Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7fbd4b8-17e1-3f82-a620-7927411f9605.roa
File: b7fbd4b8-17e1-3f82-a620-7927411f9605.roa (raw, json)
Hash identifier: mwI6gVFxs3CnVdOQlXizQQrlJJZYrWCdPYQiSXsW6/8=
Subject key identifier: 82:7C:6D:E9:8A:1E:5E:94:EC:22:B0:7F:A0:87:94:5C:21:F3:8D:C8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143AA4356DAB6A12ABED6930
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7fbd4b8-17e1-3f82-a620-7927411f9605.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 73.164.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:a4:35:6d:ab:6a:12:ab:ed:69:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=20bd964e-eeb2-4090-b94b-bc0b4d4ccf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:eb:e1:80:69:a0:96:0c:68:c5:9e:13:c9:
8c:a0:6d:5f:38:5f:bd:3a:8e:0d:dd:32:b2:53:87:
75:0b:33:55:f2:be:16:7e:d5:b1:a6:e4:ae:b5:4a:
78:a3:ab:af:b3:e5:40:0a:c3:e8:28:78:f5:a9:7b:
de:3d:34:2d:e1:1c:81:8b:7b:01:d7:60:83:b1:b9:
4c:d3:16:8c:eb:9d:67:26:dd:7a:ce:3d:b2:ce:05:
6b:a0:f0:ca:54:ee:df:82:f4:7e:0d:00:30:80:e6:
40:e0:29:a5:36:ab:6b:60:99:d2:0f:1a:a5:e2:b8:
e1:e2:84:71:d5:f2:cd:40:b0:90:23:4a:5f:77:5e:
73:15:9d:9a:e2:32:45:43:3e:d5:6e:e6:54:f8:16:
c3:af:02:d3:3a:4f:30:14:6f:02:df:c3:1e:98:0d:
8d:bb:b0:35:ef:63:ae:06:09:69:a4:85:71:b7:3a:
22:8a:96:03:31:1c:0e:11:e5:c2:c0:46:f5:f1:34:
60:b6:9c:14:04:6a:ae:7b:ab:91:4a:d1:2f:29:4c:
92:c9:70:e4:26:ee:1b:52:9e:17:44:0d:78:2d:30:
04:9a:59:a3:8e:8c:bc:46:c3:8b:7a:07:9f:60:97:
36:f4:17:ce:23:12:92:ce:e9:de:41:1b:36:0a:2d:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:6D:E9:8A:1E:5E:94:EC:22:B0:7F:A0:87:94:5C:21:F3:8D:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7fbd4b8-17e1-3f82-a620-7927411f9605.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.164.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:c3:21:22:4c:38:10:79:27:b3:d8:70:5f:2a:88:c9:13:71:
22:c8:b5:be:4b:cd:92:07:14:26:86:17:70:e3:c8:7e:e4:a7:
76:03:86:64:c4:88:9b:4e:06:61:9d:2c:59:b9:30:61:eb:17:
70:76:ef:2c:a4:f9:35:15:50:18:d6:e5:bb:9c:41:a3:93:9e:
c8:a2:15:09:99:f3:e2:49:41:9c:05:63:e4:cf:79:9b:6a:62:
35:ac:7d:f9:c1:e2:85:65:71:ab:6b:c8:1c:39:d6:2d:1d:45:
a6:7b:65:55:26:07:97:50:ef:9e:56:27:66:63:6d:31:b0:9c:
73:a4:de:8c:74:09:f3:d5:1a:38:18:24:34:72:b9:89:a0:b4:
37:e2:92:23:0c:a7:d9:87:fc:8f:3e:15:f2:18:04:27:ae:93:
5c:bd:1c:de:80:3e:a0:7e:ec:b1:bb:9d:c2:e5:96:4d:d9:de:
b7:ae:02:3b:b6:26:66:d7:b4:57:e4:6c:4f:f1:6b:f1:20:89:
77:ba:ae:e7:f3:eb:de:10:82:c6:03:51:35:86:46:5d:e6:83:
47:9e:ba:e8:87:30:0c:31:83:be:f7:88:4f:90:09:28:e1:14:
ab:18:cb:ef:0b:e7:71:64:9f:d6:22:02:30:75:a7:a2:03:7f:
86:00:39:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOqQ1batqEqvtaTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MjBiZDk2NGUtZWViMi00MDkwLWI5NGItYmMwYjRkNGNjZjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU7r4YBpoJYMaMWeE8mMoG1fOF+9Oo4N3TKy
U4d1CzNV8r4WftWxpuSutUp4o6uvs+VACsPoKHj1qXvePTQt4RyBi3sB12CDsblM
0xaM651nJt16zj2yzgVroPDKVO7fgvR+DQAwgOZA4CmlNqtrYJnSDxql4rjh4oRx
1fLNQLCQI0pfd15zFZ2a4jJFQz7VbuZU+BbDrwLTOk8wFG8C38MemA2Nu7A172Ou
BglppIVxtzoiipYDMRwOEeXCwEb18TRgtpwUBGque6uRStEvKUySyXDkJu4bUp4X
RA14LTAEmlmjjoy8RsOLegefYJc29BfOIxKSzuneQRs2Ci20EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJ8bemKHl6U7CKwf6CHlFwh843IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdmYmQ0YjgtMTdlMS0z
ZjgyLWE2MjAtNzkyNzQxMWY5NjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASaSYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3DISJMOBB5J7PYcF8qiMkTcSLItb5LzZIHFCaGF3DjyH7kp3YDhmTE
iJtOBmGdLFm5MGHrF3B27yyk+TUVUBjW5bucQaOTnsiiFQmZ8+JJQZwFY+TPeZtq
YjWsffnB4oVlcatryBw51i0dRaZ7ZVUmB5dQ755WJ2ZjbTGwnHOk3ox0CfPVGjgY
JDRyuYmgtDfikiMMp9mH/I8+FfIYBCeuk1y9HN6APqB+7LG7ncLllk3Z3reuAju2
JmbXtFfkbE/xa/EgiXe6rufz694QgsYDUTWGRl3mg0eeuuiHMAwxg773iE+QCSjh
FKsYy+8L53Fkn9YiAjB1p6IDf4YAObA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:22 2025 by rpki-client