Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a9dddea-3aee-3577-a67c-9137474055c2.roa
File: 9a9dddea-3aee-3577-a67c-9137474055c2.roa (raw, json)
Hash identifier: x/Fi3miHZC3K+RiFm43iyTUS/AboLbXTqALf9abbRvg=
Subject key identifier: 2A:7B:27:49:58:AA:7E:EE:34:66:8C:41:74:8E:03:95:74:80:60:F1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1130280D5FD590402F98A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a9dddea-3aee-3577-a67c-9137474055c2.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.8.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:30:28:0d:5f:d5:90:40:2f:98:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b994bfa9-c8f4-44c0-a345-a59465c1b653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:27:26:10:ca:a9:00:26:62:a9:44:95:bb:
41:cb:07:87:c1:c7:c0:82:04:44:5a:b7:fd:9e:ab:
d5:79:51:25:d8:c9:34:2a:dd:10:79:05:4e:6d:57:
2e:00:46:c0:98:2b:0a:e9:06:b0:c3:f2:fd:97:a1:
0f:53:ac:fc:50:7b:63:04:ec:d7:ad:f4:28:19:34:
72:e3:8b:1c:a3:d6:07:13:32:fd:04:a5:d2:fa:3a:
09:b7:1d:06:b3:ef:0a:00:9b:84:9a:ac:96:bc:33:
0a:6b:08:39:cc:df:36:8f:40:21:33:01:b2:63:83:
77:64:4d:91:9d:92:6e:6b:86:73:ea:75:27:a4:8b:
68:69:93:6c:ca:53:f7:88:92:48:fd:8b:4c:a0:34:
d2:ab:9c:f1:de:3f:0c:ca:bc:3f:42:b5:b9:65:29:
38:e1:e2:3e:29:32:92:c8:e6:2f:a9:84:bd:69:81:
5f:6f:8e:0d:20:42:b3:eb:e3:ed:05:30:fa:9e:c1:
ec:8e:66:2f:99:75:1d:87:54:17:d5:d2:9e:43:11:
42:e5:85:34:9c:98:9a:bc:ec:e7:9a:01:d2:a9:d5:
3f:13:4a:c7:b4:60:fe:7d:ac:72:34:60:d6:c2:c3:
da:15:05:24:b4:a6:02:a6:9d:66:53:40:54:07:a0:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7B:27:49:58:AA:7E:EE:34:66:8C:41:74:8E:03:95:74:80:60:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a9dddea-3aee-3577-a67c-9137474055c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.8.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:4b:26:6d:11:b6:8d:61:8c:86:5b:0c:ec:7c:41:7e:b7:0f:
1f:ab:69:c2:5e:4d:98:c3:76:53:77:bc:00:ac:03:2a:f7:21:
6c:58:83:96:ea:49:e2:ef:b9:c8:88:99:b8:4b:71:dc:c5:c5:
05:db:f4:87:a7:f2:f6:72:8c:1c:30:a0:95:3a:e8:0f:68:b9:
97:65:53:70:fd:90:fe:1e:de:93:82:be:4e:a1:20:e1:b1:83:
21:bc:ff:ed:74:2d:cb:6b:71:89:aa:cf:13:21:70:aa:a0:b1:
e9:d8:d3:ad:64:ab:41:8b:39:d2:cb:85:3b:79:d2:87:75:53:
f4:ad:6f:50:20:ac:fb:dd:d1:c5:b2:99:cd:97:f8:3a:e8:b2:
4f:3f:db:62:20:4c:e9:54:57:8e:e0:74:11:13:c6:33:09:58:
bb:9b:73:af:ab:bc:bf:75:0c:69:86:a4:15:44:7f:b5:4e:57:
52:d4:9e:42:c2:cb:5a:d9:d3:f3:29:4d:8f:09:d4:98:f6:00:
c7:b0:65:64:b1:fe:00:42:1d:b6:cd:1e:d2:5d:cf:f7:4d:13:
d1:fc:95:f6:18:81:be:03:df:db:29:30:2d:6f:b3:ce:3d:4f:
6a:d2:92:e6:d1:0c:56:eb:ae:84:a0:db:17:21:c6:f7:41:d2:
47:8a:02:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMETAoDV/VkEAvmKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
Yjk5NGJmYTktYzhmNC00NGMwLWEzNDUtYTU5NDY1YzFiNjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXYnJhDKqQAmYqlElbtByweHwcfAggREWrf9
nqvVeVEl2Mk0Kt0QeQVObVcuAEbAmCsK6Qaww/L9l6EPU6z8UHtjBOzXrfQoGTRy
44sco9YHEzL9BKXS+joJtx0Gs+8KAJuEmqyWvDMKawg5zN82j0AhMwGyY4N3ZE2R
nZJua4Zz6nUnpItoaZNsylP3iJJI/YtMoDTSq5zx3j8Myrw/QrW5ZSk44eI+KTKS
yOYvqYS9aYFfb44NIEKz6+PtBTD6nsHsjmYvmXUdh1QX1dKeQxFC5YU0nJiavOzn
mgHSqdU/E0rHtGD+faxyNGDWwsPaFQUktKYCpp1mU0BUB6D96QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCp7J0lYqn7uNGaMQXSOA5V0gGDxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWE5ZGRkZWEtM2FlZS0z
NTc3LWE2N2MtOTEzNzQ3NDA1NWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQgmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChLJm0Rto1hjIZbDOx8QX63Dx+racJeTZjDdlN3vACsAyr3IWxYg5bq
SeLvuciImbhLcdzFxQXb9Ien8vZyjBwwoJU66A9ouZdlU3D9kP4e3pOCvk6hIOGx
gyG8/+10LctrcYmqzxMhcKqgsenY061kq0GLOdLLhTt50od1U/Stb1AgrPvd0cWy
mc2X+Drosk8/22IgTOlUV47gdBETxjMJWLubc6+rvL91DGmGpBVEf7VOV1LUnkLC
y1rZ0/MpTY8J1Jj2AMewZWSx/gBCHbbNHtJdz/dNE9H8lfYYgb4D39spMC1vs849
T2rSkubRDFbrroSg2xchxvdB0keKAko=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:42 2025 by rpki-client