Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/696e84b5-2321-3509-b34d-8c8be13b9ce6.roa
File: 696e84b5-2321-3509-b34d-8c8be13b9ce6.roa (raw, json)
Hash identifier: aOTf0Hyirf27hoyxMO6M2cfRzwCz5mgAfKHAK9MK2tM=
Subject key identifier: BF:CF:B3:32:F6:59:0F:CA:DD:4C:4F:E8:A2:87:65:D0:EB:78:7D:CE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11A6F617E82DD47E771F60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/696e84b5-2321-3509-b34d-8c8be13b9ce6.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.70.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:a6:f6:17:e8:2d:d4:7e:77:1f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=8acd1d99-a379-4213-ae69-e8962490ba5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:42:8a:db:08:de:26:4b:f3:fa:61:a5:0b:
65:b1:b3:03:84:9a:d1:ac:c3:83:58:28:0f:0a:a1:
f2:9b:3b:34:a6:5e:c2:4f:26:49:4c:0f:82:92:21:
4d:44:c7:0b:fc:51:50:05:6b:67:a2:dc:cd:71:1e:
f9:84:fa:28:8e:12:2e:d3:56:d8:02:4c:98:f2:00:
7c:af:56:19:55:91:9e:68:e4:85:73:8b:c5:b1:f3:
84:f9:f6:bb:00:1b:7f:a9:97:52:45:bd:11:27:ee:
1b:1c:14:ef:8e:41:69:88:50:a0:7e:86:11:ad:23:
f1:18:a5:be:6f:07:41:a6:12:24:96:07:c8:80:f2:
f5:65:f6:ea:df:e1:8e:f7:d1:fb:75:e2:9b:de:96:
d2:e2:b3:9d:1d:2c:43:1f:95:74:b5:ab:07:c7:d1:
7a:9a:85:0a:f4:f9:57:b4:69:92:80:13:65:87:a0:
7b:d8:1f:a5:ac:e9:a6:e7:a6:c9:e9:7a:34:67:83:
92:7c:94:44:2d:57:73:5e:bb:21:bf:7e:fc:ce:13:
a8:ed:49:ad:dc:85:76:da:71:06:66:c1:b8:6e:b0:
74:e4:8a:9e:ba:45:46:9b:43:a6:92:21:31:fc:30:
8d:50:22:6a:5c:ba:dc:6d:69:98:34:f1:8d:46:b9:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CF:B3:32:F6:59:0F:CA:DD:4C:4F:E8:A2:87:65:D0:EB:78:7D:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/696e84b5-2321-3509-b34d-8c8be13b9ce6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.70.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:77:f7:5c:37:64:9c:31:3d:7b:36:fa:f9:d6:56:3f:80:fc:
1a:07:cf:bc:d5:5c:a6:0d:e8:31:41:0f:2b:6c:76:f0:ae:d0:
63:6b:ac:58:a4:e3:be:b0:e3:98:cf:d6:d1:3f:10:28:25:31:
a3:29:29:63:9d:1d:e3:94:e5:4f:f3:29:08:43:c8:eb:2d:d7:
0d:35:c4:32:bd:4c:44:54:fe:92:e8:90:25:33:a0:51:d1:1e:
ac:5b:36:9f:e5:78:c9:39:0b:1c:de:cc:49:45:62:6c:04:e8:
59:8c:b8:56:47:96:d2:0c:52:2e:47:e3:6a:c9:62:af:ab:fe:
eb:c8:3b:ff:c8:3f:d9:d3:fc:de:63:c9:9f:07:57:9f:f5:48:
28:df:75:d0:76:0c:5f:77:26:12:1d:90:33:d1:af:87:8a:1f:
68:88:99:31:97:3c:a7:45:bb:ec:83:b4:d0:ea:6b:2b:75:84:
9b:70:15:db:7a:85:ef:50:7c:b8:0b:36:f6:d8:50:4d:40:4f:
ac:f4:99:ee:f5:58:24:e0:cb:9e:09:a0:11:fa:fb:45:85:e2:
38:6e:ae:20:01:9d:0f:a6:53:34:6a:f2:58:10:a9:fc:86:2c:
93:93:92:fc:cb:19:df:ce:54:43:18:4d:99:8d:00:c0:2a:60:
74:eb:5e:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEab2F+gt1H53H2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
OGFjZDFkOTktYTM3OS00MjEzLWFlNjktZTg5NjI0OTBiYTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxFCitsI3iZL8/phpQtlsbMDhJrRrMODWCgP
CqHymzs0pl7CTyZJTA+CkiFNRMcL/FFQBWtnotzNcR75hPoojhIu01bYAkyY8gB8
r1YZVZGeaOSFc4vFsfOE+fa7ABt/qZdSRb0RJ+4bHBTvjkFpiFCgfoYRrSPxGKW+
bwdBphIklgfIgPL1Zfbq3+GO99H7deKb3pbS4rOdHSxDH5V0tasHx9F6moUK9PlX
tGmSgBNlh6B72B+lrOmm56bJ6Xo0Z4OSfJRELVdzXrshv378zhOo7Umt3IV22nEG
ZsG4brB05IqeukVGm0OmkiEx/DCNUCJqXLrcbWmYNPGNRrndPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/PszL2WQ/K3UxP6KKHZdDreH3OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjk2ZTg0YjUtMjMyMS0z
NTA5LWIzNGQtOGM4YmUxM2I5Y2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUaCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFR391w3ZJwxPXs2+vnWVj+A/BoHz7zVXKYN6DFBDytsdvCu0GNrrFik
476w45jP1tE/ECglMaMpKWOdHeOU5U/zKQhDyOst1w01xDK9TERU/pLokCUzoFHR
HqxbNp/leMk5CxzezElFYmwE6FmMuFZHltIMUi5H42rJYq+r/uvIO//IP9nT/N5j
yZ8HV5/1SCjfddB2DF93JhIdkDPRr4eKH2iImTGXPKdFu+yDtNDqayt1hJtwFdt6
he9QfLgLNvbYUE1AT6z0me71WCTgy54JoBH6+0WF4jhuriABnQ+mUzRq8lgQqfyG
LJOTkvzLGd/OVEMYTZmNAMAqYHTrXjk=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:16 2025 by rpki-client