Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/538ccce8-42b3-3b75-87cd-b512491b431e.roa
File: 538ccce8-42b3-3b75-87cd-b512491b431e.roa (raw, json)
Hash identifier: OgTBIC89cp9KaoJzcDJVymIb+SZ91mGVLdDpkoqAFGk=
Subject key identifier: D4:71:8E:7F:7C:76:F3:76:A2:03:6F:E6:F9:BF:44:4C:16:50:DE:DD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C111B007E1EB37B6E6BE780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/538ccce8-42b3-3b75-87cd-b512491b431e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.45.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:1b:00:7e:1e:b3:7b:6e:6b:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1f0075f7-ea86-4932-a33e-f534cd76ee18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:87:83:00:8a:32:42:aa:d5:1c:51:c4:a1:
4c:2f:e3:80:85:95:40:8c:e9:6a:38:80:26:d1:e9:
72:0b:3d:55:f4:ef:be:65:f8:35:e1:c4:68:20:03:
81:90:66:95:87:4a:ab:88:ae:ae:70:e0:a2:14:67:
73:2d:7c:59:89:25:a0:7e:d1:a5:d8:2b:16:1c:8d:
a3:82:d8:35:da:08:23:76:94:88:da:97:fa:55:8e:
d4:a9:e4:a1:83:1a:ff:eb:0c:51:4c:2a:55:9a:84:
bf:f7:b3:2f:50:11:62:ae:48:0f:cf:db:59:91:b5:
b9:77:15:d2:c6:89:f6:77:2b:8f:00:6a:63:ef:5f:
f9:65:e2:59:23:26:32:a3:c3:34:9f:a5:e4:0b:46:
3e:e4:38:ff:1d:f0:b0:bc:da:89:58:a9:79:69:b4:
8c:c5:d9:97:1d:47:c0:94:ab:51:f7:3f:f4:c9:ea:
37:52:ae:12:49:cd:87:d7:99:3f:43:d7:25:a7:22:
d1:8f:98:10:f7:72:e4:bd:cd:14:2b:78:44:40:99:
9d:dc:e9:2b:32:09:f1:be:9a:fd:a0:22:b2:89:e4:
b5:58:61:01:90:af:5a:55:c2:05:9f:9a:43:bc:70:
35:0a:0c:de:9b:15:ff:31:b0:6b:e8:70:76:c2:b1:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:71:8E:7F:7C:76:F3:76:A2:03:6F:E6:F9:BF:44:4C:16:50:DE:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/538ccce8-42b3-3b75-87cd-b512491b431e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.45.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:59:f9:e5:7d:94:d5:45:72:e4:38:43:49:38:c6:7c:1a:6e:
38:ae:38:72:39:cb:81:9f:97:05:04:23:8e:8e:6b:cd:34:78:
7b:57:b6:29:db:57:90:7d:23:da:f9:95:2b:0d:82:4c:5b:20:
e8:e8:c5:7e:b5:70:8e:c8:d7:8d:79:b9:19:d2:73:9a:e7:8b:
b0:95:ae:3c:39:e6:98:5e:f0:38:16:3c:fe:e0:22:ab:87:03:
8b:0e:fb:bd:b6:3b:89:69:48:86:66:b5:4c:fd:a6:29:21:3b:
fc:3f:64:29:14:be:5b:f1:f7:83:03:cf:fb:3f:ff:ae:9a:86:
d5:0e:c2:25:a3:65:95:ce:f6:64:df:fd:98:d4:40:e3:38:eb:
06:54:c0:22:11:e1:0c:48:00:56:75:53:22:f5:83:f4:ac:38:
e6:29:cd:2b:97:9a:65:ca:cb:1b:ed:a2:00:59:70:c2:7d:f9:
0f:37:ee:eb:8b:7b:5a:0a:4b:61:3a:1e:bf:df:cc:24:cb:fa:
81:27:71:c9:54:76:45:32:ae:27:9e:74:5c:43:4c:22:96:ad:
57:03:9b:1b:d1:e8:57:af:a1:2b:4f:da:8d:be:29:5a:03:42:
0a:4d:56:01:21:7a:92:76:30:ef:85:8f:7d:82:0d:d9:de:07:
76:b0:c3:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMERsAfh6ze25r54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MWYwMDc1ZjctZWE4Ni00OTMyLWEzM2UtZjUzNGNkNzZlZTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjumHgwCKMkKq1RxRxKFML+OAhZVAjOlqOIAm
0elyCz1V9O++Zfg14cRoIAOBkGaVh0qriK6ucOCiFGdzLXxZiSWgftGl2CsWHI2j
gtg12ggjdpSI2pf6VY7UqeShgxr/6wxRTCpVmoS/97MvUBFirkgPz9tZkbW5dxXS
xon2dyuPAGpj71/5ZeJZIyYyo8M0n6XkC0Y+5Dj/HfCwvNqJWKl5abSMxdmXHUfA
lKtR9z/0yeo3Uq4SSc2H15k/Q9clpyLRj5gQ93Lkvc0UK3hEQJmd3OkrMgnxvpr9
oCKyieS1WGEBkK9aVcIFn5pDvHA1CgzemxX/MbBr6HB2wrF91wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRxjn98dvN2ogNv5vm/REwWUN7dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTM4Y2NjZTgtNDJiMy0z
Yjc1LTg3Y2QtYjUxMjQ5MWI0MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASS2JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJZ+eV9lNVFcuQ4Q0k4xnwabjiuOHI5y4GflwUEI46Oa800eHtXtinb
V5B9I9r5lSsNgkxbIOjoxX61cI7I1415uRnSc5rni7CVrjw55phe8DgWPP7gIquH
A4sO+722O4lpSIZmtUz9pikhO/w/ZCkUvlvx94MDz/s//66ahtUOwiWjZZXO9mTf
/ZjUQOM46wZUwCIR4QxIAFZ1UyL1g/SsOOYpzSuXmmXKyxvtogBZcMJ9+Q837uuL
e1oKS2E6Hr/fzCTL+oEncclUdkUyrieedFxDTCKWrVcDmxvR6FevoStP2o2+KVoD
QgpNVgEhepJ2MO+Fj32CDdneB3awww8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:52:42 2025 by rpki-client