Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd4a1966-51ca-35c1-b71d-ed56f6cb6726.roa
File: dd4a1966-51ca-35c1-b71d-ed56f6cb6726.roa (raw, json)
Hash identifier: pDkmcP0YFDuJlYDzxdwBpcRhcVaCrrd4ixvR4ZZ0mv4=
Subject key identifier: 42:FD:9F:83:B2:E9:4A:1F:D6:58:87:30:7E:7B:61:B4:8F:C3:65:63
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D9F5EA630485BA1EA4200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd4a1966-51ca-35c1-b71d-ed56f6cb6726.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 50.245.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:9f:5e:a6:30:48:5b:a1:ea:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=d0f0e917-9d04-4739-bfba-244e84f71b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:aa:ce:20:60:2c:19:5e:11:61:de:b6:31:
cb:15:2d:69:7f:34:b3:83:3f:f6:97:f8:d7:a6:50:
54:c9:88:03:ec:21:5e:08:d3:bd:c5:f1:a4:d7:34:
9f:36:0d:f4:2e:b2:78:be:b9:c0:9f:f2:e9:ad:7b:
01:9e:80:6f:93:b9:46:c8:d4:ae:c0:d1:db:ae:37:
1d:97:d6:ea:7b:8e:51:a6:ab:8d:75:e7:77:0d:86:
69:c5:31:c6:1d:15:08:b1:f0:af:85:fa:b8:93:f6:
02:66:69:9a:dc:a9:c0:e3:e0:40:1e:ed:43:4f:ae:
49:10:21:e4:e2:c1:b2:04:a3:37:05:38:e5:5f:e8:
bf:79:af:55:f7:3e:60:9a:44:7f:c0:94:80:83:06:
52:15:d4:95:58:dc:04:1e:83:03:be:1c:33:c0:a6:
d0:a0:43:18:5a:78:0c:f1:eb:75:17:a2:2e:8c:16:
13:1b:38:e4:b1:40:f3:27:69:48:51:47:92:13:8c:
9b:b4:ef:1a:bc:ed:46:6c:22:58:b4:eb:70:cf:0a:
ff:aa:b8:34:cd:71:71:6f:1e:2c:73:4e:7e:39:1d:
bf:d9:ea:65:8f:94:e0:32:e4:04:84:bd:5e:63:5a:
21:d6:a2:71:de:dd:da:36:86:1b:7d:95:44:40:67:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FD:9F:83:B2:E9:4A:1F:D6:58:87:30:7E:7B:61:B4:8F:C3:65:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd4a1966-51ca-35c1-b71d-ed56f6cb6726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.245.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:e8:21:cf:e6:a2:a9:7a:45:7a:c7:21:db:f6:84:aa:14:fb:
dc:6f:f4:f6:4e:db:2c:0a:af:90:b0:74:37:61:67:55:61:c8:
1c:c9:cb:04:fb:95:a0:b2:27:a9:e4:20:95:29:8a:24:23:44:
40:8d:30:d6:f2:e9:81:9f:9b:e0:0c:c3:0b:95:ad:87:8f:39:
4d:31:c1:f5:65:54:e6:f1:b4:47:88:aa:51:61:32:f8:3f:27:
c5:34:9f:b9:32:b5:81:de:88:81:13:ec:dd:1e:ae:ea:64:6b:
b4:ba:6a:c3:01:c2:a0:3a:c9:bd:4d:4e:ae:8d:48:ac:85:43:
0a:e1:ef:a7:4c:b6:a2:d6:e9:96:6e:5d:1f:af:b1:33:23:80:
d8:d5:95:0a:fc:b0:c5:8c:4c:4d:cf:17:1f:9c:95:c9:44:9e:
06:7d:69:f8:b9:6c:1f:b2:d2:c5:56:cd:35:cd:b8:92:ae:0e:
97:c7:89:2d:7a:c2:4c:2d:92:86:c9:89:c5:b9:4e:75:11:93:
17:b6:cd:62:a0:2a:82:6d:d3:ca:c6:a8:59:df:18:51:45:9c:
6c:75:e5:3f:75:1d:e6:ed:82:8f:43:d9:b9:21:d5:cd:c8:64:
44:55:bc:57:0b:04:3c:3e:10:4c:2a:ae:8e:00:ae:f5:ff:bd:
4c:a4:d2:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebZ9epjBIW6HqQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZDBmMGU5MTctOWQwNC00NzM5LWJmYmEtMjQ0ZTg0ZjcxYjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D+qziBgLBleEWHetjHLFS1pfzSzgz/2l/jX
plBUyYgD7CFeCNO9xfGk1zSfNg30LrJ4vrnAn/LprXsBnoBvk7lGyNSuwNHbrjcd
l9bqe45RpquNded3DYZpxTHGHRUIsfCvhfq4k/YCZmma3KnA4+BAHu1DT65JECHk
4sGyBKM3BTjlX+i/ea9V9z5gmkR/wJSAgwZSFdSVWNwEHoMDvhwzwKbQoEMYWngM
8et1F6IujBYTGzjksUDzJ2lIUUeSE4ybtO8avO1GbCJYtOtwzwr/qrg0zXFxbx4s
c05+OR2/2eplj5TgMuQEhL1eY1oh1qJx3t3aNoYbfZVEQGfbdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEL9n4Oy6Uof1liHMH57YbSPw2VjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQ0YTE5NjYtNTFjYS0z
NWMxLWI3MWQtZWQ1NmY2Y2I2NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGMvUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEToIc/moql6RXrHIdv2hKoU+9xv9PZO2ywKr5CwdDdhZ1VhyBzJywT7
laCyJ6nkIJUpiiQjRECNMNby6YGfm+AMwwuVrYePOU0xwfVlVObxtEeIqlFhMvg/
J8U0n7kytYHeiIET7N0erupka7S6asMBwqA6yb1NTq6NSKyFQwrh76dMtqLW6ZZu
XR+vsTMjgNjVlQr8sMWMTE3PFx+clclEngZ9afi5bB+y0sVWzTXNuJKuDpfHiS16
wkwtkobJicW5TnURkxe2zWKgKoJt08rGqFnfGFFFnGx15T91Hebtgo9D2bkh1c3I
ZERVvFcLBDw+EEwqro4ArvX/vUyk0hA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:26 2025 by rpki-client