Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ce21289-0bfa-3862-b92c-aece00658f99.roa
File: 5ce21289-0bfa-3862-b92c-aece00658f99.roa (raw, json)
Hash identifier: bu7DRfdJ2+PuvG6QRGemNY5TDmiSVmOAR8zNhQO9vEY=
Subject key identifier: AF:AD:99:33:07:71:32:0D:16:5D:B4:16:66:29:20:99:47:D1:66:BD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13E011F59F28916B476A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ce21289-0bfa-3862-b92c-aece00658f99.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.170.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:e0:11:f5:9f:28:91:6b:47:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=85905cad-681a-4bfa-97c7-e99025bca55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:e0:3f:79:24:97:48:8c:36:6b:14:93:d1:
e1:74:63:1d:03:a7:0e:c3:6d:7e:fb:c3:59:4f:eb:
ad:f1:c9:4c:b3:c8:02:ef:14:ea:60:e5:72:52:ac:
03:a1:ab:78:b4:63:13:ac:1c:4d:82:ab:f0:93:98:
2a:b5:87:4d:e8:f7:22:00:01:f5:fd:83:81:3d:99:
a6:ca:a8:d6:7d:bb:76:16:9d:ca:7f:a8:47:6a:74:
08:cd:ac:7d:9c:75:86:0f:5c:39:e9:33:b5:1d:78:
29:da:bd:7c:28:d4:41:12:1c:ea:50:43:aa:1b:37:
0b:ee:ea:26:de:74:c1:a0:ee:32:d0:eb:ea:a1:e5:
45:38:1c:d8:a1:40:64:21:2b:5b:a7:85:dc:63:44:
1f:5a:8a:58:24:cc:21:06:6c:52:2a:dd:a8:26:94:
d2:85:ed:18:ac:de:70:03:69:29:ed:4e:b0:a4:2f:
ad:02:ad:4a:94:e6:ed:de:84:78:9c:9c:74:d1:d4:
da:c6:3b:37:a6:ab:4b:f6:b1:58:f7:c8:cf:67:4c:
de:4c:08:e0:d5:79:08:c1:73:60:6a:37:56:51:4e:
93:ef:79:ba:b4:ec:31:59:3f:e3:7e:15:20:f5:dd:
4c:50:22:bd:65:87:ec:ac:c8:8d:6f:93:f0:52:48:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AD:99:33:07:71:32:0D:16:5D:B4:16:66:29:20:99:47:D1:66:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ce21289-0bfa-3862-b92c-aece00658f99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.170.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:f8:79:2c:95:af:0c:13:99:55:d1:72:e9:ba:b7:5d:37:37:
ca:9b:ad:e8:9d:5f:1d:a1:79:4c:ec:d9:13:0c:e8:cd:b9:cc:
80:a6:f4:55:33:83:7f:de:e3:1d:3c:2b:ad:3c:b1:5e:af:1c:
01:d0:23:d4:13:62:07:eb:6e:7f:5e:d8:b2:ac:5b:32:4d:b7:
43:cc:82:19:78:22:df:18:c4:db:db:d2:33:bb:c8:41:49:e0:
96:e5:b4:b4:29:89:72:e0:33:05:60:d2:64:91:92:52:07:58:
a5:0f:0c:cc:15:27:7c:1f:20:0e:d8:99:9e:c3:62:d4:20:02:
6a:83:39:69:56:5f:e8:68:50:28:d6:ae:92:4d:5b:83:1a:2d:
7f:b6:76:1e:65:99:7f:a0:19:f5:e8:00:30:0d:57:ae:30:d1:
3f:07:26:2e:98:38:27:7b:f1:29:f9:e8:c4:9c:25:87:60:c7:
b6:0c:18:b5:cb:8d:a1:92:1e:9d:14:79:64:b0:aa:f1:a3:1b:
55:36:12:bd:a3:53:ae:a4:db:b5:af:e1:31:05:75:be:4c:c3:
10:8f:54:a6:69:ea:8e:61:aa:af:70:39:98:83:ff:86:f6:a7:
b2:7d:ae:87:97:bd:87:d4:1d:9b:06:d4:d4:64:05:3a:f1:7d:
96:df:05:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhME+AR9Z8okWtHaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ODU5MDVjYWQtNjgxYS00YmZhLTk3YzctZTk5MDI1YmNhNTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+PgP3kkl0iMNmsUk9HhdGMdA6cOw21++8NZ
T+ut8clMs8gC7xTqYOVyUqwDoat4tGMTrBxNgqvwk5gqtYdN6PciAAH1/YOBPZmm
yqjWfbt2Fp3Kf6hHanQIzax9nHWGD1w56TO1HXgp2r18KNRBEhzqUEOqGzcL7uom
3nTBoO4y0OvqoeVFOBzYoUBkIStbp4XcY0QfWopYJMwhBmxSKt2oJpTShe0YrN5w
A2kp7U6wpC+tAq1KlObt3oR4nJx00dTaxjs3pqtL9rFY98jPZ0zeTAjg1XkIwXNg
ajdWUU6T73m6tOwxWT/jfhUg9d1MUCK9ZYfsrMiNb5PwUki7lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+tmTMHcTINFl20FmYpIJlH0Wa9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWNlMjEyODktMGJmYS0z
ODYyLWI5MmMtYWVjZTAwNjU4Zjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaqCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABn4eSyVrwwTmVXRcum6t103N8qbreidXx2heUzs2RMM6M25zICm9FUz
g3/e4x08K608sV6vHAHQI9QTYgfrbn9e2LKsWzJNt0PMghl4It8YxNvb0jO7yEFJ
4JbltLQpiXLgMwVg0mSRklIHWKUPDMwVJ3wfIA7YmZ7DYtQgAmqDOWlWX+hoUCjW
rpJNW4MaLX+2dh5lmX+gGfXoADANV64w0T8HJi6YOCd78Sn56MScJYdgx7YMGLXL
jaGSHp0UeWSwqvGjG1U2Er2jU66k27Wv4TEFdb5MwxCPVKZp6o5hqq9wOZiD/4b2
p7J9roeXvYfUHZsG1NRkBTrxfZbfBdQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:29:48 2025 by rpki-client