Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be8f1d5c-2f2e-3ca8-895e-da19d1f85f4d.roa
File: be8f1d5c-2f2e-3ca8-895e-da19d1f85f4d.roa (raw, json)
Hash identifier: cxnoplkIljLRBbrGinBRSEzWTrcDNcCTe0vRA0OuF1U=
Subject key identifier: 1D:FE:6B:7D:25:17:72:75:B5:89:3E:85:22:91:13:BC:3A:55:6D:86
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B7743962FAC47C09EA000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be8f1d5c-2f2e-3ca8-895e-da19d1f85f4d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 73.191.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:77:43:96:2f:ac:47:c0:9e:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9c149578-c588-4763-99da-e34a56938c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9f:c6:82:eb:19:4e:b1:6a:dc:94:60:a0:db:
4b:9e:d6:c3:4c:46:cb:6a:7f:37:30:bd:a4:9d:ec:
d4:0f:ab:e8:ce:f1:d6:75:1f:9a:7e:16:c9:fc:3f:
ed:3d:9b:cb:5f:64:91:58:03:c5:f8:94:d1:4b:ef:
aa:9d:55:f9:31:92:0f:3b:84:87:fe:42:54:f8:47:
3c:b1:e3:61:c4:98:97:36:34:c5:1b:f3:78:3a:eb:
ee:42:bb:55:9f:0e:42:a0:ce:3c:04:3c:d9:f4:0f:
00:d5:e1:54:f2:7a:11:c5:5a:e7:98:8a:93:bf:0e:
29:fa:a5:0a:16:a4:07:d3:aa:56:22:05:d5:58:86:
f3:e9:13:37:71:f4:7f:a6:a0:4c:79:83:83:c5:f3:
76:a9:7b:6d:4d:3c:12:6c:f6:a3:79:cb:a0:76:f3:
34:25:60:f7:f0:06:dc:28:56:c9:d7:65:eb:50:8d:
d3:a6:4d:20:ea:70:f7:31:b9:a1:d4:b7:01:c0:fb:
c9:62:e4:2e:83:04:67:b0:f1:e0:4a:c9:af:92:6a:
b0:c9:02:7c:ca:4d:aa:19:04:12:fd:58:7c:43:77:
83:fe:60:c0:fa:c6:13:32:a8:fa:44:ce:c3:14:54:
50:a6:4c:d2:3e:33:ee:da:b1:5a:66:bc:09:01:66:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FE:6B:7D:25:17:72:75:B5:89:3E:85:22:91:13:BC:3A:55:6D:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be8f1d5c-2f2e-3ca8-895e-da19d1f85f4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.191.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:bc:83:e0:9f:06:60:3d:26:a4:bc:9d:e7:fa:e9:dd:f4:6c:
ad:6f:b2:a7:b4:37:f2:14:69:a1:08:82:01:6f:72:bc:78:12:
7a:21:14:33:9c:e4:6b:6d:3d:84:b5:d7:d1:f9:d0:52:9c:2c:
b3:0a:6e:0b:fd:5f:92:1c:6b:c6:af:1e:13:92:b7:13:27:a1:
26:e4:fb:d2:49:79:16:79:cb:cf:b0:7f:65:1d:e9:c7:b8:22:
22:9b:8e:14:4c:01:40:5c:f3:71:ae:ed:10:7e:3b:e3:0e:91:
d1:3a:8f:20:84:ab:52:be:fe:24:3e:43:20:5e:9e:85:35:04:
4a:31:18:1e:1d:d2:20:41:76:67:6b:bd:68:c8:88:a8:b0:9e:
50:cd:12:74:f8:6d:e7:92:9a:f3:cd:9c:c0:d7:41:de:bc:29:
db:66:f0:35:fc:5e:d6:4b:75:ac:e8:ce:3a:63:ec:ed:ff:f5:
bb:fc:80:2a:bc:df:84:d9:2b:50:6a:5c:3e:70:17:fc:f1:9c:
fb:86:6d:26:21:ab:ef:87:f8:75:23:e1:59:ea:2c:f9:49:24:
40:f1:44:ed:46:54:ef:6d:1e:d3:9c:26:94:8a:66:cf:b3:36:
95:4a:67:d4:ab:c2:f1:32:64:b1:06:68:d7:07:9e:b2:2a:69:
8b:5a:61:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO3dDli+sR8CeoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
OWMxNDk1NzgtYzU4OC00NzYzLTk5ZGEtZTM0YTU2OTM4YzA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp/GgusZTrFq3JRgoNtLntbDTEbLan83ML2k
nezUD6vozvHWdR+afhbJ/D/tPZvLX2SRWAPF+JTRS++qnVX5MZIPO4SH/kJU+Ec8
seNhxJiXNjTFG/N4OuvuQrtVnw5CoM48BDzZ9A8A1eFU8noRxVrnmIqTvw4p+qUK
FqQH06pWIgXVWIbz6RM3cfR/pqBMeYODxfN2qXttTTwSbPajecugdvM0JWD38Abc
KFbJ12XrUI3Tpk0g6nD3Mbmh1LcBwPvJYuQugwRnsPHgSsmvkmqwyQJ8yk2qGQQS
/Vh8Q3eD/mDA+sYTMqj6RM7DFFRQpkzSPjPu2rFaZrwJAWZzXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3+a30lF3J1tYk+hSKRE7w6VW2GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU4ZjFkNWMtMmYyZS0z
Y2E4LTg5NWUtZGExOWQxZjg1ZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASb+JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEO8g+CfBmA9JqS8nef66d30bK1vsqe0N/IUaaEIggFvcrx4EnohFDOc
5GttPYS119H50FKcLLMKbgv9X5Ica8avHhOStxMnoSbk+9JJeRZ5y8+wf2Ud6ce4
IiKbjhRMAUBc83Gu7RB+O+MOkdE6jyCEq1K+/iQ+QyBenoU1BEoxGB4d0iBBdmdr
vWjIiKiwnlDNEnT4beeSmvPNnMDXQd68Kdtm8DX8XtZLdazozjpj7O3/9bv8gCq8
34TZK1BqXD5wF/zxnPuGbSYhq++H+HUj4VnqLPlJJEDxRO1GVO9tHtOcJpSKZs+z
NpVKZ9SrwvEyZLEGaNcHnrIqaYtaYTI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:21 2025 by rpki-client