Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58217cef-1db1-3af6-9082-ffa1cf75f1eb.roa
File: 58217cef-1db1-3af6-9082-ffa1cf75f1eb.roa (raw, json)
Hash identifier: 6oXc5wZ3bpyBeCFfRaKbw9MoKj7bzemxNT9u28LJCU4=
Subject key identifier: E5:64:01:21:C3:99:38:48:20:3B:4A:51:8B:13:64:79:BC:6C:04:06
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E37FDC0A8EE9B21A2A280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58217cef-1db1-3af6-9082-ffa1cf75f1eb.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.186.74.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:37:fd:c0:a8:ee:9b:21:a2:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=24a1c97b-d97b-4342-8186-a62d1e2383e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6c:fc:4a:b7:ef:01:ce:cf:11:f8:2a:25:32:
99:f9:60:3b:a8:72:b5:08:48:4f:fb:c3:07:4b:c9:
48:f8:11:71:21:4c:bd:1e:00:66:b6:d1:47:da:53:
06:4b:19:fc:e5:cb:38:8b:17:d0:d5:47:1e:25:ba:
bc:89:91:b8:af:1b:e5:b1:53:b0:05:45:77:a0:cc:
75:f9:5f:d5:d4:53:1e:f6:02:d8:40:7e:db:ec:cd:
01:9c:bb:eb:7f:47:45:fc:34:52:b1:e1:3a:ff:ea:
1e:99:5a:89:19:ae:c3:21:cb:92:be:d7:db:d4:41:
06:1b:9f:99:93:e3:50:4f:17:2d:16:81:34:d3:98:
e5:2a:1d:88:72:f8:1b:37:1f:b8:9f:96:48:fc:fc:
3d:e3:be:73:46:ee:6a:60:b1:8c:83:16:20:8d:90:
99:c7:5c:e8:b5:0e:bc:d9:94:23:fd:b9:d8:f8:f7:
0a:1b:0f:3c:99:47:39:d6:c8:bb:77:6a:57:e4:47:
56:84:9e:f5:3a:ba:c4:5a:77:4e:60:5c:52:82:01:
2f:47:b2:5b:0e:55:f8:5e:bc:cd:00:7f:8d:f5:15:
b0:26:c5:d5:62:99:7f:be:a2:25:c0:b1:f8:10:fe:
a3:95:61:b1:6a:99:20:33:1e:33:22:37:38:a3:b0:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:64:01:21:C3:99:38:48:20:3B:4A:51:8B:13:64:79:BC:6C:04:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58217cef-1db1-3af6-9082-ffa1cf75f1eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.186.74.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:95:6c:62:b8:a8:8c:2c:2a:b3:c2:7c:76:b3:51:6d:99:b2:
29:c0:8c:8d:e0:74:68:72:02:59:16:3e:5b:ac:cd:51:0d:d3:
79:f8:0d:9d:72:9b:39:28:ed:1f:e0:ac:f5:29:a1:c6:56:dd:
d8:9b:9c:83:27:68:46:97:a3:49:db:87:dd:d7:a8:7b:0e:0e:
e6:48:b5:3a:f8:42:3f:9b:67:aa:f3:a2:d5:48:87:75:e5:f9:
d0:46:ef:6f:cd:68:65:64:2f:bd:73:93:da:e8:8c:20:c6:f3:
02:01:f2:68:e3:8a:8d:5b:06:f3:c4:70:9b:15:5d:a6:56:d5:
0f:f5:78:7b:07:02:56:37:a6:b4:06:03:ca:52:9b:b3:9c:42:
6c:11:39:2f:43:a8:7c:48:f0:99:d1:1f:2b:42:05:cd:23:47:
4b:b2:4d:33:4e:e2:d3:0d:3e:0c:61:6e:3c:2d:78:71:0a:33:
d4:78:9f:77:ac:e6:46:1d:98:9a:19:25:6a:cc:8a:6e:bb:f9:
dc:c1:e1:f6:7d:bb:4f:45:3a:d8:dc:e7:ee:f2:6d:46:b8:9c:
2b:fd:ac:1e:11:a6:76:de:2e:4c:6b:88:9b:41:37:a7:30:d6:
d5:57:9a:e2:db:da:64:d7:b7:87:63:0e:f1:0e:d2:38:98:9f:
bd:9c:f4:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPjf9wKjumyGiooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MjRhMWM5N2ItZDk3Yi00MzQyLTgxODYtYTYyZDFlMjM4M2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGz8SrfvAc7PEfgqJTKZ+WA7qHK1CEhP+8MH
S8lI+BFxIUy9HgBmttFH2lMGSxn85cs4ixfQ1UceJbq8iZG4rxvlsVOwBUV3oMx1
+V/V1FMe9gLYQH7b7M0BnLvrf0dF/DRSseE6/+oemVqJGa7DIcuSvtfb1EEGG5+Z
k+NQTxctFoE005jlKh2IcvgbNx+4n5ZI/Pw9475zRu5qYLGMgxYgjZCZx1zotQ68
2ZQj/bnY+PcKGw88mUc51si7d2pX5EdWhJ71OrrEWndOYFxSggEvR7JbDlX4XrzN
AH+N9RWwJsXVYpl/vqIlwLH4EP6jlWGxapkgMx4zIjc4o7CoaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOVkASHDmThIIDtKUYsTZHm8bAQGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTgyMTdjZWYtMWRiMS0z
YWY2LTkwODItZmZhMWNmNzVmMWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbpKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESVbGK4qIwsKrPCfHazUW2ZsinAjI3gdGhyAlkWPluszVEN03n4DZ1y
mzko7R/grPUpocZW3dibnIMnaEaXo0nbh93XqHsODuZItTr4Qj+bZ6rzotVIh3Xl
+dBG72/NaGVkL71zk9rojCDG8wIB8mjjio1bBvPEcJsVXaZW1Q/1eHsHAlY3prQG
A8pSm7OcQmwROS9DqHxI8JnRHytCBc0jR0uyTTNO4tMNPgxhbjwteHEKM9R4n3es
5kYdmJoZJWrMim67+dzB4fZ9u09FOtjc5+7ybUa4nCv9rB4RpnbeLkxriJtBN6cw
1tVXmuLb2mTXt4djDvEO0jiYn72c9GM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:14 2025 by rpki-client