Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2666810-2834-3a62-a008-9f4a2067fdf2.roa
File: c2666810-2834-3a62-a008-9f4a2067fdf2.roa (raw, json)
Hash identifier: 946V69tTWs45t2NoIGisjem0v0gBOYhK7l4Sm6yjB0E=
Subject key identifier: D9:0A:4D:A9:48:AE:1E:FA:96:2C:E8:BF:77:8F:9B:33:07:C5:86:92
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F76269DB4C2E19A2A5B700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2666810-2834-3a62-a008-9f4a2067fdf2.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 76.127.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:62:69:db:4c:2e:19:a2:a5:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=3ff9ba46-f172-4471-b886-3698dd2508de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:75:8e:83:43:23:82:ff:43:3a:ae:aa:a7:
c7:66:57:4d:7c:ea:a9:13:2d:48:0e:72:e4:0e:29:
94:1f:29:83:12:6c:a4:14:3b:61:8d:72:8c:b2:3d:
20:4b:39:90:66:09:b4:9a:14:0e:ca:e6:1b:0b:4b:
29:4a:d5:c4:cb:fe:52:8c:78:09:f1:bc:58:8c:6a:
3d:49:80:32:90:84:b8:78:c4:01:f0:28:39:f4:99:
b2:a6:74:83:1a:72:4b:e9:65:c7:20:4e:ac:54:20:
de:79:c4:0e:46:4b:fc:43:4e:37:f3:58:f6:18:ac:
b3:4e:3e:68:d8:5b:19:7d:6a:b4:73:c8:b6:a5:6f:
59:52:b3:d9:7d:8a:d2:7e:f2:e6:7f:fc:1b:31:97:
b2:01:71:a5:68:37:4e:db:df:8e:d6:c1:54:cb:2a:
e1:f8:bd:6d:a3:09:c5:1e:8e:8f:9b:41:f3:55:46:
03:b6:98:ca:a9:a5:f6:c1:63:c6:3e:b2:03:3b:62:
d2:4a:1c:0c:8e:fe:0a:41:19:47:67:17:d7:f1:4c:
22:f3:3b:b3:a0:d8:03:e3:a3:62:17:9f:28:0d:ee:
66:9b:62:bc:53:b4:2c:db:1d:90:c1:fb:e6:a9:ce:
e7:96:21:f4:14:b7:35:72:01:85:ef:bc:95:94:23:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0A:4D:A9:48:AE:1E:FA:96:2C:E8:BF:77:8F:9B:33:07:C5:86:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2666810-2834-3a62-a008-9f4a2067fdf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.127.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:a9:3f:fd:4d:10:63:d8:c8:00:81:b0:b5:68:dc:1f:70:48:
fe:0b:ed:3f:77:83:ea:2a:5b:ab:7a:a9:27:4b:76:9e:95:94:
d5:fa:bc:a7:f9:fe:b0:59:1f:ac:4f:7d:0e:f9:cf:7f:65:d9:
cb:aa:ef:1c:d5:c1:64:a8:28:8e:49:da:44:06:51:ca:97:dc:
61:c8:ea:99:c3:22:0d:e0:e7:17:6a:42:6b:1d:a8:a7:aa:74:
81:37:14:4b:82:19:4a:28:81:c9:f0:91:e5:69:57:96:92:06:
7c:d3:d1:76:a6:78:64:3a:8a:4c:60:60:5c:ff:27:d1:c4:62:
27:c8:ad:75:4c:57:19:b8:f9:04:10:c9:c5:2d:f9:ed:3f:9b:
01:a5:80:25:42:6c:fc:e7:62:48:b2:a3:00:c0:86:4e:eb:61:
e5:7f:1f:df:62:76:d8:d6:09:7d:b9:4e:0d:54:0d:a7:c9:79:
d2:59:08:2c:0b:94:a5:de:46:f1:b1:e9:af:5f:07:ed:62:0f:
e2:fb:67:28:ba:ff:02:7c:44:dc:a2:73:07:91:1f:d7:d6:46:
82:81:92:90:e6:cb:01:9e:04:b0:4c:08:cb:d0:0e:34:20:c1:
f8:14:d6:19:04:70:6b:99:d7:5b:07:1e:17:de:6f:02:18:3b:
95:8e:82:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj092Jp20wuGaKltwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
M2ZmOWJhNDYtZjE3Mi00NDcxLWI4ODYtMzY5OGRkMjUwOGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFJ1joNDI4L/QzquqqfHZldNfOqpEy1IDnLk
DimUHymDEmykFDthjXKMsj0gSzmQZgm0mhQOyuYbC0spStXEy/5SjHgJ8bxYjGo9
SYAykIS4eMQB8Cg59JmypnSDGnJL6WXHIE6sVCDeecQORkv8Q04381j2GKyzTj5o
2FsZfWq0c8i2pW9ZUrPZfYrSfvLmf/wbMZeyAXGlaDdO29+O1sFUyyrh+L1townF
Ho6Pm0HzVUYDtpjKqaX2wWPGPrIDO2LSShwMjv4KQRlHZxfX8Uwi8zuzoNgD46Ni
F58oDe5mm2K8U7Qs2x2Qwfvmqc7nliH0FLc1cgGF77yVlCPEDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkKTalIrh76lizov3ePmzMHxYaSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzI2NjY4MTAtMjgzNC0z
YTYyLWEwMDgtOWY0YTIwNjdmZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTH+EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2pP/1NEGPYyACBsLVo3B9wSP4L7T93g+oqW6t6qSdLdp6VlNX6vKf5
/rBZH6xPfQ75z39l2cuq7xzVwWSoKI5J2kQGUcqX3GHI6pnDIg3g5xdqQmsdqKeq
dIE3FEuCGUoogcnwkeVpV5aSBnzT0XameGQ6ikxgYFz/J9HEYifIrXVMVxm4+QQQ
ycUt+e0/mwGlgCVCbPznYkiyowDAhk7rYeV/H99idtjWCX25Tg1UDafJedJZCCwL
lKXeRvGx6a9fB+1iD+L7Zyi6/wJ8RNyicweRH9fWRoKBkpDmywGeBLBMCMvQDjQg
wfgU1hkEcGuZ11sHHhfebwIYO5WOgvg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:13 2025 by rpki-client