Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4d3e212-4fd4-31a3-b1e1-df9645c501a8.roa
File: a4d3e212-4fd4-31a3-b1e1-df9645c501a8.roa (raw, json)
Hash identifier: KgODJEY9cWr6a7CsWAomKaBc2UqE61c2eUgVcCjkSCk=
Subject key identifier: F3:30:A0:D8:AE:19:CB:10:4E:50:09:EC:11:B7:09:23:F8:17:0F:00
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B2637113D8BD888432B60E60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4d3e212-4fd4-31a3-b1e1-df9645c501a8.roa
Signing time: Tue 28 Jan 2025 17:41:08 +0000
ROA not before: Tue 28 Jan 2025 17:41:08 +0000
ROA not after: Mon 28 Apr 2025 16:41:08 +0000
asID: 33491
IP address blocks: 73.45.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b2:63:71:13:d8:bd:88:84:32:b6:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 17:41:08 2025 GMT
Not After : Apr 28 16:41:08 2025 GMT
Subject: CN=4e2d84a1-c697-47bb-8199-e652146e18f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:0e:be:b8:f8:55:7b:18:fd:76:dd:24:bf:
41:ca:e7:e2:ae:df:e2:ec:f8:ee:7a:8e:2c:2d:ff:
7a:ea:fb:a4:39:47:1b:2b:27:76:e5:3b:a4:1e:c4:
bf:a9:26:8f:ec:1a:83:56:a9:3b:18:17:11:d0:b6:
38:fb:4f:6b:d9:ba:49:90:f8:d5:92:80:bb:75:e1:
a9:d6:2c:c7:9f:36:a9:de:f6:a8:3f:37:6c:e8:4e:
af:fb:44:c9:ff:84:53:81:5c:47:79:3d:8d:61:0a:
62:60:43:77:49:97:fc:fc:1b:69:fa:fd:3c:2c:3a:
48:07:15:47:73:51:1c:e3:68:6c:f6:73:72:45:aa:
06:69:40:d3:32:d7:33:32:53:0b:39:2c:81:8b:3c:
1c:bc:24:e6:1c:3d:f6:7c:b1:46:5e:f5:50:ed:da:
32:e6:38:6b:a2:6d:9b:d4:1b:db:dc:b6:84:0a:2b:
74:46:dc:64:5b:0b:a6:8f:76:fb:ee:5f:c7:1b:dd:
ae:d4:5c:3e:ee:02:d4:53:ee:83:51:47:ba:88:e1:
f9:02:6b:86:0b:57:a7:5a:1a:f6:35:b9:5e:46:0c:
c7:02:e8:78:ca:18:4c:8c:b7:90:08:32:29:b9:4d:
24:ab:2a:66:a0:3d:c4:75:b6:37:62:4e:8b:58:f4:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:30:A0:D8:AE:19:CB:10:4E:50:09:EC:11:B7:09:23:F8:17:0F:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4d3e212-4fd4-31a3-b1e1-df9645c501a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.45.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:9b:51:92:8f:21:be:54:b2:b6:b3:06:2d:a9:f6:e0:80:8e:
67:63:95:a6:f5:8a:f9:a8:4c:65:ed:f7:e0:d6:18:e8:97:36:
18:42:10:e6:e9:5b:0d:cb:d3:4d:06:40:b9:41:93:19:29:62:
31:8d:43:7b:60:55:5a:6d:bb:8c:c9:e2:8e:19:5c:da:61:2e:
d6:26:42:64:20:d5:90:e6:19:7c:5c:7f:07:2d:40:69:ee:35:
4d:c0:b7:4b:51:0b:5b:3b:34:fd:f6:d3:24:9a:56:b8:b1:01:
a0:e6:24:14:ca:46:46:5b:35:0f:f1:cc:90:85:cc:25:94:6e:
43:32:67:3e:6d:b5:2a:4c:46:97:8f:2a:83:44:e4:83:41:d4:
e2:69:b6:fb:20:b1:e0:83:34:39:b7:95:96:d0:6b:4f:c3:3d:
9a:8f:80:c0:7b:ef:ed:a7:b5:ef:87:bc:07:df:44:a8:62:35:
a2:55:67:53:c9:f1:ce:32:df:11:bd:20:f2:28:94:28:bc:45:
0e:d9:b4:61:8f:01:0b:ef:47:42:0b:c6:4e:05:95:f1:d3:e0:
07:f2:98:dc:12:67:f4:98:4f:46:83:f7:13:c6:da:21:d6:1e:
92:95:3d:bf:e8:f3:e8:2f:9e:5d:b8:ef:e2:14:40:d3:de:d6:
43:01:a2:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyY3ET2L2IhDK2DmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyODE3NDEwOFoXDTI1MDQyODE2NDEwOFowLzEtMCsGA1UEAxMk
NGUyZDg0YTEtYzY5Ny00N2JiLTgxOTktZTY1MjE0NmUxOGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfoOvrj4VXsY/XbdJL9Byufirt/i7Pjueo4s
Lf966vukOUcbKyd25TukHsS/qSaP7BqDVqk7GBcR0LY4+09r2bpJkPjVkoC7deGp
1izHnzap3vaoPzds6E6v+0TJ/4RTgVxHeT2NYQpiYEN3SZf8/Btp+v08LDpIBxVH
c1Ec42hs9nNyRaoGaUDTMtczMlMLOSyBizwcvCTmHD32fLFGXvVQ7doy5jhrom2b
1Bvb3LaECit0RtxkWwumj3b77l/HG92u1Fw+7gLUU+6DUUe6iOH5AmuGC1enWhr2
NbleRgzHAuh4yhhMjLeQCDIpuU0kqypmoD3EdbY3Yk6LWPRkqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMwoNiuGcsQTlAJ7BG3CSP4Fw8AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTRkM2UyMTItNGZkNC0z
MWEzLWIxZTEtZGY5NjQ1YzUwMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSS38MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJObUZKPIb5UsrazBi2p9uCAjmdjlab1ivmoTGXt9+DWGOiXNhhCEObp
Ww3L000GQLlBkxkpYjGNQ3tgVVptu4zJ4o4ZXNphLtYmQmQg1ZDmGXxcfwctQGnu
NU3At0tRC1s7NP320ySaVrixAaDmJBTKRkZbNQ/xzJCFzCWUbkMyZz5ttSpMRpeP
KoNE5INB1OJptvsgseCDNDm3lZbQa0/DPZqPgMB77+2nte+HvAffRKhiNaJVZ1PJ
8c4y3xG9IPIolCi8RQ7ZtGGPAQvvR0ILxk4FlfHT4AfymNwSZ/SYT0aD9xPG2iHW
HpKVPb/o8+gvnl247+IUQNPe1kMBovM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:53:01 2025 by rpki-client