Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d03d0ee-ca21-39a6-96ff-423c3d8da093.roa
File: 4d03d0ee-ca21-39a6-96ff-423c3d8da093.roa (raw, json)
Hash identifier: 1+iTJ3MihnTbD9vKNvIBfBMKuD7LWg6ucuaKKqG7Cu8=
Subject key identifier: ED:E5:11:87:98:03:2C:E5:1D:31:BB:78:F7:90:12:FA:54:2B:A2:90
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12D7A0E49145693A023AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d03d0ee-ca21-39a6-96ff-423c3d8da093.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.72.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:d7:a0:e4:91:45:69:3a:02:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=86b55a57-c220-47dd-b26e-c944d53dc19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:8c:de:29:02:4a:1b:fe:49:7a:1c:bd:46:
dc:ec:34:74:a9:f2:0d:76:bb:aa:e6:04:08:f0:97:
6e:ab:6f:59:cb:f4:ab:7f:9f:a6:a7:30:0c:94:43:
98:62:5a:a5:0d:89:79:12:9c:00:6e:0c:2d:96:10:
95:d9:be:21:15:8b:fa:75:4a:42:c3:67:80:2b:60:
db:6a:9a:3f:eb:82:7e:ab:70:46:bf:0e:30:a0:57:
9b:1d:ef:eb:6d:8d:12:aa:38:da:f2:f2:24:6d:c5:
d1:9c:a8:6f:a9:58:36:cb:ca:69:1d:c1:17:65:2e:
99:e8:6e:b9:62:45:d4:c4:71:b3:ae:7a:e3:bf:29:
00:b8:44:15:13:53:d8:04:2d:43:8f:c3:0b:67:d2:
ca:56:6e:0c:db:4e:0a:c3:ee:60:d7:4e:05:7b:99:
96:95:75:31:c2:55:d4:dc:22:a5:33:25:f1:6f:8e:
3f:e8:30:62:8a:f5:45:2d:15:37:c8:8a:68:ea:a2:
9b:57:75:9f:6a:d4:da:16:28:1e:84:99:74:ae:3b:
41:4f:17:61:29:1c:4f:b4:71:44:48:42:7a:d7:aa:
de:ca:a7:dc:75:65:d3:cd:6f:86:c3:74:f4:79:d1:
68:b4:b3:69:a5:01:b3:56:df:78:c6:d6:6d:20:30:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E5:11:87:98:03:2C:E5:1D:31:BB:78:F7:90:12:FA:54:2B:A2:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d03d0ee-ca21-39a6-96ff-423c3d8da093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.72.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:7e:7c:71:8f:8f:2d:e1:a8:d5:1a:c1:55:20:88:4f:94:6e:
52:7a:a3:37:82:f3:be:c9:fc:af:c1:b8:ce:b9:5d:b9:f4:d8:
e7:37:d7:a3:db:31:53:56:00:56:fd:41:17:3f:9a:d4:46:e4:
2e:d3:d7:76:26:a1:a1:86:d9:5e:27:73:42:bd:22:6a:fe:00:
61:cb:36:42:f1:26:06:3c:33:84:d7:fc:cf:24:f0:2a:58:da:
61:d8:16:7e:ab:71:4d:1f:d8:59:6a:3d:ec:6e:ce:75:7c:cb:
9f:ef:f3:d1:b9:6e:60:0f:00:42:6a:b6:63:ec:7b:d6:87:82:
07:99:04:89:51:81:a2:a9:bc:03:6f:33:cb:4d:f5:e6:83:1e:
57:64:af:9c:5b:31:07:57:ee:9c:91:ee:d4:3d:f7:c9:50:67:
32:c3:bd:b8:dc:fd:b8:3d:cd:e1:26:18:6b:b4:2a:e8:30:36:
09:57:b1:4f:91:ea:c2:ba:c6:39:15:3c:bb:7c:06:49:f1:5d:
58:03:8e:b9:7e:ae:68:4d:64:62:06:7e:d5:00:40:54:b4:3c:
2b:62:7d:60:af:36:cd:66:17:1a:ae:dc:fe:52:71:57:02:29:
89:e5:56:dd:e2:ec:76:9e:e1:d9:ff:5b:86:f7:76:64:0d:07:
05:2d:b8:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEteg5JFFaToCOsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ODZiNTVhNTctYzIyMC00N2RkLWIyNmUtYzk0NGQ1M2RjMTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKqM3ikCShv+SXocvUbc7DR0qfINdruq5gQI
8Jduq29Zy/Srf5+mpzAMlEOYYlqlDYl5EpwAbgwtlhCV2b4hFYv6dUpCw2eAK2Db
apo/64J+q3BGvw4woFebHe/rbY0Sqjja8vIkbcXRnKhvqVg2y8ppHcEXZS6Z6G65
YkXUxHGzrnrjvykAuEQVE1PYBC1Dj8MLZ9LKVm4M204Kw+5g104Fe5mWlXUxwlXU
3CKlMyXxb44/6DBiivVFLRU3yIpo6qKbV3WfatTaFigehJl0rjtBTxdhKRxPtHFE
SEJ616reyqfcdWXTzW+Gw3T0edFotLNppQGzVt94xtZtIDAaXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3lEYeYAyzlHTG7ePeQEvpUK6KQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQwM2QwZWUtY2EyMS0z
OWE2LTk2ZmYtNDIzYzNkOGRhMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUhgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALV+fHGPjy3hqNUawVUgiE+UblJ6ozeC877J/K/BuM65Xbn02Oc316Pb
MVNWAFb9QRc/mtRG5C7T13YmoaGG2V4nc0K9Imr+AGHLNkLxJgY8M4TX/M8k8CpY
2mHYFn6rcU0f2FlqPexuznV8y5/v89G5bmAPAEJqtmPse9aHggeZBIlRgaKpvANv
M8tN9eaDHldkr5xbMQdX7pyR7tQ998lQZzLDvbjc/bg9zeEmGGu0KugwNglXsU+R
6sK6xjkVPLt8BknxXVgDjrl+rmhNZGIGftUAQFS0PCtifWCvNs1mFxqu3P5ScVcC
KYnlVt3i7Hae4dn/W4b3dmQNBwUtuN4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:50:07 2025 by rpki-client