Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8df3f3a2-cda1-3deb-92da-e2e320b5c0eb.roa
File: 8df3f3a2-cda1-3deb-92da-e2e320b5c0eb.roa (raw, json)
Hash identifier: HeyVpc4R7OVofcTb/7LTpGp1NJdfB9Ed+g4zYCCtkho=
Subject key identifier: 65:44:A1:78:FB:65:B1:2E:64:FF:E4:2E:9C:99:A3:D2:7C:51:41:D5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D526EC17F2E599C8D9A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8df3f3a2-cda1-3deb-92da-e2e320b5c0eb.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 73.96.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:52:6e:c1:7f:2e:59:9c:8d:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2733fa9c-550c-4b75-a6aa-60983cb6bc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:67:17:e2:a1:6e:28:42:ff:3a:81:f6:5f:7f:
a9:c3:21:c0:3e:41:63:b2:ee:1c:8b:01:d6:38:ac:
6a:f4:b8:0e:63:a6:0f:ec:9f:a1:13:74:cc:a3:03:
4c:4a:b8:a5:76:4b:62:b4:31:71:38:2f:62:34:40:
ee:d2:b0:5d:90:27:4f:72:cb:7e:e8:89:b4:8c:14:
c3:85:6e:5b:81:20:e0:fe:a3:a1:99:00:f3:84:07:
18:d9:41:6b:69:ba:a2:da:cb:32:ae:ae:68:ec:cc:
5c:a3:c4:48:42:11:76:e6:d1:94:1f:82:6e:07:2c:
82:d5:d3:28:51:d6:48:c9:14:a9:aa:9c:aa:81:5f:
bc:f3:5a:97:14:a1:28:06:a4:b8:49:02:83:7d:3e:
3c:74:11:c1:90:9e:34:0b:43:06:10:91:c3:43:46:
eb:0a:e7:fb:90:c7:37:00:af:20:ab:4b:9e:42:ae:
36:7b:d2:c7:a5:41:37:6f:37:0c:25:da:b8:8c:37:
01:e3:89:1e:73:c3:17:8a:73:9c:dc:3f:a0:92:65:
b6:31:1c:b5:6e:a4:7e:c7:1f:6a:21:b5:fd:00:e1:
b5:d3:22:9d:fb:a1:11:a4:45:8f:7d:ec:26:52:73:
ca:fe:6d:81:f7:88:0d:3d:08:50:29:d0:97:f3:d4:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:A1:78:FB:65:B1:2E:64:FF:E4:2E:9C:99:A3:D2:7C:51:41:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8df3f3a2-cda1-3deb-92da-e2e320b5c0eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.96.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:97:5e:6a:37:68:b2:d3:52:b4:a0:d4:1b:48:41:be:93:e2:
ba:b8:f2:8c:31:f5:2f:3e:7d:e0:e7:7b:8b:ce:ce:86:3b:55:
ec:45:36:9f:3a:bf:1e:86:f0:2c:ad:e1:17:ef:a7:6c:db:0d:
e4:9e:4f:00:1f:08:71:ac:6f:12:73:79:bf:9d:57:0b:04:89:
2d:bf:0e:22:ed:8c:7a:98:b6:98:a9:65:7a:ec:b0:70:c0:24:
67:19:75:e6:60:46:c0:b5:df:d7:51:e3:d4:de:e0:f8:a6:e0:
3b:27:93:6a:81:f6:19:c8:a6:23:1b:37:96:50:d0:05:92:76:
f8:ba:b1:84:ee:b9:0a:79:90:cb:7e:d1:03:c6:61:30:83:43:
eb:68:c7:02:31:bd:07:59:ea:d9:e1:8c:5e:1a:cd:92:b8:10:
f5:ae:27:45:9a:4b:5a:b4:1f:4d:bd:61:6a:9b:3c:ad:e5:93:
7e:79:6c:1c:57:12:12:ce:35:3f:fe:b4:5b:54:1a:9d:d0:fa:
ba:59:cd:83:d6:1b:c6:0b:b5:1d:91:75:38:bb:61:11:a4:59:
fc:c9:d3:6e:d0:d5:20:29:ac:cc:70:06:0f:c9:d6:3e:d8:eb:
0e:ac:14:88:84:b9:4d:e3:cb:31:96:2b:01:2d:52:3a:d1:16:
96:be:85:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPVJuwX8uWZyNmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MjczM2ZhOWMtNTUwYy00Yjc1LWE2YWEtNjA5ODNjYjZiYzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWcX4qFuKEL/OoH2X3+pwyHAPkFjsu4ciwHW
OKxq9LgOY6YP7J+hE3TMowNMSrildktitDFxOC9iNEDu0rBdkCdPcst+6Im0jBTD
hW5bgSDg/qOhmQDzhAcY2UFrabqi2ssyrq5o7Mxco8RIQhF25tGUH4JuByyC1dMo
UdZIyRSpqpyqgV+881qXFKEoBqS4SQKDfT48dBHBkJ40C0MGEJHDQ0brCuf7kMc3
AK8gq0ueQq42e9LHpUE3bzcMJdq4jDcB44kec8MXinOc3D+gkmW2MRy1bqR+xx9q
IbX9AOG10yKd+6ERpEWPfewmUnPK/m2B94gNPQhQKdCX89RfGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVEoXj7ZbEuZP/kLpyZo9J8UUHVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRmM2YzYTItY2RhMS0z
ZGViLTkyZGEtZTJlMzIwYjVjMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASWCoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKXXmo3aLLTUrSg1BtIQb6T4rq48owx9S8+feDne4vOzoY7VexFNp86
vx6G8Cyt4Rfvp2zbDeSeTwAfCHGsbxJzeb+dVwsEiS2/DiLtjHqYtpipZXrssHDA
JGcZdeZgRsC139dR49Te4Pim4Dsnk2qB9hnIpiMbN5ZQ0AWSdvi6sYTuuQp5kMt+
0QPGYTCDQ+toxwIxvQdZ6tnhjF4azZK4EPWuJ0WaS1q0H029YWqbPK3lk355bBxX
EhLONT/+tFtUGp3Q+rpZzYPWG8YLtR2RdTi7YRGkWfzJ027Q1SAprMxwBg/J1j7Y
6w6sFIiEuU3jyzGWKwEtUjrRFpa+hUU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:47 2025 by rpki-client