Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e517db3-777d-3e8c-a9fa-baa2b8bbd62d.roa
File: 3e517db3-777d-3e8c-a9fa-baa2b8bbd62d.roa (raw, json)
Hash identifier: rB7gl0Oajy4BYm5qbiMyn6MjkpPA2jf85hiO1PoNADw=
Subject key identifier: D7:9F:01:DF:04:63:DB:B3:DE:9A:3B:F8:9C:40:AC:16:0B:C5:61:67
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13C736C63F0FF751820280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e517db3-777d-3e8c-a9fa-baa2b8bbd62d.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.158.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:c7:36:c6:3f:0f:f7:51:82:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2bef8502-e03a-41f9-9913-1a3cd8ed8a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:43:71:e7:7c:e7:8d:9e:55:41:38:9a:a7:44:
69:ae:38:63:83:49:2b:73:40:db:2c:d8:b9:8d:24:
ba:54:90:ad:bf:46:3a:67:3e:34:4e:bf:3d:e6:70:
76:0a:61:7d:b5:3b:91:60:8a:3a:cf:71:17:d6:af:
76:ad:ef:3f:01:24:cb:0b:89:af:6c:76:b5:9d:2c:
3f:9e:0d:97:5e:f1:59:f1:4f:3e:9a:a8:82:cb:9d:
76:33:81:18:4d:3b:04:2c:7b:4d:61:d6:08:36:17:
5f:34:c2:5d:35:10:bc:41:9d:d2:8a:27:8c:d5:49:
38:21:3e:fe:39:6e:d2:cb:a4:7d:c5:13:1a:24:f3:
29:6d:7e:a3:56:d0:0e:29:8e:81:5b:97:d9:29:2b:
fe:39:ec:66:93:fe:9e:51:e9:85:8c:98:18:02:33:
b2:86:50:ff:8a:66:c4:96:80:1f:b3:89:d9:93:33:
68:d4:43:4f:41:8b:f0:e4:e9:80:89:56:d0:ca:ce:
04:ec:4b:f8:b7:92:04:41:68:36:81:6d:46:fb:9e:
41:ab:ac:1a:28:38:1f:14:6e:ae:74:ab:56:fd:e2:
1f:33:c6:8c:d0:3c:26:d4:2c:f3:22:b1:e5:91:bc:
af:fc:90:bd:3d:cd:f8:dc:ba:46:72:ec:1d:cf:c9:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9F:01:DF:04:63:DB:B3:DE:9A:3B:F8:9C:40:AC:16:0B:C5:61:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e517db3-777d-3e8c-a9fa-baa2b8bbd62d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.158.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:5d:3f:37:b5:24:63:2a:2e:9e:e3:cd:15:5d:1c:b2:2d:df:
82:4c:23:e6:22:f8:16:c0:f5:5d:85:0b:9a:0c:10:39:d6:ec:
57:74:84:24:ed:ca:ae:b0:d2:fd:b0:f2:bf:85:b5:9d:99:ae:
75:67:9e:ec:49:c7:c4:1f:27:17:6c:1b:6c:af:3f:14:58:d8:
ca:e6:08:94:67:ba:b9:00:26:75:bc:f9:68:f7:03:ae:5d:b5:
de:86:43:e3:00:6b:19:34:77:f3:3d:53:7c:07:35:d2:b0:94:
8d:ce:25:65:e7:cd:60:92:be:ed:75:90:c8:6c:c1:56:14:0f:
27:f9:f5:66:a7:b3:54:6d:9b:df:fc:ea:df:37:65:d2:93:3a:
88:43:4c:f2:b8:cc:70:5a:6b:78:98:98:70:1c:3d:f4:8f:b9:
4a:3c:2c:b7:14:f5:51:ce:51:22:c3:60:d7:13:c5:1f:d7:02:
3d:fa:c5:c9:92:65:c2:d5:aa:66:36:03:ca:d3:f1:be:7a:68:
e2:b6:3f:a3:55:f3:8a:f9:35:d1:79:aa:dd:6e:b5:7d:2e:f6:
90:86:e6:10:c7:05:5b:03:1f:15:87:ad:1f:e1:45:89:82:c1:
c8:ee:45:1e:67:30:32:b7:e6:8f:40:55:32:26:09:20:21:b9:
d1:d7:b0:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhME8c2xj8P91GCAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MmJlZjg1MDItZTAzYS00MWY5LTk5MTMtMWEzY2Q4ZWQ4YTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUNx53znjZ5VQTiap0Rprjhjg0krc0DbLNi5
jSS6VJCtv0Y6Zz40Tr895nB2CmF9tTuRYIo6z3EX1q92re8/ASTLC4mvbHa1nSw/
ng2XXvFZ8U8+mqiCy512M4EYTTsELHtNYdYINhdfNMJdNRC8QZ3SiieM1Uk4IT7+
OW7Sy6R9xRMaJPMpbX6jVtAOKY6BW5fZKSv+Oexmk/6eUemFjJgYAjOyhlD/imbE
loAfs4nZkzNo1ENPQYvw5OmAiVbQys4E7Ev4t5IEQWg2gW1G+55Bq6waKDgfFG6u
dKtW/eIfM8aM0Dwm1CzzIrHlkbyv/JC9Pc343LpGcuwdz8nYTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNefAd8EY9uz3po7+JxArBYLxWFnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U1MTdkYjMtNzc3ZC0z
ZThjLWE5ZmEtYmFhMmI4YmJkNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ4gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpdPze1JGMqLp7jzRVdHLIt34JMI+Yi+BbA9V2FC5oMEDnW7Fd0hCTt
yq6w0v2w8r+FtZ2ZrnVnnuxJx8QfJxdsG2yvPxRY2MrmCJRnurkAJnW8+Wj3A65d
td6GQ+MAaxk0d/M9U3wHNdKwlI3OJWXnzWCSvu11kMhswVYUDyf59Wans1Rtm9/8
6t83ZdKTOohDTPK4zHBaa3iYmHAcPfSPuUo8LLcU9VHOUSLDYNcTxR/XAj36xcmS
ZcLVqmY2A8rT8b56aOK2P6NV84r5NdF5qt1utX0u9pCG5hDHBVsDHxWHrR/hRYmC
wcjuRR5nMDK35o9AVTImCSAhudHXsHM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:55 2025 by rpki-client