Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39d385e2-d89c-33b4-acf6-f7e9bf97bc82.roa
File: 39d385e2-d89c-33b4-acf6-f7e9bf97bc82.roa (raw, json)
Hash identifier: 9Jvo31IQAGEC2u47Y2kgFu/G+JGlhr/Da5q6/dEgP6k=
Subject key identifier: 7C:BD:4C:B1:04:BF:69:60:1B:52:91:D0:2B:CF:B0:72:CE:6C:2B:93
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1454852C8A41E21108E600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39d385e2-d89c-33b4-acf6-f7e9bf97bc82.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.241.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:54:85:2c:8a:41:e2:11:08:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f893737e-bc05-48b3-b88a-d366accd5733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:ea:7b:1d:20:04:31:a5:09:ca:d8:ac:37:
e5:d5:98:eb:1f:ff:08:3a:2a:66:14:cc:4f:c7:88:
60:40:61:e7:9a:cb:04:f7:9d:9f:27:9b:2a:03:97:
96:8b:9d:cb:b3:2d:5c:6b:db:dd:4f:cc:70:2e:91:
93:73:cb:6d:95:d8:73:34:da:17:6a:9a:d2:d9:80:
17:8a:6b:1a:65:ec:e9:a5:07:5d:a7:12:bd:62:dc:
aa:d4:19:16:3f:71:7b:e0:71:82:18:95:17:ef:ae:
5a:8a:38:6e:24:d0:0d:c3:bb:ca:df:c3:42:64:d6:
68:59:17:07:07:ac:81:5a:de:10:a3:86:53:d4:df:
57:4d:ec:28:dc:7f:62:4f:db:84:85:05:20:58:06:
86:d5:01:20:14:68:21:89:77:03:86:56:d6:2a:a5:
4e:ce:6d:cb:77:9f:7b:79:0e:1d:ea:1b:b5:24:a0:
87:27:81:5e:06:4b:f8:50:50:a7:8f:48:82:01:91:
91:d0:42:3a:2c:f1:40:71:2f:a7:35:58:8f:46:6d:
87:00:9e:fa:67:98:9b:99:f3:7a:c3:29:9a:3d:99:
6c:9d:0f:1d:ff:7c:5e:5a:37:c3:9a:ac:59:53:87:
db:c6:5d:88:0e:18:b1:30:0d:4d:19:0b:eb:0d:3f:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BD:4C:B1:04:BF:69:60:1B:52:91:D0:2B:CF:B0:72:CE:6C:2B:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39d385e2-d89c-33b4-acf6-f7e9bf97bc82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.241.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:66:6e:db:c9:8c:f6:2f:44:1e:7a:68:f2:e0:c4:c4:6e:9c:
d5:16:9c:2b:48:e9:75:c2:1b:18:6f:62:d9:2a:d3:ce:6f:03:
55:ba:a2:c5:b0:85:52:4c:23:db:c2:d5:fc:b7:ee:b6:cc:31:
c6:1c:64:55:84:e3:59:47:b0:a2:d6:a0:d3:57:e1:31:f1:a8:
cc:69:38:51:a5:b7:7f:63:00:30:28:fc:70:9d:bb:a2:f2:c2:
56:6b:30:b8:43:3a:e8:ac:66:ef:d0:b7:1c:a8:f8:09:16:c1:
dd:6f:95:40:22:de:13:ff:05:22:d1:b6:cc:1d:35:42:e8:8f:
14:51:c7:cf:dd:b4:7e:4e:30:71:47:59:43:5f:44:3f:d7:ce:
b9:87:47:4b:37:92:43:d2:77:58:f0:e8:f3:af:ff:b7:33:3e:
76:74:1f:c1:13:75:c1:36:15:1b:45:06:92:07:97:41:ce:0c:
b9:8f:5d:92:12:eb:f7:7f:3d:3f:b7:49:ad:d0:3c:8c:0e:ae:
74:13:8d:f3:e4:91:69:60:d2:0c:be:5e:89:5d:a6:6f:cc:6b:
1e:82:d8:20:46:10:38:35:0b:6e:ad:cc:29:9d:89:b4:da:f8:
16:f4:36:84:65:f0:ff:9b:23:59:d4:b9:20:4e:9b:b4:6a:af:
dc:4c:d4:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMFFSFLIpB4hEI5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
Zjg5MzczN2UtYmMwNS00OGIzLWI4OGEtZDM2NmFjY2Q1NzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiADqex0gBDGlCcrYrDfl1ZjrH/8IOipmFMxP
x4hgQGHnmssE952fJ5sqA5eWi53Lsy1ca9vdT8xwLpGTc8ttldhzNNoXaprS2YAX
imsaZezppQddpxK9Ytyq1BkWP3F74HGCGJUX765aijhuJNANw7vK38NCZNZoWRcH
B6yBWt4Qo4ZT1N9XTewo3H9iT9uEhQUgWAaG1QEgFGghiXcDhlbWKqVOzm3Ld597
eQ4d6hu1JKCHJ4FeBkv4UFCnj0iCAZGR0EI6LPFAcS+nNViPRm2HAJ76Z5ibmfN6
wymaPZlsnQ8d/3xeWjfDmqxZU4fbxl2IDhixMA1NGQvrDT+bpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHy9TLEEv2lgG1KR0CvPsHLObCuTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzlkMzg1ZTItZDg5Yy0z
M2I0LWFjZjYtZjdlOWJmOTdiYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfEoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJmbtvJjPYvRB56aPLgxMRunNUWnCtI6XXCGxhvYtkq085vA1W6osWw
hVJMI9vC1fy37rbMMcYcZFWE41lHsKLWoNNX4THxqMxpOFGlt39jADAo/HCdu6Ly
wlZrMLhDOuisZu/Qtxyo+AkWwd1vlUAi3hP/BSLRtswdNULojxRRx8/dtH5OMHFH
WUNfRD/XzrmHR0s3kkPSd1jw6POv/7czPnZ0H8ETdcE2FRtFBpIHl0HODLmPXZIS
6/d/PT+3Sa3QPIwOrnQTjfPkkWlg0gy+Xoldpm/Max6C2CBGEDg1C26tzCmdibTa
+Bb0NoRl8P+bI1nUuSBOm7Rqr9xM1CE=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:26 2025 by rpki-client