Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4068a440-a4be-3ad7-b7a2-e140207c6e59.roa
File: 4068a440-a4be-3ad7-b7a2-e140207c6e59.roa (raw, json)
Hash identifier: 0fDze1wxf/hRLY6pY5rDksN8mjYJO3/HKLQlDxrlrD4=
Subject key identifier: 04:9E:84:0B:52:85:47:9A:AE:E9:08:8B:BE:A2:E0:A6:94:EB:8B:CE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AA7BA6A1BAE8C152B7CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4068a440-a4be-3ad7-b7a2-e140207c6e59.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 73.240.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:a7:ba:6a:1b:ae:8c:15:2b:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=48a8fb02-c986-45af-94b4-b25f8d7b3a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:2a:15:c3:59:76:2f:4a:61:77:2d:0c:5b:
17:df:a2:75:1c:8d:75:e4:1e:ab:37:6f:6b:d2:af:
eb:03:80:04:f6:02:1c:67:86:cb:f9:70:17:ce:ff:
d9:3e:ea:1c:d9:75:7d:a9:25:81:ee:5e:cf:14:be:
4c:d8:b0:9a:ae:2c:aa:30:5d:df:97:d3:6e:cd:73:
d6:ee:d1:85:f7:51:06:6f:28:b5:d2:5d:31:db:b8:
16:90:12:dc:3b:cf:98:57:4f:3e:5e:e0:2f:1c:03:
a6:d5:06:50:6d:f3:62:7a:f6:d8:04:65:5b:dd:0a:
98:c7:8f:a5:ff:c1:54:18:1b:a3:aa:8d:1c:ef:93:
2b:15:2d:df:ab:df:23:cc:34:0e:1a:1e:fb:d6:79:
53:9f:c7:bf:49:d6:ee:80:18:8c:53:c0:f1:30:54:
e8:6c:9a:90:a2:ac:e6:e4:ce:ff:96:b9:4a:bf:f3:
5a:50:e7:8f:87:43:4b:ce:75:c3:35:41:24:d8:83:
dc:51:01:ac:97:37:ba:4f:af:1d:4e:35:45:ea:1a:
c3:24:8a:c2:49:93:73:d4:1d:c0:e6:c3:7d:11:df:
c7:21:d2:ea:cc:13:89:b5:49:87:36:67:21:0f:6e:
db:45:df:77:cf:68:0d:f9:ec:e4:37:de:d9:58:c0:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:84:0B:52:85:47:9A:AE:E9:08:8B:BE:A2:E0:A6:94:EB:8B:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4068a440-a4be-3ad7-b7a2-e140207c6e59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.240.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:8f:86:2d:79:8d:2c:13:93:65:7d:c1:9b:be:d4:b2:6d:73:
ef:dd:ad:6d:1c:d3:cc:ee:71:ba:4c:fe:c4:b3:fe:fb:6c:10:
3c:5f:36:e6:39:8d:49:2d:60:27:5b:cd:e3:d5:ca:46:d0:b1:
ec:2d:43:cb:e3:6a:5e:e0:cf:29:dc:09:62:b4:fe:95:0c:d7:
69:90:47:b7:dc:7a:4a:95:c4:13:aa:d1:25:11:6b:09:e3:de:
d6:19:d3:1f:e4:4f:94:55:4b:c3:f1:04:74:28:14:3a:9f:e8:
a5:c7:e9:7d:82:89:5b:7e:38:5b:8f:a4:6a:9a:16:c7:2a:d4:
76:e9:38:2b:fb:4b:48:8d:f2:f9:31:55:80:1d:ed:a7:4e:92:
48:7e:89:79:f1:a0:0c:91:2f:2c:59:ce:d5:03:c3:e3:a9:61:
a7:19:e0:34:83:7e:a2:6f:b9:2f:3e:c3:c6:05:70:26:75:e7:
26:7d:06:51:5e:35:f4:5b:ec:b6:85:16:b2:7d:cb:30:b8:ac:
cf:d7:42:59:17:06:52:ee:3f:74:63:25:67:7b:51:61:8c:04:
4f:08:45:19:64:58:3f:40:8c:66:be:d5:a4:e4:80:8d:95:46:
10:f1:4f:99:31:91:7c:07:ab:bb:a6:81:4b:e6:7b:06:30:0a:
8d:0d:17:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOqe6ahuujBUrfMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NDhhOGZiMDItYzk4Ni00NWFmLTk0YjQtYjI1ZjhkN2IzYTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxsqFcNZdi9KYXctDFsX36J1HI115B6rN29r
0q/rA4AE9gIcZ4bL+XAXzv/ZPuoc2XV9qSWB7l7PFL5M2LCariyqMF3fl9NuzXPW
7tGF91EGbyi10l0x27gWkBLcO8+YV08+XuAvHAOm1QZQbfNievbYBGVb3QqYx4+l
/8FUGBujqo0c75MrFS3fq98jzDQOGh771nlTn8e/SdbugBiMU8DxMFTobJqQoqzm
5M7/lrlKv/NaUOePh0NLznXDNUEk2IPcUQGslze6T68dTjVF6hrDJIrCSZNz1B3A
5sN9Ed/HIdLqzBOJtUmHNmchD27bRd93z2gN+ezkN97ZWMCj1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFASehAtShUearukIi76i4KaU64vOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA2OGE0NDAtYTRiZS0z
YWQ3LWI3YTItZTE0MDIwN2M2ZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSfCIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmPhi15jSwTk2V9wZu+1LJtc+/drW0c08zucbpM/sSz/vtsEDxfNuY5
jUktYCdbzePVykbQsewtQ8vjal7gzyncCWK0/pUM12mQR7fcekqVxBOq0SURawnj
3tYZ0x/kT5RVS8PxBHQoFDqf6KXH6X2CiVt+OFuPpGqaFscq1HbpOCv7S0iN8vkx
VYAd7adOkkh+iXnxoAyRLyxZztUDw+OpYacZ4DSDfqJvuS8+w8YFcCZ15yZ9BlFe
NfRb7LaFFrJ9yzC4rM/XQlkXBlLuP3RjJWd7UWGMBE8IRRlkWD9AjGa+1aTkgI2V
RhDxT5kxkXwHq7umgUvmewYwCo0NFzw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:45:48 2025 by rpki-client