Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a9e5fd6-d4fe-3988-a60f-4d55f0992818.roa
File: 5a9e5fd6-d4fe-3988-a60f-4d55f0992818.roa (raw, json)
Hash identifier: UOGSS3aXKeQQamY163pwuP5884ENUBPp+ZNEGdQ6vNs=
Subject key identifier: A6:B2:DD:71:28:64:A4:72:12:BE:EB:59:77:E0:0F:E6:70:81:20:6A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1468B8D26AA1A2E4D12A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a9e5fd6-d4fe-3988-a60f-4d55f0992818.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.70.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:68:b8:d2:6a:a1:a2:e4:d1:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6f6dae0d-3600-4b90-86e0-eee44860e7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:53:d1:de:38:f7:80:d6:a7:63:e5:6c:19:
df:d2:9b:78:a8:6a:07:d4:eb:bb:30:9c:b7:25:e6:
65:43:26:74:1f:64:26:10:43:51:e5:fb:27:3d:16:
aa:f3:35:fd:45:3b:7e:91:63:50:4a:d7:ec:34:02:
9b:aa:06:a2:62:4f:c0:0d:2b:ae:8b:4a:d3:38:ff:
13:8e:ea:60:4b:2c:9d:63:3e:6e:ea:c3:82:0b:cb:
2d:9b:f8:a1:9f:69:ae:ed:f5:47:c7:4a:1b:26:fe:
84:2c:d1:85:28:04:c0:79:f7:c6:50:ec:77:d6:1f:
e8:f7:7d:db:9b:2f:23:a1:dc:91:2e:47:d9:f8:a0:
8f:ba:76:35:12:56:e1:83:68:bf:0e:78:09:a4:02:
db:ae:93:41:c1:a5:bf:64:9d:d2:2e:58:63:e2:56:
30:db:9e:c3:0e:79:32:44:04:c7:f5:55:42:50:98:
52:83:a3:09:b0:af:f4:7b:ce:61:ce:91:90:80:f5:
e6:a2:ff:11:35:0b:25:db:c3:dd:11:44:e7:94:97:
80:f7:bc:14:b2:dd:d1:ca:d8:86:09:7b:bd:ed:0c:
af:56:fa:d9:56:11:1c:37:a4:62:cd:03:60:22:ad:
0b:d9:45:9f:d3:d7:45:f7:65:55:14:c4:1c:52:3d:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B2:DD:71:28:64:A4:72:12:BE:EB:59:77:E0:0F:E6:70:81:20:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a9e5fd6-d4fe-3988-a60f-4d55f0992818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.70.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:16:f2:74:9e:3e:04:40:68:24:5f:28:9c:be:8b:2b:e8:7f:
57:3d:7b:ea:27:9d:95:bb:33:f9:46:73:d3:3e:42:c8:51:19:
7e:20:c2:e9:c4:72:0d:be:4a:97:4c:a0:61:06:71:34:5d:be:
59:f4:a8:cd:8b:90:ca:cc:7b:33:6d:09:21:04:e7:2a:97:08:
b7:f1:53:21:d6:ff:53:4c:60:2c:1c:5d:c7:23:22:a8:5a:c1:
55:30:73:f8:1f:0f:1c:32:7c:7a:e7:f7:99:b1:86:c8:cf:4c:
a0:cf:4d:f8:7f:db:78:91:08:8b:e8:db:b1:11:b0:08:bd:59:
ed:4f:5c:7b:3c:ef:d7:af:03:bc:d5:55:01:06:26:d6:58:b7:
34:56:4a:24:07:a1:d4:e9:fd:f6:6c:bc:41:71:56:27:18:95:
cb:45:23:47:5d:b3:3d:66:df:09:89:c4:c9:22:97:98:3e:3f:
b2:f9:a9:bb:2c:f2:f0:b8:25:29:de:c1:90:f9:16:62:1e:c6:
30:6a:9c:e2:fc:3e:71:f7:31:b5:69:58:fd:0c:08:47:c1:30:
3b:b5:6c:e7:bf:32:af:ed:c2:c0:1b:b1:ce:2e:0c:6f:ce:a5:
40:14:f9:4e:06:6e:14:d9:5b:85:f8:33:16:30:52:b4:96:a1:
eb:5f:6e:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMFGi40mqhouTRKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NmY2ZGFlMGQtMzYwMC00YjkwLTg2ZTAtZWVlNDQ4NjBlN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUpT0d4494DWp2PlbBnf0pt4qGoH1Ou7MJy3
JeZlQyZ0H2QmEENR5fsnPRaq8zX9RTt+kWNQStfsNAKbqgaiYk/ADSuui0rTOP8T
jupgSyydYz5u6sOCC8stm/ihn2mu7fVHx0obJv6ELNGFKATAeffGUOx31h/o933b
my8jodyRLkfZ+KCPunY1Elbhg2i/DngJpALbrpNBwaW/ZJ3SLlhj4lYw257DDnky
RATH9VVCUJhSg6MJsK/0e85hzpGQgPXmov8RNQsl28PdEUTnlJeA97wUst3RytiG
CXu97QyvVvrZVhEcN6RizQNgIq0L2UWf09dF92VVFMQcUj3G2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKay3XEoZKRyEr7rWXfgD+ZwgSBqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWE5ZTVmZDYtZDRmZS0z
OTg4LWE2MGYtNGQ1NWYwOTkyODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIW8nSePgRAaCRfKJy+iyvof1c9e+onnZW7M/lGc9M+QshRGX4gwunE
cg2+SpdMoGEGcTRdvln0qM2LkMrMezNtCSEE5yqXCLfxUyHW/1NMYCwcXccjIqha
wVUwc/gfDxwyfHrn95mxhsjPTKDPTfh/23iRCIvo27ERsAi9We1PXHs879evA7zV
VQEGJtZYtzRWSiQHodTp/fZsvEFxVicYlctFI0ddsz1m3wmJxMkil5g+P7L5qbss
8vC4JSnewZD5FmIexjBqnOL8PnH3MbVpWP0MCEfBMDu1bOe/Mq/twsAbsc4uDG/O
pUAU+U4GbhTZW4X4MxYwUrSWoetfbh0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:46 2025 by rpki-client