Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e88072b7-8e9f-35b5-8204-ecd3d8c122f6.roa
File: e88072b7-8e9f-35b5-8204-ecd3d8c122f6.roa (raw, json)
Hash identifier: PYeum7WSGbMSW4PKql6MMQXaXXN5AmHa0rzxUJZaiio=
Subject key identifier: A5:2C:B6:B5:3F:70:63:34:B1:C4:4A:8C:60:54:E7:C7:4B:FF:D5:47
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F639ED1085F98B9BDBC800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e88072b7-8e9f-35b5-8204-ecd3d8c122f6.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 76.96.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:39:ed:10:85:f9:8b:9b:db:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=a0ab21cf-f8e7-413c-98ba-6f6c8d747a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:11:b1:25:e2:03:89:44:31:76:b6:5e:98:
c5:98:d9:81:ac:cb:e9:db:ba:c7:27:07:33:44:73:
62:f4:d7:fd:2f:ef:57:94:06:f0:9d:7b:aa:cb:67:
9d:d8:40:e5:a8:84:a5:2f:20:0e:b8:96:6a:67:d1:
a9:13:a7:bb:ee:3f:6a:f9:6f:23:95:d2:1c:9f:fc:
b0:b5:4e:46:c6:3f:ce:95:6b:e9:d2:29:c4:eb:c2:
23:cd:c3:a8:20:ca:71:ca:e5:04:47:29:04:c6:13:
d6:0b:44:36:8a:b7:18:80:ee:4b:f4:5f:84:ae:59:
bc:86:33:bc:13:37:5a:13:47:28:74:c6:28:aa:17:
cf:f1:10:3f:d5:4d:02:23:20:a7:b7:a8:c3:08:c7:
4b:c7:9f:c2:44:46:74:f2:8c:29:ce:35:9d:8c:21:
0d:e2:15:03:74:c5:e7:63:9f:52:71:cc:66:45:85:
db:0c:72:93:08:b1:d7:ad:55:c0:c5:f4:99:cc:dc:
eb:70:28:f9:2d:88:25:5e:87:b5:01:4e:14:b4:4e:
3b:c2:07:40:bf:a7:13:4c:ea:1e:bd:4a:7c:38:89:
45:c9:1f:a2:f8:f8:16:61:97:33:b5:71:4a:b4:9f:
6e:ea:89:0b:7d:e5:75:c1:a6:8e:19:5f:e3:2d:64:
41:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2C:B6:B5:3F:70:63:34:B1:C4:4A:8C:60:54:E7:C7:4B:FF:D5:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e88072b7-8e9f-35b5-8204-ecd3d8c122f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.96.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:65:eb:80:82:e1:cd:6a:b2:77:e4:43:28:b7:15:7b:08:4d:
4f:9d:2d:25:3d:cd:df:d7:da:30:c5:12:05:d6:ab:66:83:f4:
be:da:2c:8a:7f:17:0a:28:9d:0a:29:16:69:a3:f2:84:bf:ba:
22:8e:9a:75:4d:1c:7d:79:09:40:bb:08:bb:a1:fe:81:7a:96:
f5:06:11:9a:3a:86:a4:a8:c0:62:60:ee:e1:14:f7:03:39:78:
60:62:60:f6:18:89:ce:7f:e1:b6:5f:3d:fd:7a:de:ab:b9:fe:
86:26:37:ba:26:d0:38:4e:be:64:d9:71:2c:67:27:c3:82:98:
10:96:19:ed:31:0b:24:53:3e:d8:1a:47:6f:68:b1:9a:af:4d:
02:f8:00:25:6e:57:ad:26:19:77:3f:07:a6:29:51:63:70:23:
68:04:36:e2:07:7f:cb:9d:d2:5e:f5:44:eb:b7:dc:a4:9f:b1:
a3:83:eb:37:75:1b:9b:d2:fb:8f:8c:b0:99:6b:5a:9a:3f:42:
18:9d:9a:86:25:7d:f8:6f:01:89:e1:a1:04:91:7e:28:f3:ab:
58:a6:fa:f0:d4:7f:19:e2:25:67:83:e9:d5:18:ce:34:0e:cb:
bf:31:8b:36:a9:0b:62:6a:67:80:6a:10:70:e3:e8:68:13:14:
0a:2f:1a:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9jntEIX5i5vbyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
YTBhYjIxY2YtZjhlNy00MTNjLTk4YmEtNmY2YzhkNzQ3YTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljoRsSXiA4lEMXa2XpjFmNmBrMvp27rHJwcz
RHNi9Nf9L+9XlAbwnXuqy2ed2EDlqISlLyAOuJZqZ9GpE6e77j9q+W8jldIcn/yw
tU5Gxj/OlWvp0inE68IjzcOoIMpxyuUERykExhPWC0Q2ircYgO5L9F+Erlm8hjO8
EzdaE0codMYoqhfP8RA/1U0CIyCnt6jDCMdLx5/CREZ08owpzjWdjCEN4hUDdMXn
Y59SccxmRYXbDHKTCLHXrVXAxfSZzNzrcCj5LYglXoe1AU4UtE47wgdAv6cTTOoe
vUp8OIlFyR+i+PgWYZcztXFKtJ9u6okLfeV1waaOGV/jLWRB7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKUstrU/cGM0scRKjGBU58dL/9VHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTg4MDcyYjctOGU5Zi0z
NWI1LTgyMDQtZWNkM2Q4YzEyMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTGAYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJl64CC4c1qsnfkQyi3FXsITU+dLSU9zd/X2jDFEgXWq2aD9L7aLIp/
FwoonQopFmmj8oS/uiKOmnVNHH15CUC7CLuh/oF6lvUGEZo6hqSowGJg7uEU9wM5
eGBiYPYYic5/4bZfPf163qu5/oYmN7om0DhOvmTZcSxnJ8OCmBCWGe0xCyRTPtga
R29osZqvTQL4ACVuV60mGXc/B6YpUWNwI2gENuIHf8ud0l71ROu33KSfsaOD6zd1
G5vS+4+MsJlrWpo/QhidmoYlffhvAYnhoQSRfijzq1im+vDUfxniJWeD6dUYzjQO
y78xizapC2JqZ4BqEHDj6GgTFAovGuE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:40 2025 by rpki-client