Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a9a3fd9-4e41-3e15-85ed-b50e45e20922.roa
File: 1a9a3fd9-4e41-3e15-85ed-b50e45e20922.roa (raw, json)
Hash identifier: 4grHiKtmNf552byZwvS/jfYSc0d0/o28evquawsKeE4=
Subject key identifier: 39:59:0D:A9:6B:C2:08:03:D0:D8:A4:A9:4D:5F:90:6C:71:1A:A1:98
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12C76A970AEF729A781380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a9a3fd9-4e41-3e15-85ed-b50e45e20922.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.45.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:c7:6a:97:0a:ef:72:9a:78:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=311a3f8d-c0b8-4a5e-94c2-374144b608a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:07:39:c2:5d:17:3f:50:12:63:66:ea:97:8c:
43:8f:e2:9c:4d:b4:3e:13:48:3e:71:5b:36:93:b2:
1a:08:8a:9e:9e:14:60:e2:20:a5:5e:66:02:50:d9:
58:31:ab:d0:5e:c7:b7:fa:06:af:10:48:ec:ed:38:
c6:67:c2:b8:8a:47:d2:8a:c3:b0:ee:0c:7c:85:b4:
ca:6e:d8:65:75:d1:a3:fe:d5:94:41:ab:92:72:2e:
a2:1e:af:23:6c:49:8a:4f:34:0e:aa:1f:4e:4b:fd:
50:14:da:46:0c:cd:22:95:f9:90:9c:22:85:d5:7e:
b7:b1:99:cd:d2:88:da:46:e7:7d:62:90:d1:16:32:
59:03:6a:47:7c:f1:8e:07:4e:73:ac:1a:72:d7:37:
13:e8:0d:80:b2:9d:e7:ee:fe:db:81:91:1e:30:73:
70:71:c1:96:4b:20:e1:c8:7c:2f:0a:f1:5e:0b:ac:
2c:a0:79:f1:d7:5c:2c:35:50:9b:a1:d2:0e:40:ac:
1e:62:8a:07:16:f0:5a:01:a5:b9:81:eb:14:09:ad:
c0:12:f3:74:fe:43:fa:6b:59:7d:a3:4a:5b:55:56:
c9:da:1e:e0:f7:94:59:89:1f:e7:c6:33:c9:45:2f:
eb:c1:95:5f:f5:eb:b5:d4:da:27:44:e9:16:e2:b8:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:59:0D:A9:6B:C2:08:03:D0:D8:A4:A9:4D:5F:90:6C:71:1A:A1:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a9a3fd9-4e41-3e15-85ed-b50e45e20922.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.45.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:fa:0b:9c:cf:72:27:8f:fb:ff:a8:d2:88:27:4e:80:07:0f:
40:63:a8:f0:da:c1:c4:b6:09:72:7f:3f:9b:51:fb:97:62:f4:
40:89:44:96:b7:bd:b3:84:dc:44:6a:a3:e2:06:7b:b3:a5:71:
a2:41:50:a9:b9:a9:6e:73:7c:af:c6:e2:b2:c0:80:ff:39:1f:
97:ee:c0:f0:e4:b9:46:f4:f7:ab:1a:ad:1d:4c:92:2a:0a:db:
b3:12:d1:60:ad:ff:7c:d0:8a:1c:8d:d9:f4:3b:0d:af:e9:23:
06:0c:be:4c:c9:d8:06:7d:73:58:27:bd:0a:53:53:cc:6d:1b:
46:6d:67:49:4c:4b:79:80:a8:8d:2c:7e:5e:32:0e:bd:da:93:
9c:8e:8d:1c:02:18:93:8f:b1:b8:98:f7:ec:1e:60:2e:df:fe:
3f:45:da:2f:d3:6e:a5:d7:45:64:d8:85:58:68:43:e5:9b:82:
64:6f:4f:4a:28:29:fa:a3:48:e3:9f:2b:56:1f:f4:5d:25:06:
8e:fd:4c:16:86:5e:8d:7c:9f:bb:d3:12:f4:98:fb:4f:1c:49:
5d:d9:a2:dd:04:dc:36:f4:b5:5a:0a:a6:73:dc:bf:75:92:f3:
eb:ec:e9:df:af:32:64:54:cf:a5:21:a5:15:ed:a2:5a:b8:50:
8e:55:43:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEsdqlwrvcpp4E4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MzExYTNmOGQtYzBiOC00YTVlLTk0YzItMzc0MTQ0YjYwOGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAc5wl0XP1ASY2bql4xDj+KcTbQ+E0g+cVs2
k7IaCIqenhRg4iClXmYCUNlYMavQXse3+gavEEjs7TjGZ8K4ikfSisOw7gx8hbTK
bthlddGj/tWUQauSci6iHq8jbEmKTzQOqh9OS/1QFNpGDM0ilfmQnCKF1X63sZnN
0ojaRud9YpDRFjJZA2pHfPGOB05zrBpy1zcT6A2Asp3n7v7bgZEeMHNwccGWSyDh
yHwvCvFeC6wsoHnx11wsNVCbodIOQKweYooHFvBaAaW5gesUCa3AEvN0/kP6a1l9
o0pbVVbJ2h7g95RZiR/nxjPJRS/rwZVf9eu11NonROkW4rheBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlZDalrwggD0NikqU1fkGxxGqGYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWE5YTNmZDktNGU0MS0z
ZTE1LTg1ZWQtYjUwZTQ1ZTIwOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSS1GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANX6C5zPcieP+/+o0ognToAHD0BjqPDawcS2CXJ/P5tR+5di9ECJRJa3
vbOE3ERqo+IGe7OlcaJBUKm5qW5zfK/G4rLAgP85H5fuwPDkuUb096sarR1MkioK
27MS0WCt/3zQihyN2fQ7Da/pIwYMvkzJ2AZ9c1gnvQpTU8xtG0ZtZ0lMS3mAqI0s
fl4yDr3ak5yOjRwCGJOPsbiY9+weYC7f/j9F2i/TbqXXRWTYhVhoQ+WbgmRvT0oo
KfqjSOOfK1Yf9F0lBo79TBaGXo18n7vTEvSY+08cSV3Zot0E3Db0tVoKpnPcv3WS
8+vs6d+vMmRUz6UhpRXtolq4UI5VQ2U=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:16 2025 by rpki-client