Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c7a2fb-c8b7-3717-b81d-a4157cec3abb.roa
File: c1c7a2fb-c8b7-3717-b81d-a4157cec3abb.roa (raw, json)
Hash identifier: cSTm3GGiojkGfdHrj6SRqnd7SFgIaxsi9yi2afArsiE=
Subject key identifier: D9:A1:4B:7A:16:34:0B:D4:B0:37:D0:96:13:82:96:0A:17:6F:01:B0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BD3AD2416EDE81AFFB310
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c7a2fb-c8b7-3717-b81d-a4157cec3abb.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 20214
IP address blocks: 96.114.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:d3:ad:24:16:ed:e8:1a:ff:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=a8e2d55d-72c8-4251-b499-8776df4194df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:9c:c9:7f:c8:f1:ee:88:ea:d9:f2:a1:cd:
61:ef:36:bb:25:bf:ac:3d:d3:f2:1c:3f:e5:55:3c:
1b:14:3b:1c:24:92:7e:85:81:c0:37:28:23:b2:99:
77:0b:1e:64:b4:f3:02:59:b4:9c:9d:e4:85:58:99:
c7:23:6e:c6:a9:ee:e2:39:a9:65:25:7b:fd:86:09:
b5:32:fc:c0:97:23:65:29:d1:a1:2a:16:08:35:54:
ce:ba:be:91:f3:73:0b:00:41:6a:0d:69:18:69:1b:
22:07:6c:6c:8b:d4:6d:34:4d:06:44:02:89:ae:e1:
69:9c:2e:0b:c7:e1:f4:ba:0f:72:d2:81:a1:f1:9b:
bd:03:6d:02:7c:22:6b:e4:84:4d:3a:3d:30:fe:ce:
69:dc:14:34:04:1b:e0:03:f9:0b:7a:5a:94:1f:90:
e8:8b:c3:1b:d9:b2:f1:28:e5:a7:f1:f8:b7:42:50:
25:26:93:9e:6e:7b:eb:eb:b1:15:fd:5b:5d:46:23:
d0:f2:ec:e1:9a:a6:88:20:d2:b3:cf:4d:60:9d:9f:
a4:92:09:03:7b:65:79:90:dc:d4:19:5f:7b:2a:2c:
02:94:15:34:fc:e6:03:3d:a6:46:5e:41:1d:85:c6:
6b:64:50:b0:9a:1b:f4:99:ed:e7:66:7d:29:28:51:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A1:4B:7A:16:34:0B:D4:B0:37:D0:96:13:82:96:0A:17:6F:01:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c7a2fb-c8b7-3717-b81d-a4157cec3abb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.114.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:27:d4:fa:f3:c2:4a:15:dd:1e:95:93:fb:36:a7:73:d5:e9:
f5:98:ea:e4:e7:e8:91:16:41:5b:f0:98:00:93:de:3f:c3:18:
64:84:8b:8d:52:43:95:7b:55:95:42:a2:e4:9c:fb:84:3e:13:
6c:ed:7f:a2:63:59:e1:ab:a6:96:bd:c3:ca:28:0a:b1:29:ab:
33:42:9d:a0:01:b1:4d:9b:1b:97:3a:2e:7e:96:1d:fa:6f:f0:
01:b7:84:ae:39:fe:81:ec:f1:6c:1d:b6:24:aa:c5:7d:16:1c:
31:aa:d5:aa:bb:96:fb:d0:ce:67:ea:4b:04:67:fa:2a:bf:72:
91:79:eb:68:52:18:ce:ac:00:97:f0:4e:18:b5:47:cd:11:fd:
fe:74:65:e3:24:12:0b:7d:13:45:c9:7e:ba:0c:60:16:95:2c:
6e:89:8d:ff:6b:2c:90:4e:16:57:66:69:de:72:a3:78:8e:4e:
1d:72:29:cd:23:63:e4:c9:76:9e:39:8f:60:59:dc:fb:74:b7:
c3:96:20:ad:68:a9:01:d0:e5:c8:44:84:d5:90:9a:03:7c:b9:
db:7b:7a:bf:1f:1a:13:e7:05:2c:89:2f:1a:b3:71:d7:7e:f2:
77:de:d9:e1:88:9c:9f:3e:34:3a:61:14:01:8f:ce:87:d9:be:
3a:c9:c6:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea9OtJBbt6Br/sxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
YThlMmQ1NWQtNzJjOC00MjUxLWI0OTktODc3NmRmNDE5NGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtGcyX/I8e6I6tnyoc1h7za7Jb+sPdPyHD/l
VTwbFDscJJJ+hYHANygjspl3Cx5ktPMCWbScneSFWJnHI27Gqe7iOallJXv9hgm1
MvzAlyNlKdGhKhYINVTOur6R83MLAEFqDWkYaRsiB2xsi9RtNE0GRAKJruFpnC4L
x+H0ug9y0oGh8Zu9A20CfCJr5IRNOj0w/s5p3BQ0BBvgA/kLelqUH5Doi8Mb2bLx
KOWn8fi3QlAlJpOebnvr67EV/VtdRiPQ8uzhmqaIINKzz01gnZ+kkgkDe2V5kNzU
GV97KiwClBU0/OYDPaZGXkEdhcZrZFCwmhv0me3nZn0pKFFxXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNmhS3oWNAvUsDfQlhOClgoXbwGwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzFjN2EyZmItYzhiNy0z
NzE3LWI4MWQtYTQxNTdjZWMzYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYHKDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0n1PrzwkoV3R6Vk/s2p3PV6fWY6uTn6JEWQVvwmACT3j/DGGSEi41S
Q5V7VZVCouSc+4Q+E2ztf6JjWeGrppa9w8ooCrEpqzNCnaABsU2bG5c6Ln6WHfpv
8AG3hK45/oHs8WwdtiSqxX0WHDGq1aq7lvvQzmfqSwRn+iq/cpF562hSGM6sAJfw
Thi1R80R/f50ZeMkEgt9E0XJfroMYBaVLG6Jjf9rLJBOFldmad5yo3iOTh1yKc0j
Y+TJdp45j2BZ3Pt0t8OWIK1oqQHQ5chEhNWQmgN8udt7er8fGhPnBSyJLxqzcdd+
8nfe2eGInJ8+NDphFAGPzofZvjrJxkU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:23 2025 by rpki-client