Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9bc7e1-a090-3798-8551-73a3fe75750e.roa
File: 3d9bc7e1-a090-3798-8551-73a3fe75750e.roa (raw, json)
Hash identifier: KRoknQNzolKWwOKazt8hflFEzSChhM3WdOe6V9C3bQ8=
Subject key identifier: 06:CE:24:A5:DC:6F:DF:76:3C:58:96:0D:2E:F4:85:AC:64:F2:B7:6C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1475BEB5878A912D785660
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9bc7e1-a090-3798-8551-73a3fe75750e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.70.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:75:be:b5:87:8a:91:2d:78:56:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=483c4c96-8310-46ec-b98d-9dad7def4ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:d0:6d:e5:64:05:65:fa:75:ea:a5:64:cf:
f5:96:3f:11:19:2f:22:d4:67:de:39:61:e6:d9:10:
ed:0c:4f:2c:c3:97:2c:3b:0c:36:a9:db:4e:e2:35:
65:15:66:0c:95:b7:1f:12:cc:87:c1:2d:7c:04:fb:
a9:d6:1a:18:c8:d5:03:f2:d4:72:11:2f:66:9c:1c:
b7:4a:b7:de:30:d4:62:8f:3e:de:8d:99:ac:d3:a6:
19:60:ac:e5:16:f6:c2:03:fa:aa:07:81:50:0e:e1:
09:a4:19:c7:9d:37:5c:5a:b6:71:5a:1a:bb:1d:cd:
b3:d2:ea:df:10:75:28:43:57:89:a6:24:ab:97:5b:
b5:6b:9d:ee:2e:82:cc:33:7c:f1:e3:77:5a:22:5b:
7b:ee:a0:53:e3:a2:d3:df:04:ca:6c:51:ee:a9:97:
e2:f1:f2:8b:30:3c:2a:42:db:83:ad:bf:de:56:3c:
29:9f:40:ab:c3:cb:24:a8:90:6c:f6:47:e7:98:56:
ae:a4:50:74:f3:c7:17:c7:ff:96:9b:e4:73:e6:3a:
b2:eb:1e:91:e1:ca:6d:3d:f1:52:29:06:62:cd:58:
09:6f:f9:76:4b:65:e6:47:5d:8b:93:97:2c:fe:b1:
e7:86:4e:28:a6:86:2f:3b:08:c3:db:6d:e3:8b:72:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:24:A5:DC:6F:DF:76:3C:58:96:0D:2E:F4:85:AC:64:F2:B7:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9bc7e1-a090-3798-8551-73a3fe75750e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.70.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:c9:43:be:58:f9:3e:f2:88:7f:6d:d2:82:d7:fb:85:ee:5f:
41:b5:d9:b0:e7:3d:47:f9:3b:78:2d:ae:bf:8a:a2:97:8c:99:
06:52:39:23:0e:68:3d:45:77:5d:bd:7d:d6:2b:8b:ec:10:9d:
c0:2b:6e:81:b9:f1:d9:e7:e8:3a:4d:87:19:8e:2c:2a:d8:68:
5f:1a:e7:55:b0:d1:cb:bf:fd:ef:8c:00:cd:70:6b:c1:41:3c:
3d:fe:be:07:8f:94:89:0d:8d:8a:56:2d:f3:72:02:25:1b:7a:
0d:70:f0:e9:31:d1:3a:c8:5e:ac:f3:92:b5:76:d1:76:8b:2e:
5d:2e:49:2c:91:1b:93:78:1b:ef:fc:eb:34:61:60:93:4b:92:
e7:42:4e:e5:e2:d4:49:4e:ac:0d:cd:39:a2:03:11:de:21:8c:
bb:cb:ac:bc:f3:28:84:d1:ca:ab:a2:52:19:16:fa:b0:7f:34:
2f:d9:75:4b:5d:5e:fb:60:3b:c0:14:d5:60:0f:4d:b1:68:93:
34:95:3e:73:a8:f2:42:e7:a6:9e:b3:8a:42:a6:3c:38:9d:a4:
69:69:41:c7:a5:7f:d6:9f:72:dd:90:64:e0:11:40:17:e6:78:
ed:63:03:e4:0f:8b:77:99:4e:28:73:db:75:fd:b3:57:52:0d:
c3:a7:f9:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMFHW+tYeKkS14VmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NDgzYzRjOTYtODMxMC00NmVjLWI5OGQtOWRhZDdkZWY0YWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJrQbeVkBWX6deqlZM/1lj8RGS8i1GfeOWHm
2RDtDE8sw5csOww2qdtO4jVlFWYMlbcfEsyHwS18BPup1hoYyNUD8tRyES9mnBy3
SrfeMNRijz7ejZms06YZYKzlFvbCA/qqB4FQDuEJpBnHnTdcWrZxWhq7Hc2z0urf
EHUoQ1eJpiSrl1u1a53uLoLMM3zx43daIlt77qBT46LT3wTKbFHuqZfi8fKLMDwq
QtuDrb/eVjwpn0Crw8skqJBs9kfnmFaupFB088cXx/+Wm+Rz5jqy6x6R4cptPfFS
KQZizVgJb/l2S2XmR12Lk5cs/rHnhk4opoYvOwjD223ji3KQJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbOJKXcb992PFiWDS70haxk8rdsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Q5YmM3ZTEtYTA5MC0z
Nzk4LTg1NTEtNzNhM2ZlNzU3NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSUZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3JQ75Y+T7yiH9t0oLX+4XuX0G12bDnPUf5O3gtrr+KopeMmQZSOSMO
aD1Fd129fdYri+wQncArboG58dnn6DpNhxmOLCrYaF8a51Ww0cu//e+MAM1wa8FB
PD3+vgePlIkNjYpWLfNyAiUbeg1w8Okx0TrIXqzzkrV20XaLLl0uSSyRG5N4G+/8
6zRhYJNLkudCTuXi1ElOrA3NOaIDEd4hjLvLrLzzKITRyquiUhkW+rB/NC/ZdUtd
XvtgO8AU1WAPTbFokzSVPnOo8kLnpp6zikKmPDidpGlpQcelf9afct2QZOARQBfm
eO1jA+QPi3eZTihz23X9s1dSDcOn+bM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:36 2025 by rpki-client