Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7a75d0-4a7f-351b-a8fd-f818b0794ac4.roa
File: 9e7a75d0-4a7f-351b-a8fd-f818b0794ac4.roa (raw, json)
Hash identifier: SyWVglT3isEQtN+faTm4J6vCyqdDNYGTOviqq8DstzA=
Subject key identifier: 80:44:72:CC:74:C9:2C:54:13:87:30:6E:30:F6:02:F6:56:83:81:5E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D9F05B5AB16A1B964D780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7a75d0-4a7f-351b-a8fd-f818b0794ac4.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 50.233.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:9f:05:b5:ab:16:a1:b9:64:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=ff6ef765-8837-4416-abbe-6e024048161f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:9b:fc:67:35:ae:97:19:02:90:9f:ff:ad:
17:51:5c:92:b1:45:67:2a:9c:bb:ef:85:83:24:20:
a2:b0:a2:e3:d3:ea:a0:8a:31:a2:1f:b1:f5:8c:7d:
0c:c4:b6:9d:9c:bf:fd:09:a4:ed:d4:7a:6a:8e:77:
66:14:a1:e9:d5:e6:38:90:cb:09:1f:d2:bc:89:87:
ef:cc:5d:7c:62:6e:2d:87:da:2b:e1:35:4e:37:d4:
5e:d4:d8:47:ae:aa:62:8f:d9:31:8e:12:f2:ca:a3:
9e:f7:c5:9b:97:b5:f9:71:be:31:bf:49:bb:b3:7b:
4f:c4:ae:35:b1:db:fc:3d:6a:ec:ce:06:e6:87:b2:
11:fa:e2:07:28:1c:ac:4b:c0:cc:8d:0a:89:f4:21:
01:33:53:d9:7f:98:9e:cb:fb:63:de:a8:2c:3b:88:
d1:8d:a6:00:d3:b3:26:4a:12:01:a1:b2:61:20:81:
22:03:91:a9:6d:74:59:05:5e:59:b7:f1:36:1f:99:
ee:fb:8a:71:c9:2d:50:e7:95:c8:ec:3d:f1:2d:a6:
88:01:31:28:8a:a7:85:c7:04:df:c9:a6:62:e3:76:
b6:22:07:46:2b:22:b7:7b:2e:b2:98:87:ef:d2:72:
39:24:b4:bd:c0:c1:4a:fb:4b:df:63:01:fa:5c:df:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:44:72:CC:74:C9:2C:54:13:87:30:6E:30:F6:02:F6:56:83:81:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7a75d0-4a7f-351b-a8fd-f818b0794ac4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.233.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:53:c9:ba:5c:3d:0a:f7:87:43:cb:a0:30:04:db:8a:44:be:
91:2d:18:ce:c4:5c:25:46:d9:28:c2:d4:d0:58:72:14:17:81:
6a:ac:c2:f4:76:4c:df:fa:d6:5a:2f:c7:ee:9a:fb:4c:18:55:
38:ae:1e:51:8d:ba:9f:2e:4c:d6:ad:83:cf:a9:4c:f9:66:b5:
32:10:a8:28:32:b9:df:2e:1f:72:9b:2a:b5:4b:a1:9b:b3:24:
fe:38:ac:63:57:d9:27:ee:36:f0:a7:2b:06:92:52:38:0b:44:
42:91:aa:76:a4:9c:32:cb:ed:3b:2f:fe:e5:44:38:b3:89:ee:
fe:6b:cc:96:71:35:f7:89:03:65:07:60:45:65:f5:a0:a6:db:
ed:9a:f8:af:df:7b:a8:71:ab:e8:50:92:89:fa:92:e5:2d:ec:
0e:f7:9c:0b:f7:51:be:55:4b:1b:bd:28:2e:93:ca:a0:c0:f5:
50:9c:b8:97:91:bd:fd:7b:a7:b2:22:4d:66:12:ea:ec:02:1c:
91:d0:e0:5f:66:2e:2e:6b:c0:a4:0a:16:05:bc:05:7f:3e:22:
19:ea:23:9b:e1:f7:ac:29:cd:71:c5:0c:9a:72:e3:67:e8:60:
45:a7:b6:35:eb:23:66:4b:03:bc:c8:9b:47:4c:16:c1:f0:6e:
0b:5c:ec:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebZ8FtasWoblk14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZmY2ZWY3NjUtODgzNy00NDE2LWFiYmUtNmUwMjQwNDgxNjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfqb/Gc1rpcZApCf/60XUVySsUVnKpy774WD
JCCisKLj0+qgijGiH7H1jH0MxLadnL/9CaTt1HpqjndmFKHp1eY4kMsJH9K8iYfv
zF18Ym4th9or4TVON9Re1NhHrqpij9kxjhLyyqOe98Wbl7X5cb4xv0m7s3tPxK41
sdv8PWrszgbmh7IR+uIHKBysS8DMjQqJ9CEBM1PZf5iey/tj3qgsO4jRjaYA07Mm
ShIBobJhIIEiA5GpbXRZBV5Zt/E2H5nu+4pxyS1Q55XI7D3xLaaIATEoiqeFxwTf
yaZi43a2IgdGKyK3ey6ymIfv0nI5JLS9wMFK+0vfYwH6XN/edwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBEcsx0ySxUE4cwbjD2AvZWg4FeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWU3YTc1ZDAtNGE3Zi0z
NTFiLWE4ZmQtZjgxOGIwNzk0YWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMunVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVTybpcPQr3h0PLoDAE24pEvpEtGM7EXCVG2SjC1NBYchQXgWqswvR2
TN/61lovx+6a+0wYVTiuHlGNup8uTNatg8+pTPlmtTIQqCgyud8uH3KbKrVLoZuz
JP44rGNX2SfuNvCnKwaSUjgLREKRqnaknDLL7Tsv/uVEOLOJ7v5rzJZxNfeJA2UH
YEVl9aCm2+2a+K/fe6hxq+hQkon6kuUt7A73nAv3Ub5VSxu9KC6TyqDA9VCcuJeR
vf17p7IiTWYS6uwCHJHQ4F9mLi5rwKQKFgW8BX8+IhnqI5vh96wpzXHFDJpy42fo
YEWntjXrI2ZLA7zIm0dMFsHwbgtc7H8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:00 2025 by rpki-client