Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0559032d-0e41-327b-aa0d-c82fd3cfa375.roa
File: 0559032d-0e41-327b-aa0d-c82fd3cfa375.roa (raw, json)
Hash identifier: ZTdh4S0L/J25xcfI50wB2md9Am+Jk5iU3cVFAr5bICU=
Subject key identifier: F6:09:EC:CD:17:B9:31:50:ED:E7:C4:63:93:0B:C6:60:0E:54:8C:C0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C142B7CE08E23950CAD93C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0559032d-0e41-327b-aa0d-c82fd3cfa375.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.223.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:2b:7c:e0:8e:23:95:0c:ad:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0dbc4ccb-ae9a-47b2-9c29-aa29a0038a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8f:e4:6d:7f:d4:7b:c3:50:7e:d5:1b:bd:39:
b1:eb:e9:43:f7:5b:f6:18:aa:45:a2:a2:06:10:15:
7d:d5:e6:42:2d:aa:ed:40:25:8f:25:31:a4:33:f2:
c8:0f:b9:e0:2e:39:6f:65:35:3b:24:99:7f:82:3c:
a4:e4:95:ec:ad:50:21:8a:df:08:e2:66:17:15:88:
95:1d:fb:a7:9c:e3:a0:de:6b:e6:14:1f:33:8a:0f:
32:23:59:9f:3b:2e:60:0c:94:3e:82:b7:83:60:d5:
44:d6:1d:1f:1c:20:5d:66:cb:06:a4:bf:ad:19:98:
59:0d:d7:dc:11:56:8b:56:77:75:c7:29:79:8d:c3:
b3:66:8f:00:02:9f:f3:27:a1:4f:4d:fc:2e:ce:0b:
f6:50:10:76:b6:cd:4c:11:71:61:98:09:7e:99:23:
4a:fc:79:61:fa:45:a5:2b:1c:cd:c0:c9:7b:8c:4a:
07:da:c3:be:e1:e6:03:68:da:ea:99:ea:30:77:9b:
4d:29:d6:8d:cd:c2:d4:f2:ff:22:e5:b3:67:77:d2:
d7:4b:88:ff:8f:62:b7:89:23:98:83:0f:6c:ce:89:
43:54:36:6e:d5:92:0d:fd:53:fd:d5:0f:4a:02:60:
7c:60:e1:d4:e5:d3:78:84:e3:99:56:79:58:c2:44:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:09:EC:CD:17:B9:31:50:ED:E7:C4:63:93:0B:C6:60:0E:54:8C:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0559032d-0e41-327b-aa0d-c82fd3cfa375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.223.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:0a:44:18:91:3b:09:b2:ad:e7:e1:3f:ce:08:b4:d8:68:dd:
f0:45:40:89:9b:24:f1:5e:69:c2:31:f7:fb:6a:e6:1b:ab:d0:
2a:ac:50:a6:52:3b:c1:6c:a4:13:9d:18:18:df:64:89:18:a5:
e7:f6:45:8d:9e:63:f7:08:e5:6f:27:2d:3e:13:cb:2b:bf:ed:
fe:e6:ca:b1:cb:92:33:c7:1f:a0:d7:08:d0:1c:0a:6a:db:5b:
e4:4e:6c:31:93:de:67:13:55:79:27:8c:88:59:90:a8:19:36:
b3:c8:79:f5:96:aa:c3:e9:a7:0d:e7:09:37:f9:5c:c7:b2:6d:
ac:14:5c:b4:98:35:c0:e7:6a:10:db:b5:7c:56:ac:af:07:28:
ca:84:bb:79:cf:60:84:9b:63:aa:61:af:30:5a:b3:05:5b:34:
0a:26:7e:4e:85:22:d1:c3:b5:d6:18:35:f7:4a:7d:38:da:cf:
a7:1b:77:92:7d:ff:d4:02:5a:14:04:76:10:2d:56:6a:7e:2a:
93:16:28:e5:73:01:aa:90:c1:9c:01:82:a9:91:3f:6c:7a:4f:
99:f2:fb:f3:9a:31:02:8a:39:c7:80:d4:3b:95:06:09:5b:1e:
6d:ae:4e:71:f4:ce:68:62:b4:8c:e4:9d:d7:7c:0b:30:2d:5e:
31:a2:31:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMFCt84I4jlQytk8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MGRiYzRjY2ItYWU5YS00N2IyLTljMjktYWEyOWEwMDM4YTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4/kbX/Ue8NQftUbvTmx6+lD91v2GKpFoqIG
EBV91eZCLartQCWPJTGkM/LID7ngLjlvZTU7JJl/gjyk5JXsrVAhit8I4mYXFYiV
HfunnOOg3mvmFB8zig8yI1mfOy5gDJQ+greDYNVE1h0fHCBdZssGpL+tGZhZDdfc
EVaLVnd1xyl5jcOzZo8AAp/zJ6FPTfwuzgv2UBB2ts1MEXFhmAl+mSNK/Hlh+kWl
KxzNwMl7jEoH2sO+4eYDaNrqmeowd5tNKdaNzcLU8v8i5bNnd9LXS4j/j2K3iSOY
gw9szolDVDZu1ZIN/VP91Q9KAmB8YOHU5dN4hOOZVnlYwkQVkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPYJ7M0XuTFQ7efEY5MLxmAOVIzAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDU1OTAzMmQtMGU0MS0z
MjdiLWFhMGQtYzgyZmQzY2ZhMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd94MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMEKRBiROwmyrefhP84ItNho3fBFQImbJPFeacIx9/tq5hur0CqsUKZS
O8FspBOdGBjfZIkYpef2RY2eY/cI5W8nLT4Tyyu/7f7myrHLkjPHH6DXCNAcCmrb
W+RObDGT3mcTVXknjIhZkKgZNrPIefWWqsPppw3nCTf5XMeybawUXLSYNcDnahDb
tXxWrK8HKMqEu3nPYISbY6phrzBaswVbNAomfk6FItHDtdYYNfdKfTjaz6cbd5J9
/9QCWhQEdhAtVmp+KpMWKOVzAaqQwZwBgqmRP2x6T5ny+/OaMQKKOceA1DuVBglb
Hm2uTnH0zmhitIzkndd8CzAtXjGiMR4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:52:47 2025 by rpki-client