:95:65:06:b6:76:d1:78:18:b4:
02:e7:48:05:74:aa:db:47:fa:3e:62:58:8a:28:8f:37:a4:fe:
79:5e:c9:f4:f2:37:27:ff:ac:29:78:b3:f9:1c:5a:a5:db:fd:
3b:c5:dc:3a:a3:97:4f:4e:7d:de:1d:b0:c4:10:02:5f:67:44:
a0:99:d3:64:0e:53:1e:89:58:dc:96:f3:e5:3a:df:f0:36:fc:
4b:a0:8e:b8:1f:c3:85:55:00:9b:60:b0:14:db:21:ef:16:90:
2d:83:c5:9c:9a:bd:97:b6:a4:85:13:4f:bf:00:8c:91:90:4c:
ff:7e:76:f8:6b:1a:0c:56:59:d4:d9:ad:bb:69:1b:85:1c:f6:
f0:94:41:a4:a6:35:e8:71:f5:b2:1c:ba:53:1c:d0:e5:cb:fd:
ee:c6:dc:a2:16:7e:2c:7e:20:f9:a5:01:03:16:2a:a1:4f:f6:
92:3a:84:ef:29:d0:a5:cc:51:a9:cd:11:cd:bc:2c:f1:06:5f:
b3:d4:65:3a:1c:90:aa:5b:6a:08:dc:27:7a:46:32:bc:8d:d3:
43:3a:26:8f:63:0c:df:bc:f9:5d:95:5d:b8:78:a5:66:e2:a1:
87:84:ec:3f:ac:7c:4a:b3:88:4d:0a:2b:6b:fb:1f:f4:50:a8:
e5:62:33:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lWsMnU4sDL74CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
OTZkZTAwYmUtODM0MS00NzYwLTg1ZTUtMTM2NjFkYWUwNjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklidH0b8tKW4pnpJHqFsxyXZZebR7TNv3rEU
4RwHIicpcquMb+gZ8DdEG5pfR0QdkeyEj79ECJ2+dz5n1Zs8lYLLnpVlag6B4FRA
oZgCVbxZkdvevAuZZHOIuwIxgepRVfbKrSMikIprE/fAj9c69V8/fqYW0Xfoj8Xl
NMGcBTKa9R+xFAV6dVE7n5ImjWu+nD3SSz0zapcfhsSGbeaAdw17eZJQTuNIJOxa
ydyGDMr/UDP2OYTalHrcyJONMNABAEx+3oyHe/brNgbge1ED6psB6MiBirwqi8Ru
3GHJRHwwTzLb0+6g8Rkq0ir8xah7klHIW14V/TWnL9SQxePdWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/hTuh8EBK1P7LvPbzBm93OQGUWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWI5YjNlOGQtYjYxNi0z
MGRhLWJiMDEtMTZhNDhhMWUxOTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYGH6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAciqPg7ahpEZVlBrZ20XgYtALnSAV0qttH+j5iWIoojzek/nleyfTy
Nyf/rCl4s/kcWqXb/TvF3Dqjl09Ofd4dsMQQAl9nRKCZ02QOUx6JWNyW8+U63/A2
/Eugjrgfw4VVAJtgsBTbIe8WkC2DxZyavZe2pIUTT78AjJGQTP9+dvhrGgxWWdTZ
rbtpG4Uc9vCUQaSmNehx9bIculMc0OXL/e7G3KIWfix+IPmlAQMWKqFP9pI6hO8p
0KXMUanNEc28LPEGX7PUZTockKpbagjcJ3pGMryN00M6Jo9jDN+8+V2VXbh4pWbi
oYeE7D+sfEqziE0KK2v7H/RQqOViM0Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:14 2025 by rpki-client