Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4c19a16-2c11-3cf1-a5a0-f76a35ab23bb.roa
File: d4c19a16-2c11-3cf1-a5a0-f76a35ab23bb.roa (raw, json)
Hash identifier: Rl3zrWrOw1pSgefya5Ezj7uSIcJZONvmhBa4iESyWhs=
Subject key identifier: 53:FF:A2:9D:54:36:36:EA:00:CE:2C:6D:29:4D:53:2D:28:F8:EE:ED
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0BA0C4FB0F0DD24B25C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4c19a16-2c11-3cf1-a5a0-f76a35ab23bb.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 24.1.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:ba:0c:4f:b0:f0:dd:24:b2:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=842ea015-2f82-462d-8dbf-a7cfe252b783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:b4:d3:eb:3b:44:30:e7:6c:ed:c9:51:29:
33:32:7c:60:97:52:fb:93:9f:11:13:31:c9:ab:5b:
7d:00:95:a3:df:f4:c1:e9:d1:ad:aa:6b:24:2f:66:
c2:ac:75:f1:4a:a8:e5:2d:ad:86:04:a1:40:76:01:
ff:45:71:08:35:13:6a:b1:c6:56:78:48:98:1e:43:
12:8e:7d:94:b5:4a:65:30:ef:d5:42:34:fa:b3:3a:
2e:a6:39:ee:78:69:22:35:c1:e8:0d:23:54:6b:82:
bc:5e:89:46:16:38:f3:4a:3d:99:c7:7e:93:f8:0f:
c7:33:04:3c:75:d7:db:bc:03:ac:9f:68:10:cc:c8:
78:68:d1:96:34:75:26:b2:ec:3b:74:59:0a:5f:2c:
7c:28:62:0b:fa:e1:58:f9:e2:e1:90:91:83:78:02:
72:ac:38:87:25:76:86:05:54:81:df:b8:e2:af:fc:
77:a2:31:f9:c4:b7:e8:79:54:55:fd:6f:28:e8:27:
f2:2c:06:67:74:eb:11:25:aa:f8:8f:ce:3c:40:2b:
31:b1:c9:f6:73:f9:2e:76:65:d0:9c:9c:48:d9:3a:
7c:4c:5f:af:24:00:60:0b:db:5f:1e:41:e5:cb:d0:
78:0f:b1:75:92:3a:33:76:a2:a5:72:8c:43:08:96:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:A2:9D:54:36:36:EA:00:CE:2C:6D:29:4D:53:2D:28:F8:EE:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4c19a16-2c11-3cf1-a5a0-f76a35ab23bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.1.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:cf:fd:f6:16:08:40:cc:48:06:7d:c5:1d:66:50:bc:23:21:
19:a1:5b:24:00:b1:e4:6b:44:dc:c4:d0:3a:c7:b1:a3:65:5b:
ad:68:9f:4e:c5:61:2c:a8:a2:bb:a8:d5:85:8a:d1:b7:62:b8:
60:7b:28:f3:58:59:a8:a3:99:4a:df:97:c0:f8:2c:7a:7b:25:
8e:a3:38:2d:53:40:e8:5a:f0:f0:a1:94:cb:d3:3f:58:96:8e:
5d:ab:34:fe:a6:6f:c6:cc:2e:bd:25:5a:59:2b:60:f6:9a:1b:
21:95:9d:5c:17:53:fe:60:a3:cd:4a:dc:b9:2c:12:f2:e4:dd:
5f:5e:86:14:a4:fd:86:59:20:68:9a:b9:4d:9d:d2:86:55:43:
e1:01:2c:00:0e:8a:3c:74:d5:86:03:a3:4c:36:37:6b:88:b1:
40:8f:6a:22:f5:62:ca:7e:11:01:65:5f:4d:24:a0:5f:42:1a:
e4:f1:67:c4:98:35:ee:9f:1d:50:29:e8:d9:b3:77:fe:8c:30:
d1:dc:97:23:68:d6:ea:2c:ab:75:7a:10:25:16:a1:f4:27:4a:
8d:08:66:20:aa:b0:78:68:78:4c:ed:32:af:b8:d1:e3:88:0a:
fb:97:04:05:e3:c8:5f:b7:07:44:53:20:ab:31:be:43:ce:cf:
0c:1e:e0:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssLoMT7Dw3SSyXEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ODQyZWEwMTUtMmY4Mi00NjJkLThkYmYtYTdjZmUyNTJiNzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV200+s7RDDnbO3JUSkzMnxgl1L7k58REzHJ
q1t9AJWj3/TB6dGtqmskL2bCrHXxSqjlLa2GBKFAdgH/RXEINRNqscZWeEiYHkMS
jn2UtUplMO/VQjT6szoupjnueGkiNcHoDSNUa4K8XolGFjjzSj2Zx36T+A/HMwQ8
ddfbvAOsn2gQzMh4aNGWNHUmsuw7dFkKXyx8KGIL+uFY+eLhkJGDeAJyrDiHJXaG
BVSB37jir/x3ojH5xLfoeVRV/W8o6CfyLAZndOsRJar4j848QCsxscn2c/kudmXQ
nJxI2Tp8TF+vJABgC9tfHkHly9B4D7F1kjozdqKlcoxDCJZ+rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFP/op1UNjbqAM4sbSlNUy0o+O7tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDRjMTlhMTYtMmMxMS0z
Y2YxLWE1YTAtZjc2YTM1YWIyM2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAHYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMjP/fYWCEDMSAZ9xR1mULwjIRmhWyQAseRrRNzE0DrHsaNlW61on07F
YSyooruo1YWK0bdiuGB7KPNYWaijmUrfl8D4LHp7JY6jOC1TQOha8PChlMvTP1iW
jl2rNP6mb8bMLr0lWlkrYPaaGyGVnVwXU/5go81K3LksEvLk3V9ehhSk/YZZIGia
uU2d0oZVQ+EBLAAOijx01YYDo0w2N2uIsUCPaiL1Ysp+EQFlX00koF9CGuTxZ8SY
Ne6fHVAp6Nmzd/6MMNHclyNo1uosq3V6ECUWofQnSo0IZiCqsHhoeEztMq+40eOI
CvuXBAXjyF+3B0RTIKsxvkPOzwwe4M0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:55:29 2025 by rpki-client