Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39f33d58-3e24-3ace-81f1-6c3be9c6a9db.roa
File: 39f33d58-3e24-3ace-81f1-6c3be9c6a9db.roa (raw, json)
Hash identifier: Ng6WXoRTOjviH9Ak1Ccl6hi8Yl5XfQWUbgbn7RTU3cA=
Subject key identifier: 26:99:AC:6D:F9:93:EF:9A:D0:C8:19:BF:68:DF:0C:4B:95:CF:15:58
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12C1878488A062E3A16120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39f33d58-3e24-3ace-81f1-6c3be9c6a9db.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.44.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:c1:87:84:88:a0:62:e3:a1:61:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ab15fff5-8a94-4568-8cec-7f3f550d9006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:2a:67:62:3c:68:de:e4:0a:52:84:7c:22:
a0:52:02:bb:b7:c1:9c:79:d8:f5:61:db:1c:8a:fa:
61:85:69:03:a7:50:a0:e6:77:bd:38:c9:62:77:15:
e5:ae:a4:fd:88:c6:aa:38:07:7a:e2:2e:7f:6e:a1:
ba:fa:08:0b:b7:fa:dc:b3:a3:3b:e8:25:57:25:5a:
f4:f6:35:88:68:1b:b3:9b:84:cf:6d:a7:07:19:f9:
5b:fc:8e:c9:b9:e7:af:d5:8a:21:6f:f7:0c:7c:01:
2b:25:df:31:ed:01:bd:c2:cf:9b:23:db:8a:11:05:
48:74:dd:f2:9e:fe:d9:af:00:db:7c:9d:34:d7:ac:
69:18:6e:be:b4:e4:06:99:da:b5:47:30:0d:be:8d:
b4:1c:26:79:0d:03:59:c7:0e:9c:fc:7e:89:26:2f:
5c:e4:d7:2d:a8:a7:fd:a2:25:ef:64:7a:1c:f4:13:
ca:74:6b:fe:3e:5d:76:b0:0a:fb:cf:e4:4e:ea:07:
80:d1:21:f1:f7:fe:c0:46:50:bf:79:da:4c:32:d9:
b9:66:d9:7c:5c:78:10:80:df:91:10:53:ab:77:be:
c9:ef:79:4b:17:8f:0d:57:68:b6:10:38:24:15:dd:
99:19:5a:f1:04:a3:1e:4a:eb:b2:ec:ff:83:fa:2a:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:AC:6D:F9:93:EF:9A:D0:C8:19:BF:68:DF:0C:4B:95:CF:15:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39f33d58-3e24-3ace-81f1-6c3be9c6a9db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.44.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:9e:12:8d:04:69:c9:3e:60:e4:91:e9:dd:2f:4c:8b:21:a7:
3c:11:ce:41:26:38:4d:91:07:e2:b4:4b:d1:1e:65:fe:c8:8e:
ae:de:7a:80:5e:9d:e3:0f:bc:29:a5:b4:68:fe:b5:e0:2b:0b:
f8:08:21:29:29:21:41:9b:25:10:6f:88:cf:56:56:87:c7:e9:
aa:33:12:0b:60:93:32:26:58:e4:88:c7:5b:aa:d6:d3:bf:0c:
06:c1:e4:4b:75:19:21:05:10:08:a0:70:fc:a1:4d:8a:6d:96:
a3:f0:d6:39:52:07:b8:cc:e5:54:3f:ad:99:43:b2:ae:0b:f4:
2a:73:f6:9d:9d:41:89:ca:4e:32:91:ff:7f:63:65:24:12:ba:
eb:6d:5b:1c:c3:5b:9a:62:ad:49:93:2f:1e:ec:50:7e:db:0d:
7e:90:5a:8a:01:06:b6:97:62:98:48:79:dd:1f:c1:5c:21:f8:
fc:57:67:92:63:5f:e0:fa:59:3a:f5:ce:1b:bf:bf:7f:ff:4e:
0f:a4:2c:d8:1a:61:15:46:2c:4e:d3:9c:d8:f8:55:18:fd:a8:
9f:57:05:59:47:b6:1a:8a:9a:db:66:53:b0:41:92:8e:34:e5:
bc:e5:88:a3:60:53:88:a9:bb:6f:87:e3:44:b2:7e:10:28:a1:
bc:4c:22:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEsGHhIigYuOhYSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YWIxNWZmZjUtOGE5NC00NTY4LThjZWMtN2YzZjU1MGQ5MDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0IqZ2I8aN7kClKEfCKgUgK7t8Gcedj1Ydsc
ivphhWkDp1Cg5ne9OMlidxXlrqT9iMaqOAd64i5/bqG6+ggLt/rcs6M76CVXJVr0
9jWIaBuzm4TPbacHGflb/I7Jueev1Yohb/cMfAErJd8x7QG9ws+bI9uKEQVIdN3y
nv7ZrwDbfJ0016xpGG6+tOQGmdq1RzANvo20HCZ5DQNZxw6c/H6JJi9c5NctqKf9
oiXvZHoc9BPKdGv+Pl12sAr7z+RO6geA0SHx9/7ARlC/edpMMtm5Ztl8XHgQgN+R
EFOrd77J73lLF48NV2i2EDgkFd2ZGVrxBKMeSuuy7P+D+ioJfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCaZrG35k++a0MgZv2jfDEuVzxVYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzlmMzNkNTgtM2UyNC0z
YWNlLTgxZjEtNmMzYmU5YzZhOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSwoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqeEo0Eack+YOSR6d0vTIshpzwRzkEmOE2RB+K0S9EeZf7Ijq7eeoBe
neMPvCmltGj+teArC/gIISkpIUGbJRBviM9WVofH6aozEgtgkzImWOSIx1uq1tO/
DAbB5Et1GSEFEAigcPyhTYptlqPw1jlSB7jM5VQ/rZlDsq4L9Cpz9p2dQYnKTjKR
/39jZSQSuuttWxzDW5pirUmTLx7sUH7bDX6QWooBBraXYphIed0fwVwh+PxXZ5Jj
X+D6WTr1zhu/v3//Tg+kLNgaYRVGLE7TnNj4VRj9qJ9XBVlHthqKmttmU7BBko40
5bzliKNgU4ipu2+H40SyfhAoobxMImI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:11 2025 by rpki-client