Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/974fbf5e-3151-3046-a748-05d04224b1bc.roa
File: 974fbf5e-3151-3046-a748-05d04224b1bc.roa (raw, json)
Hash identifier: qpVrra+7afY+pJ7xbVOQ5In2N0HVQxGn5yTJ+DWEwwo=
Subject key identifier: 9E:59:B2:B5:DF:5F:F7:44:C2:B6:75:27:93:58:F8:FC:4E:78:77:C2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11AA6794AEF07DF6DE9F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/974fbf5e-3151-3046-a748-05d04224b1bc.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.71.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:aa:67:94:ae:f0:7d:f6:de:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=48078d84-1104-4165-b2fa-820c43249e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d3:1f:30:b5:f0:cc:30:28:c2:30:8c:77:70:
01:fd:61:67:d9:ed:f5:f5:4c:ca:9b:98:d0:49:d0:
09:63:08:9a:4f:3e:91:2c:70:56:c3:82:13:a0:c8:
0e:84:7a:2e:cc:60:4e:7b:51:66:5a:7e:e5:91:e1:
69:5b:6e:de:d8:f3:62:a5:99:d1:e8:52:0a:71:88:
60:6c:cc:a5:b5:87:8b:83:8b:09:a4:62:95:59:55:
38:85:c6:d2:cd:77:8c:b3:37:f6:fc:e5:9d:4e:5d:
ca:8d:2d:58:bb:de:24:d9:af:f3:ac:ef:a7:a8:f0:
bd:d6:16:33:75:24:31:54:1a:b4:d8:e5:6b:f8:3e:
18:0f:22:1e:77:54:15:d6:72:2d:b2:60:df:4c:38:
e5:32:f2:97:89:d0:cb:f7:f1:cb:f6:26:bb:bd:4c:
17:3f:9e:99:42:e8:fe:57:4c:03:1d:d3:7e:e5:40:
de:09:29:89:63:73:ad:db:3a:0d:b5:a3:cf:71:04:
4c:83:ed:d0:be:61:2d:f6:8a:d9:2d:45:af:07:fc:
72:d4:fe:79:ca:97:c0:70:70:84:70:41:c1:51:60:
73:b8:a3:59:dd:62:f9:f3:65:1a:dd:c2:e1:5a:72:
6b:10:0f:a4:6b:f8:af:e6:85:37:b8:c4:e6:9d:53:
43:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:59:B2:B5:DF:5F:F7:44:C2:B6:75:27:93:58:F8:FC:4E:78:77:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/974fbf5e-3151-3046-a748-05d04224b1bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.71.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:cf:57:fa:1f:55:57:5f:70:72:ac:8b:7e:ba:84:c3:d0:aa:
f3:55:ac:77:2d:8b:bf:e9:f1:43:69:3d:0f:2d:45:36:66:af:
22:c9:62:69:6b:e1:ca:ad:f3:03:c5:e5:61:54:f2:8c:c8:b1:
44:ac:f3:05:a1:ff:d5:17:96:2c:00:91:7e:5c:4d:b0:01:5a:
dd:09:bb:9d:a7:92:16:c1:6c:53:be:50:d3:de:b4:47:31:57:
ea:b9:aa:e1:02:c2:ef:e0:24:d6:cf:98:09:d7:45:cf:46:c7:
20:ad:5c:9c:d3:9c:7f:9f:ce:d8:e7:85:5c:cf:0b:0e:4e:7c:
66:7b:b5:fd:78:04:7c:30:f0:5e:b3:58:8f:b4:6f:c0:17:1f:
e6:06:76:00:b1:b1:7d:ab:bc:e8:13:2e:38:99:60:e5:6b:16:
e5:c4:ff:fa:3f:9c:05:26:dc:c5:6a:bf:a5:e9:6f:4b:5c:ef:
57:fd:cd:76:e6:1e:fe:78:86:52:9f:26:bf:29:94:b9:19:0a:
bf:ca:4d:16:67:d1:24:2f:60:91:8f:fa:3f:38:63:30:4d:17:
ca:80:3f:6a:80:eb:5c:b5:01:85:59:fb:5b:e5:3f:a4:eb:6f:
04:e2:67:82:6a:6c:46:ce:98:79:3a:3a:b1:3f:54:a9:96:be:
e0:2f:6c:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEapnlK7wffben4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NDgwNzhkODQtMTEwNC00MTY1LWIyZmEtODIwYzQzMjQ5ZTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdMfMLXwzDAowjCMd3AB/WFn2e319UzKm5jQ
SdAJYwiaTz6RLHBWw4IToMgOhHouzGBOe1FmWn7lkeFpW27e2PNipZnR6FIKcYhg
bMyltYeLg4sJpGKVWVU4hcbSzXeMszf2/OWdTl3KjS1Yu94k2a/zrO+nqPC91hYz
dSQxVBq02OVr+D4YDyIed1QV1nItsmDfTDjlMvKXidDL9/HL9ia7vUwXP56ZQuj+
V0wDHdN+5UDeCSmJY3Ot2zoNtaPPcQRMg+3QvmEt9orZLUWvB/xy1P55ypfAcHCE
cEHBUWBzuKNZ3WL582Ua3cLhWnJrEA+ka/iv5oU3uMTmnVNDQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ5ZsrXfX/dEwrZ1J5NY+PxOeHfCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTc0ZmJmNWUtMzE1MS0z
MDQ2LWE3NDgtMDVkMDQyMjRiMWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUeYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/PV/ofVVdfcHKsi366hMPQqvNVrHcti7/p8UNpPQ8tRTZmryLJYmlr
4cqt8wPF5WFU8ozIsUSs8wWh/9UXliwAkX5cTbABWt0Ju52nkhbBbFO+UNPetEcx
V+q5quECwu/gJNbPmAnXRc9GxyCtXJzTnH+fztjnhVzPCw5OfGZ7tf14BHww8F6z
WI+0b8AXH+YGdgCxsX2rvOgTLjiZYOVrFuXE//o/nAUm3MVqv6Xpb0tc71f9zXbm
Hv54hlKfJr8plLkZCr/KTRZn0SQvYJGP+j84YzBNF8qAP2qA61y1AYVZ+1vlP6Tr
bwTiZ4JqbEbOmHk6OrE/VKmWvuAvbKg=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:29:24 2025 by rpki-client