Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2394377a-0198-351c-be83-89a840e9096e.roa
File: 2394377a-0198-351c-be83-89a840e9096e.roa (raw, json)
Hash identifier: yK7A8raCP6a55N8xcNRREygAUpn+tJpoR0RrwaFDUZs=
Subject key identifier: 7D:42:1A:E2:45:ED:7C:5E:AE:2F:DE:77:E8:17:ED:64:EE:F6:AF:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D455E80FE7C8803409C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2394377a-0198-351c-be83-89a840e9096e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 73.37.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:45:5e:80:fe:7c:88:03:40:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0245f7af-17f8-4bea-82a8-1725bbe98264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:e8:5b:bc:e2:a6:ee:f9:dd:48:e8:49:e1:
53:a0:48:ff:35:c9:8d:94:8a:a1:a1:d5:00:0c:00:
ff:66:75:ab:31:73:ec:54:f7:62:73:d7:a2:b2:cc:
0f:a0:e2:9d:a4:99:47:ee:b7:43:ab:fe:03:ed:a1:
c3:ec:98:8d:b0:2d:bd:b9:79:f9:48:fc:42:2c:78:
58:5a:8c:17:1d:4c:86:36:51:48:4b:2e:ed:36:6f:
9e:71:da:1a:07:68:1b:ed:98:71:12:9b:0d:a7:41:
4c:fa:40:91:00:c9:f1:8f:88:51:4a:37:f0:97:06:
5e:1e:be:a8:f0:36:05:4d:f5:d7:0b:e8:c5:e4:e1:
72:5b:7a:2f:c0:a6:03:ee:cf:ee:6e:8a:e0:8b:9d:
fa:30:0b:e1:51:75:c8:fe:4c:1b:96:51:22:77:de:
31:01:81:75:32:a0:4a:4e:e6:5f:ed:87:1c:af:f0:
d3:9f:75:aa:8c:4a:1b:eb:5c:e0:d3:aa:0f:2e:24:
4f:0b:51:35:cd:45:f9:69:c8:b4:4e:5b:f4:2e:0d:
1a:35:6e:8f:3e:17:10:65:78:fd:5b:78:83:8c:64:
d8:a8:60:d4:a5:b0:ef:26:10:15:54:fd:46:8c:d8:
84:98:91:88:c6:83:3c:ed:1d:38:d1:64:37:85:3f:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:42:1A:E2:45:ED:7C:5E:AE:2F:DE:77:E8:17:ED:64:EE:F6:AF:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2394377a-0198-351c-be83-89a840e9096e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.37.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:82:14:71:ca:b5:74:7f:c1:c6:3e:30:e9:3c:43:d2:66:40:
fa:44:d7:68:ab:3d:d5:61:65:6e:62:83:38:56:d0:65:cf:90:
36:18:5a:c0:e2:db:e1:fd:23:de:27:2f:6e:4d:b6:bb:3a:3c:
7a:97:47:8a:e7:15:3f:6f:e3:94:4c:c1:06:05:47:10:8c:e2:
98:70:6e:dd:1c:54:01:be:fa:d2:38:28:f1:a2:c2:56:5c:c4:
99:48:26:9b:52:2d:48:78:9e:2a:e1:5e:ec:3c:f9:12:86:34:
cd:b0:a1:7d:e4:ad:78:54:3e:74:26:9a:41:27:5e:bb:b7:17:
ce:01:8a:5a:59:2f:c7:7b:e5:1e:ac:08:b8:96:46:d1:48:13:
65:9c:61:17:2e:4e:61:0e:ae:25:41:30:42:14:21:86:4f:c7:
f1:01:9c:20:97:24:4a:dd:28:6f:17:b7:3f:b3:04:75:f7:16:
c8:e5:90:d0:9e:6a:b5:dc:eb:28:b6:dc:90:4b:b8:1b:63:30:
cf:05:0d:39:23:19:f5:1f:e9:5c:48:cc:e0:05:4e:a8:dc:d0:
65:3b:76:7a:25:49:4d:03:c5:5d:7e:86:a2:7f:6d:15:28:e4:
16:26:26:9f:28:9e:bd:b7:3d:5a:20:35:f5:79:40:aa:cd:89:
2e:cf:fc:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPUVegP58iANAnEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MDI0NWY3YWYtMTdmOC00YmVhLTgyYTgtMTcyNWJiZTk4MjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZjoW7zipu753UjoSeFToEj/NcmNlIqhodUA
DAD/ZnWrMXPsVPdic9eisswPoOKdpJlH7rdDq/4D7aHD7JiNsC29uXn5SPxCLHhY
WowXHUyGNlFISy7tNm+ecdoaB2gb7ZhxEpsNp0FM+kCRAMnxj4hRSjfwlwZeHr6o
8DYFTfXXC+jF5OFyW3ovwKYD7s/uborgi536MAvhUXXI/kwbllEid94xAYF1MqBK
TuZf7Yccr/DTn3WqjEob61zg06oPLiRPC1E1zUX5aci0Tlv0Lg0aNW6PPhcQZXj9
W3iDjGTYqGDUpbDvJhAVVP1GjNiEmJGIxoM87R040WQ3hT8w+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1CGuJF7Xxeri/ed+gX7WTu9q/jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjM5NDM3N2EtMDE5OC0z
NTFjLWJlODMtODlhODQwZTkwOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSSVsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqCFHHKtXR/wcY+MOk8Q9JmQPpE12irPdVhZW5igzhW0GXPkDYYWsDi
2+H9I94nL25Ntrs6PHqXR4rnFT9v45RMwQYFRxCM4phwbt0cVAG++tI4KPGiwlZc
xJlIJptSLUh4nirhXuw8+RKGNM2woX3krXhUPnQmmkEnXru3F84BilpZL8d75R6s
CLiWRtFIE2WcYRcuTmEOriVBMEIUIYZPx/EBnCCXJErdKG8Xtz+zBHX3FsjlkNCe
arXc6yi23JBLuBtjMM8FDTkjGfUf6VxIzOAFTqjc0GU7dnolSU0DxV1+hqJ/bRUo
5BYmJp8onr23PVogNfV5QKrNiS7P/CM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:38:56 2025 by rpki-client