Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/407c1d86-6878-3a01-bb43-e162d6f24a7d.roa
File: 407c1d86-6878-3a01-bb43-e162d6f24a7d.roa (raw, json)
Hash identifier: R7B63bfrkXSBVbiEC+xfdZKDY2pnPPzpUWUTM6PyoMc=
Subject key identifier: 26:71:B1:01:90:79:E3:EC:DE:59:F4:63:7C:ED:CF:DC:31:10:60:61
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DC5992892EF3C615F06CD
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/407c1d86-6878-3a01-bb43-e162d6f24a7d.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 73.88.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:c5:99:28:92:ef:3c:61:5f:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=83d03d9f-7f7b-4da9-9414-69bf5d69b13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9b:fe:8d:37:11:dc:42:6c:1a:b4:81:4a:53:
55:df:2d:be:a4:84:6e:08:b1:13:bc:bb:77:f6:81:
41:93:a7:33:15:74:ea:0c:ae:49:1b:75:34:f4:d0:
f7:0a:5e:30:40:91:03:c5:45:15:cb:a1:ea:c1:73:
44:0c:20:5e:da:6b:d1:f5:96:a7:b8:6b:58:22:6a:
2f:34:19:85:c6:97:4f:91:76:84:19:9c:40:f7:67:
84:80:21:6b:6a:3d:f3:d0:30:0e:f1:08:04:49:24:
5f:5d:5f:c8:77:db:36:f4:5a:62:18:fb:ef:6b:56:
eb:38:f7:8d:c6:bb:01:6e:10:25:eb:cf:31:c5:26:
d2:e0:22:a5:f2:43:a1:b9:2b:79:20:0b:81:bd:fd:
a9:74:a6:f0:92:b4:0e:c1:03:72:35:40:d9:04:52:
f4:58:7c:16:31:6c:97:2e:7a:85:53:7f:10:b0:7c:
64:6a:ce:4a:f3:b5:5f:26:de:bf:d2:64:65:83:7c:
2a:52:1f:bf:0a:aa:37:97:19:ae:e5:56:cd:f3:22:
68:23:71:db:6a:1d:3e:87:9f:49:f7:19:3a:64:62:
ae:10:09:48:4a:e7:ec:16:bf:36:a2:20:16:e4:3f:
97:df:95:f9:f0:76:50:9b:25:86:70:43:b8:ed:a0:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:71:B1:01:90:79:E3:EC:DE:59:F4:63:7C:ED:CF:DC:31:10:60:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/407c1d86-6878-3a01-bb43-e162d6f24a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.88.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:b9:3b:8b:3a:55:ea:c2:1e:c2:09:45:50:6b:04:e5:c0:b2:
25:b1:ec:84:b6:bb:09:40:1b:68:e5:5e:5a:0b:84:91:bf:c5:
3b:da:0e:e7:1d:b2:5a:51:6a:5d:dc:9f:c9:ae:41:86:9f:97:
62:ee:9d:52:d1:10:60:30:f0:c1:f2:22:ca:6b:c6:30:34:0d:
2c:dd:db:38:f8:d3:29:a4:2c:f1:90:6e:97:94:c2:0a:8a:ab:
01:4c:7e:7e:93:e9:a7:7a:e7:2c:5e:d2:91:da:d0:4f:55:4e:
67:46:18:02:cc:da:28:7a:cd:20:c0:af:b9:74:9e:3c:a5:1c:
8a:75:37:b5:14:df:f9:8d:b3:4a:bc:85:e7:b0:de:da:0b:af:
8e:42:23:9f:d7:de:d3:b2:22:27:d5:90:02:c6:25:6f:fc:53:
65:83:13:02:ae:7e:7d:ff:b9:dd:56:00:19:17:dc:00:5c:9c:
30:89:bc:c0:4a:2c:49:79:3a:d8:ef:07:20:25:71:95:05:30:
d2:cb:c7:d3:72:e9:71:44:c9:36:fa:fa:ee:82:4e:5d:a1:f9:
3c:6d:eb:85:c4:67:66:0f:7b:58:a0:c4:d3:76:06:68:68:b7:
16:e7:af:46:03:84:f0:f0:55:a8:34:88:21:1e:f3:63:c3:29:
be:15:43:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebcWZKJLvPGFfBs0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ODNkMDNkOWYtN2Y3Yi00ZGE5LTk0MTQtNjliZjVkNjliMTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pv+jTcR3EJsGrSBSlNV3y2+pIRuCLETvLt3
9oFBk6czFXTqDK5JG3U09ND3Cl4wQJEDxUUVy6HqwXNEDCBe2mvR9ZanuGtYImov
NBmFxpdPkXaEGZxA92eEgCFraj3z0DAO8QgESSRfXV/Id9s29FpiGPvva1brOPeN
xrsBbhAl688xxSbS4CKl8kOhuSt5IAuBvf2pdKbwkrQOwQNyNUDZBFL0WHwWMWyX
LnqFU38QsHxkas5K87VfJt6/0mRlg3wqUh+/Cqo3lxmu5VbN8yJoI3Hbah0+h59J
9xk6ZGKuEAlISufsFr82oiAW5D+X35X58HZQmyWGcEO47aDEdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZxsQGQeePs3ln0Y3ztz9wxEGBhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA3YzFkODYtNjg3OC0z
YTAxLWJiNDMtZTE2MmQ2ZjI0YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSVgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGm5O4s6VerCHsIJRVBrBOXAsiWx7IS2uwlAG2jlXloLhJG/xTvaDucd
slpRal3cn8muQYafl2LunVLREGAw8MHyIsprxjA0DSzd2zj40ymkLPGQbpeUwgqK
qwFMfn6T6ad65yxe0pHa0E9VTmdGGALM2ih6zSDAr7l0njylHIp1N7UU3/mNs0q8
heew3toLr45CI5/X3tOyIifVkALGJW/8U2WDEwKufn3/ud1WABkX3ABcnDCJvMBK
LEl5OtjvByAlcZUFMNLLx9Ny6XFEyTb6+u6CTl2h+Txt64XEZ2YPe1igxNN2Bmho
txbnr0YDhPDwVag0iCEe82PDKb4VQ9M=
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:32:16 2025 by rpki-client