Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af61c2af-0e61-338e-bf8f-82c0337b8234.roa
File: af61c2af-0e61-338e-bf8f-82c0337b8234.roa (raw, json)
Hash identifier: aUW4vdTl4YlLdEFUZLOsWO05QCQcsIwWKcnuqDAcKgg=
Subject key identifier: 11:CF:69:BB:EF:E3:41:42:DE:92:13:2A:F1:2C:2D:D5:93:E7:1D:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143E6376035CB4FA0B290980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af61c2af-0e61-338e-bf8f-82c0337b8234.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 73.234.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:63:76:03:5c:b4:fa:0b:29:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2a9e3e47-642e-44a7-b120-935c9a41de19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:ad:04:a8:c0:e3:aa:fe:4c:6f:a2:03:a9:
21:59:43:4b:49:d4:b8:01:1f:34:1f:58:9c:c7:42:
5e:58:6b:34:46:2a:10:96:6f:d1:05:9b:d5:e4:af:
ea:de:f6:0c:12:e0:a9:1e:cc:cf:ce:63:b7:c2:3c:
be:e0:6a:45:27:71:21:cb:ba:07:b1:64:97:8e:71:
c3:e3:91:be:2e:4b:4a:f3:33:9a:d4:46:17:dc:5a:
3b:f8:43:24:40:a6:73:06:e8:2e:4b:01:89:29:2f:
c6:f6:ca:10:88:d8:ff:0c:90:97:ae:4a:53:fe:0d:
99:3f:98:e8:3b:98:13:a5:51:03:39:96:fd:dd:21:
a6:52:1b:18:cc:6c:71:f3:b4:7d:4e:f3:af:83:f5:
78:25:99:08:d3:13:50:e7:a3:56:dd:3d:72:51:9e:
34:19:77:f3:58:5d:74:bf:9a:bb:d9:d4:b8:1f:11:
5f:0d:9b:b8:db:b3:d8:3f:3c:8f:b0:c9:0e:5b:78:
41:61:c4:0d:10:4a:91:af:e8:74:c5:56:05:37:6e:
71:ab:01:ea:49:98:bb:43:ab:df:3a:62:e7:a6:4a:
38:72:4b:9b:27:bd:24:b4:58:d6:a4:19:ee:1e:0e:
dc:80:e4:e9:f8:30:76:95:e4:61:29:9c:cf:5d:69:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:69:BB:EF:E3:41:42:DE:92:13:2A:F1:2C:2D:D5:93:E7:1D:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af61c2af-0e61-338e-bf8f-82c0337b8234.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.234.80.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:07:36:e7:9e:fd:02:fb:b4:ac:84:16:4f:d8:7c:e6:bc:dc:
ac:95:17:28:35:2d:19:02:bb:ab:6e:b3:5a:d1:bf:27:c5:c0:
4b:82:f8:f4:d5:52:04:f8:23:4a:ab:a0:87:ba:59:ad:85:90:
b9:a4:d6:34:b7:13:30:6b:c7:cd:46:41:f2:26:1c:a0:a4:d8:
32:f2:c1:94:d1:99:d0:72:00:b3:dd:6d:45:2f:0e:d9:95:66:
4a:fa:ef:32:19:e6:20:d8:28:98:4b:75:f4:35:22:3e:2e:4e:
4f:8e:32:31:13:08:67:fe:d3:8c:dd:d6:cc:e7:79:34:28:f7:
6d:e5:18:d6:ca:14:b0:71:12:c2:fe:81:30:c3:7d:58:a9:21:
0c:1e:9d:c9:6b:9f:da:71:18:58:e4:ae:8c:4c:8a:7a:60:ae:
0e:82:a6:50:d9:34:6b:c3:38:c8:23:d6:4b:24:13:9c:fc:e2:
35:0d:41:05:ab:2b:78:e5:55:89:b0:03:cd:14:f7:d9:66:ba:
f0:6f:fd:ea:04:9c:a3:6c:83:92:d1:b1:5f:50:50:52:89:8d:
ce:2a:bc:e8:87:b2:7e:e8:c8:91:95:2d:e8:e4:ef:ba:c7:0a:
d5:83:07:45:25:a8:48:35:7d:fe:fe:46:40:74:13:fb:95:32:
3d:13:20:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPmN2A1y0+gspCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MmE5ZTNlNDctNjQyZS00NGE3LWIxMjAtOTM1YzlhNDFkZTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIWtBKjA46r+TG+iA6khWUNLSdS4AR80H1ic
x0JeWGs0RioQlm/RBZvV5K/q3vYMEuCpHszPzmO3wjy+4GpFJ3Ehy7oHsWSXjnHD
45G+LktK8zOa1EYX3Fo7+EMkQKZzBuguSwGJKS/G9soQiNj/DJCXrkpT/g2ZP5jo
O5gTpVEDOZb93SGmUhsYzGxx87R9TvOvg/V4JZkI0xNQ56NW3T1yUZ40GXfzWF10
v5q72dS4HxFfDZu427PYPzyPsMkOW3hBYcQNEEqRr+h0xVYFN25xqwHqSZi7Q6vf
OmLnpko4ckubJ70ktFjWpBnuHg7cgOTp+DB2leRhKZzPXWnr4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHPabvv40FC3pITKvEsLdWT5x3jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY2MWMyYWYtMGU2MS0z
MzhlLWJmOGYtODJjMDMzN2I4MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSepQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMHNuee/QL7tKyEFk/YfOa83KyVFyg1LRkCu6tus1rRvyfFwEuC+PTV
UgT4I0qroIe6Wa2FkLmk1jS3EzBrx81GQfImHKCk2DLywZTRmdByALPdbUUvDtmV
Zkr67zIZ5iDYKJhLdfQ1Ij4uTk+OMjETCGf+04zd1szneTQo923lGNbKFLBxEsL+
gTDDfVipIQwenclrn9pxGFjkroxMinpgrg6CplDZNGvDOMgj1kskE5z84jUNQQWr
K3jlVYmwA80U99lmuvBv/eoEnKNsg5LRsV9QUFKJjc4qvOiHsn7oyJGVLejk77rH
CtWDB0UlqEg1ff7+RkB0E/uVMj0TIAo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:46 2025 by rpki-client