Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0a71179-3427-3b45-a897-4e96616da06e.roa
File: b0a71179-3427-3b45-a897-4e96616da06e.roa (raw, json)
Hash identifier: CZ4wP4Nz8TUGksMRDwsUsKejpd5nu7l/u7gsGfde9BU=
Subject key identifier: 70:7B:A4:BB:74:E6:92:C3:B8:C6:F4:48:5F:96:10:9D:90:AB:09:76
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F653C1102D0E405B2B8C60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0a71179-3427-3b45-a897-4e96616da06e.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 96.113.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:53:c1:10:2d:0e:40:5b:2b:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=aa3ef247-b41f-4796-a613-b22c82729b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:71:37:5a:05:ce:c4:45:3d:77:9c:6f:e0:
8f:97:ba:7e:32:1a:19:c1:f9:27:7c:ee:be:b4:43:
e0:6f:3a:86:f4:78:de:ff:02:7c:00:52:d3:2e:ea:
ef:39:33:12:b4:fe:11:ac:3c:89:96:36:f6:d6:5a:
b1:65:ba:71:ca:9b:f0:1b:4e:c5:85:d0:a9:50:cd:
9a:a6:c1:c8:d5:44:c3:db:6e:b7:9c:8a:07:2f:9a:
78:38:ac:df:78:03:2a:7f:55:3a:38:90:8b:c7:af:
16:85:e5:8e:30:00:be:94:9d:31:56:f2:04:8f:04:
87:ef:3e:e6:c8:24:4d:13:14:33:c7:de:36:81:5a:
c6:d5:cb:e1:63:9d:03:d1:a8:50:96:ec:6c:bf:8b:
bd:64:0e:70:26:e2:d7:67:de:48:35:3a:ab:05:30:
4e:5c:82:50:c7:47:db:dc:a4:09:65:5c:c1:5c:93:
0b:56:0e:ea:c8:4f:df:0e:33:39:d3:19:7a:ec:cf:
78:6a:7b:5b:6c:2d:72:1a:f1:f9:9a:18:3c:93:5d:
8b:1e:79:cb:6c:da:96:e6:dc:1f:3d:de:68:be:7e:
10:83:a8:50:c7:48:f9:ff:b6:d3:0b:82:8d:7b:9e:
32:f3:ef:bc:19:1d:94:ef:dd:97:76:5f:a5:82:c0:
94:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7B:A4:BB:74:E6:92:C3:B8:C6:F4:48:5F:96:10:9D:90:AB:09:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0a71179-3427-3b45-a897-4e96616da06e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.113.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:e3:d2:c5:b9:4b:cf:8e:50:a4:9a:6e:25:23:32:38:03:e7:
c5:c5:fd:86:a4:27:f6:45:7c:cd:a6:8f:76:e3:23:6e:91:64:
cc:b8:00:2f:30:be:48:2b:a7:0c:4e:39:e4:a5:ce:28:d0:1e:
e5:d9:52:db:32:64:f8:8d:b0:3b:9f:99:71:9c:72:8a:23:27:
55:3e:64:53:05:a3:a2:f9:d3:07:43:0e:47:02:c9:83:dc:14:
a8:1a:68:c5:52:58:c5:98:94:7d:33:bf:b8:02:09:a6:c4:69:
e3:58:c3:82:a2:02:89:7b:f0:54:2a:16:ca:c8:59:a8:ec:f4:
66:1a:85:86:0f:cd:8f:6d:05:f7:45:e7:17:4d:bb:50:f7:5a:
82:c1:3a:c8:66:38:96:d7:a1:96:9b:eb:96:ef:8d:35:e6:24:
a5:f6:98:aa:6f:78:d2:78:21:68:0d:31:83:85:a0:c7:97:62:
56:96:42:4c:53:19:da:00:c3:c3:24:0a:5d:b8:52:fb:06:c0:
e0:1a:7b:90:b7:cf:54:87:cd:27:9d:2e:3f:c7:f1:26:b6:5a:
2a:24:b1:c8:d9:00:13:fe:2f:a7:af:5e:d6:22:27:8c:19:f8:
02:ed:64:bd:72:42:6c:05:29:fe:61:78:1d:1d:ff:8c:58:d2:
d6:0b:27:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lPBEC0OQFsrjGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
YWEzZWYyNDctYjQxZi00Nzk2LWE2MTMtYjIyYzgyNzI5YjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03pxN1oFzsRFPXecb+CPl7p+MhoZwfknfO6+
tEPgbzqG9Hje/wJ8AFLTLurvOTMStP4RrDyJljb21lqxZbpxypvwG07FhdCpUM2a
psHI1UTD2263nIoHL5p4OKzfeAMqf1U6OJCLx68WheWOMAC+lJ0xVvIEjwSH7z7m
yCRNExQzx942gVrG1cvhY50D0ahQluxsv4u9ZA5wJuLXZ95INTqrBTBOXIJQx0fb
3KQJZVzBXJMLVg7qyE/fDjM50xl67M94antbbC1yGvH5mhg8k12LHnnLbNqW5twf
Pd5ovn4Qg6hQx0j5/7bTC4KNe54y8++8GR2U792Xdl+lgsCUrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHB7pLt05pLDuMb0SF+WEJ2Qqwl2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjBhNzExNzktMzQyNy0z
YjQ1LWE4OTctNGU5NjYxNmRhMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYHH4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITj0sW5S8+OUKSabiUjMjgD58XF/YakJ/ZFfM2mj3bjI26RZMy4AC8w
vkgrpwxOOeSlzijQHuXZUtsyZPiNsDufmXGccoojJ1U+ZFMFo6L50wdDDkcCyYPc
FKgaaMVSWMWYlH0zv7gCCabEaeNYw4KiAol78FQqFsrIWajs9GYahYYPzY9tBfdF
5xdNu1D3WoLBOshmOJbXoZab65bvjTXmJKX2mKpveNJ4IWgNMYOFoMeXYlaWQkxT
GdoAw8MkCl24UvsGwOAae5C3z1SHzSedLj/H8Sa2WiokscjZABP+L6evXtYiJ4wZ
+ALtZL1yQmwFKf5heB0d/4xY0tYLJ/w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:40 2025 by rpki-client