Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bebb20c-c133-3455-a53d-3275b69bd3f3.roa
File: 4bebb20c-c133-3455-a53d-3275b69bd3f3.roa (raw, json)
Hash identifier: BiZdo9dNAneVppjpmZUqDFWfaczZnUXhFdcfXSL/S30=
Subject key identifier: B0:01:06:FB:4A:4D:8F:DC:B2:70:B1:27:1B:D1:94:EE:30:E5:AA:DE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12ED2280587895E0917E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bebb20c-c133-3455-a53d-3275b69bd3f3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.9.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:ed:22:80:58:78:95:e0:91:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1a988eda-38c2-435c-8dd8-a694a79d32c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:99:95:61:be:ca:f8:19:2f:66:f2:61:71:
fd:c9:55:87:75:db:e8:06:88:a6:63:66:21:84:ae:
55:52:07:77:6f:3d:69:2b:4e:b2:d5:18:db:13:2b:
34:78:53:ea:d1:7f:ef:15:f6:d8:7f:3c:f2:fc:3f:
d5:3c:9a:08:0a:40:7d:cf:de:14:7c:b9:00:2b:95:
0e:15:df:55:58:ee:ba:2b:ed:f0:5c:8e:e6:2a:ca:
32:08:78:49:e1:b4:90:65:6e:54:fc:50:e2:3c:2b:
e0:72:53:b7:76:49:c5:cc:a1:83:e4:18:50:06:33:
f8:26:96:c5:6c:01:d6:78:4c:73:02:1e:6e:21:1a:
3f:c7:eb:a3:b2:cb:dd:a0:27:b0:e0:31:9c:9c:06:
9b:09:bc:29:3c:9b:8a:7d:47:bd:0d:ff:e3:80:0a:
7b:b1:2a:20:c8:9f:80:66:37:8e:5e:8a:a6:3b:83:
9d:ef:a8:14:26:e6:db:4d:d3:9f:07:94:ab:19:71:
d9:54:f9:3b:5c:66:30:ea:cc:ac:40:af:27:b6:d5:
79:25:3e:69:58:24:21:5d:73:5c:af:b7:26:9f:f2:
c5:7e:53:0e:d2:99:dd:07:b4:38:09:38:a4:c7:ac:
dd:af:ff:f7:de:9b:f2:45:54:0f:0b:8f:83:42:d0:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:06:FB:4A:4D:8F:DC:B2:70:B1:27:1B:D1:94:EE:30:E5:AA:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bebb20c-c133-3455-a53d-3275b69bd3f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.9.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:85:46:52:0b:f0:a0:51:22:5c:0d:d9:9a:b9:44:e2:3d:8f:
d9:8f:0d:6f:5c:ec:9c:be:d6:e9:ef:a4:13:da:63:d4:b9:ef:
d8:dd:34:01:a3:9b:0c:44:61:0a:ff:60:47:32:e4:5f:8c:42:
19:14:d1:89:9c:ca:ad:5f:1d:dd:0a:cd:70:ea:2f:f5:6f:4a:
ec:5d:7f:40:84:db:d4:7b:1c:7f:f2:02:9e:d2:0e:46:e4:9d:
e5:33:6e:72:bf:11:6c:6d:dd:ce:f1:59:7c:5f:bd:9e:a3:c7:
f9:5d:35:75:ce:7c:97:ca:69:b5:25:eb:8a:6f:06:9b:a4:7d:
fa:9a:64:ea:f4:6a:79:15:79:c6:f0:00:c9:cb:62:7a:55:5b:
18:b3:ac:30:30:83:6d:0c:cd:06:ab:92:62:5b:26:0f:76:8a:
ba:35:b2:d6:dc:8a:71:d6:8d:72:b0:83:50:3c:58:bf:a2:90:
b7:ea:72:6b:77:64:7e:e5:46:b7:a3:b2:8f:3d:5e:d7:0b:fb:
b8:87:be:19:8f:ab:d1:28:71:24:9d:83:31:41:a2:05:f2:18:
f5:09:d7:83:1f:4e:16:64:fb:9f:dc:e9:bc:0b:96:b7:53:6c:
81:a3:e6:ca:40:3a:cb:23:d5:45:2d:4a:1b:86:2c:17:11:9a:
48:9d:9c:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEu0igFh4leCRfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MWE5ODhlZGEtMzhjMi00MzVjLThkZDgtYTY5NGE3OWQzMmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiqZlWG+yvgZL2byYXH9yVWHddvoBoimY2Yh
hK5VUgd3bz1pK06y1RjbEys0eFPq0X/vFfbYfzzy/D/VPJoICkB9z94UfLkAK5UO
Fd9VWO66K+3wXI7mKsoyCHhJ4bSQZW5U/FDiPCvgclO3dknFzKGD5BhQBjP4JpbF
bAHWeExzAh5uIRo/x+ujssvdoCew4DGcnAabCbwpPJuKfUe9Df/jgAp7sSogyJ+A
ZjeOXoqmO4Od76gUJubbTdOfB5SrGXHZVPk7XGYw6sysQK8nttV5JT5pWCQhXXNc
r7cmn/LFflMO0pndB7Q4CTikx6zdr//33pvyRVQPC4+DQtC9VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLABBvtKTY/csnCxJxvRlO4w5areMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGJlYmIyMGMtYzEzMy0z
NDU1LWE1M2QtMzI3NWI2OWJkM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSQmgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMeFRlIL8KBRIlwN2Zq5ROI9j9mPDW9c7Jy+1unvpBPaY9S579jdNAGj
mwxEYQr/YEcy5F+MQhkU0Ymcyq1fHd0KzXDqL/VvSuxdf0CE29R7HH/yAp7SDkbk
neUzbnK/EWxt3c7xWXxfvZ6jx/ldNXXOfJfKabUl64pvBpukffqaZOr0ankVecbw
AMnLYnpVWxizrDAwg20MzQarkmJbJg92iro1stbcinHWjXKwg1A8WL+ikLfqcmt3
ZH7lRrejso89XtcL+7iHvhmPq9EocSSdgzFBogXyGPUJ14MfThZk+5/c6bwLlrdT
bIGj5spAOssj1UUtShuGLBcRmkidnJQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:07 2025 by rpki-client