Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/258b8123-80d2-3594-9e54-b91d7e5caa1e.roa
File: 258b8123-80d2-3594-9e54-b91d7e5caa1e.roa (raw, json)
Hash identifier: rRQ331kyVfcVNTSgbZ4aSm/TGatYurU5gniek1YcBzQ=
Subject key identifier: 88:F5:02:38:C0:C2:6F:7D:59:48:4A:AD:50:8B:8C:7C:26:61:24:19
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C104824C11085D69B355680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/258b8123-80d2-3594-9e54-b91d7e5caa1e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 73.65.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:48:24:c1:10:85:d6:9b:35:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=35f4882d-43b8-40f3-8484-5076e02cd0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:1a:00:ed:f9:96:8d:c8:ef:10:66:bc:4c:
61:3f:c2:fe:74:98:df:95:d4:e1:e5:9f:0d:6e:79:
60:54:b4:dd:ae:05:09:2a:4b:38:b1:6d:8a:2f:c2:
4f:0c:7a:f8:33:a2:a7:33:a7:b2:cc:95:54:73:7c:
30:1f:43:65:f2:08:db:0e:1e:c0:e2:fb:ce:a7:68:
50:55:16:f4:6d:56:fc:01:7e:6f:4f:b4:cf:68:9e:
9b:4f:ee:4c:aa:51:67:f1:5c:f6:49:15:5f:0a:12:
9a:4c:bb:42:db:72:fe:76:62:23:22:8d:24:4e:c5:
c4:4d:6a:40:43:b0:7d:3f:e0:9a:fd:dc:73:f6:b8:
e8:62:a5:f4:28:69:b3:f3:b3:d4:15:0e:19:87:a0:
87:92:54:69:be:d6:cd:aa:44:a2:1b:5a:cd:e8:cd:
22:01:cb:a7:6d:78:b6:03:2f:51:c2:f0:81:cc:c5:
96:b2:11:73:97:59:c7:90:aa:64:e2:6e:2f:7a:3a:
81:ca:b5:69:0f:8d:20:b4:76:16:77:08:a3:1a:12:
8d:8e:c9:80:f4:b7:ad:06:6a:e7:af:9c:d4:6c:58:
68:67:4f:47:29:ef:b5:da:53:27:b3:ee:e3:3f:de:
bf:cb:f6:c9:10:9a:fc:ca:2b:40:b1:0c:b3:f1:c5:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F5:02:38:C0:C2:6F:7D:59:48:4A:AD:50:8B:8C:7C:26:61:24:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/258b8123-80d2-3594-9e54-b91d7e5caa1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.65.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:7c:a6:27:4d:57:68:f5:4d:0d:05:a4:97:cf:7f:4f:25:f3:
d1:ca:86:b6:b6:95:7a:63:e7:93:5c:e7:5d:62:6a:99:7b:36:
79:ca:0e:27:5b:92:47:91:21:93:73:1e:98:23:ad:8a:c8:44:
cf:0c:cd:62:8c:bc:3e:f8:53:a4:80:b6:66:e6:b5:39:4b:48:
c0:f6:a2:ca:9f:90:40:f3:bc:60:91:56:ea:e2:ba:53:c4:2e:
8c:a1:55:39:32:1d:4b:74:8b:24:4b:ba:07:77:43:28:b0:c6:
83:9e:17:12:81:01:22:4e:da:b6:86:ee:f6:17:39:fe:66:1c:
69:3b:19:6e:ca:c6:f8:e2:96:ef:18:4f:f0:fc:9e:40:b4:9b:
0b:c7:8a:c1:63:ca:78:13:94:e3:30:d2:a2:33:78:1c:03:f6:
80:82:94:52:7d:8b:d3:6a:80:db:e1:8d:72:68:e3:c8:9f:e8:
a3:ee:78:69:7a:92:cd:1c:61:d6:be:e8:92:e2:80:c7:d2:ed:
af:61:07:ad:21:bb:a2:69:d9:59:49:85:45:ee:71:fb:7a:b6:
ba:d1:eb:ce:6f:e2:6f:19:27:5d:45:9c:15:9a:ba:a5:51:d8:
09:14:06:70:55:3d:51:c5:9f:69:1b:8f:ae:9d:52:e8:d8:16:
87:0e:53:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEEgkwRCF1ps1VoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MzVmNDg4MmQtNDNiOC00MGYzLTg0ODQtNTA3NmUwMmNkMGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw8aAO35lo3I7xBmvExhP8L+dJjfldTh5Z8N
bnlgVLTdrgUJKks4sW2KL8JPDHr4M6KnM6eyzJVUc3wwH0Nl8gjbDh7A4vvOp2hQ
VRb0bVb8AX5vT7TPaJ6bT+5MqlFn8Vz2SRVfChKaTLtC23L+dmIjIo0kTsXETWpA
Q7B9P+Ca/dxz9rjoYqX0KGmz87PUFQ4Zh6CHklRpvtbNqkSiG1rN6M0iAcunbXi2
Ay9RwvCBzMWWshFzl1nHkKpk4m4vejqByrVpD40gtHYWdwijGhKNjsmA9LetBmrn
r5zUbFhoZ09HKe+12lMns+7jP96/y/bJEJr8yitAsQyz8cUUIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIj1AjjAwm99WUhKrVCLjHwmYSQZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjU4YjgxMjMtODBkMi0z
NTk0LTllNTQtYjkxZDdlNWNhYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUHuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACx8pidNV2j1TQ0FpJfPf08l89HKhra2lXpj55Nc511iapl7NnnKDidb
kkeRIZNzHpgjrYrIRM8MzWKMvD74U6SAtmbmtTlLSMD2osqfkEDzvGCRVuriulPE
LoyhVTkyHUt0iyRLugd3QyiwxoOeFxKBASJO2raG7vYXOf5mHGk7GW7Kxvjilu8Y
T/D8nkC0mwvHisFjyngTlOMw0qIzeBwD9oCClFJ9i9NqgNvhjXJo48if6KPueGl6
ks0cYda+6JLigMfS7a9hB60hu6Jp2VlJhUXucft6trrR685v4m8ZJ11FnBWauqVR
2AkUBnBVPVHFn2kbj66dUujYFocOU1s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:43:03 2025 by rpki-client