Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89e17d2-3887-3e64-953b-d0f9363f3b23.roa
File: c89e17d2-3887-3e64-953b-d0f9363f3b23.roa (raw, json)
Hash identifier: IIRmjEcOV8E9lWK48+NjpbJ4CiyETN/GADT+gCl92dE=
Subject key identifier: CC:86:A3:4E:F0:F9:4F:E7:AA:88:68:70:44:F4:71:1A:01:4E:4B:37
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C143BB32C3956BA50BA2642
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89e17d2-3887-3e64-953b-d0f9363f3b23.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.223.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:3b:b3:2c:39:56:ba:50:ba:26:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4ed23d0c-6fd9-4b0a-a1d7-7908bb091ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2e:30:77:05:dc:03:bf:67:07:a6:e2:43:76:
1c:63:71:26:88:f9:38:13:02:ed:27:e1:aa:ba:33:
d8:79:01:84:5d:5b:ca:28:ae:a8:1c:58:51:9a:af:
0f:8e:f1:61:b9:07:20:ee:5e:43:01:50:8f:c0:2a:
23:60:93:a8:92:8d:f5:5a:f0:ac:df:cf:c4:b8:65:
db:a4:38:b6:91:61:4e:df:f0:c9:03:55:86:01:76:
37:19:a7:af:d8:19:34:aa:76:22:2f:10:44:1d:5c:
78:2b:8f:67:16:14:fb:c8:bb:b4:db:fa:f4:a8:5b:
67:d0:cd:a4:8f:4b:ca:d4:08:4c:db:33:d5:de:5e:
15:57:2d:a3:9c:9e:50:31:4c:4c:58:30:a7:66:a5:
4d:78:e4:88:17:9d:e9:3c:29:80:6b:82:a6:9f:d1:
fe:c1:28:3a:6c:74:63:6b:65:b3:38:d6:a1:61:c6:
bf:ed:47:a1:d4:60:91:df:de:7d:81:c6:e2:11:65:
e5:06:6f:28:eb:76:ab:a7:db:e1:aa:97:a5:b6:c3:
12:be:19:65:be:b0:74:20:18:fe:77:4d:9e:7c:39:
cc:1d:63:d4:52:44:30:90:23:36:be:15:48:69:b7:
9f:a5:d4:98:81:f1:a7:39:9a:97:0e:8e:b9:a0:1d:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:86:A3:4E:F0:F9:4F:E7:AA:88:68:70:44:F4:71:1A:01:4E:4B:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89e17d2-3887-3e64-953b-d0f9363f3b23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.223.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:c4:cc:93:0e:3b:a6:a4:ab:f2:f3:99:78:fc:4f:23:7b:00:
15:76:8e:30:bf:64:f1:48:74:d5:2b:a7:af:e5:b8:b5:55:fc:
66:c3:ca:99:ca:ab:1f:e8:05:9c:72:54:a8:a1:b6:57:27:30:
3f:25:97:6e:1d:e0:9d:4d:5d:1a:9d:5b:2f:e1:48:0b:94:89:
c0:fa:af:8c:ee:c5:d6:ab:ca:fe:09:96:5c:ab:e9:fe:49:30:
5a:95:ce:b5:82:85:38:bd:6e:ea:c4:cb:67:7f:05:3b:53:26:
0b:01:05:0f:09:1a:c8:67:5e:8a:16:eb:8c:d1:a6:67:e6:1a:
f3:15:50:e8:04:aa:f8:1e:26:25:83:3c:97:82:d1:81:53:fd:
5d:29:0f:38:df:76:50:44:d2:7e:58:b4:0c:f1:25:30:97:12:
2a:75:cd:50:b5:70:5a:f5:9a:1f:cd:45:cb:02:64:18:80:73:
c4:2e:42:cb:ab:49:5f:f0:96:cc:bb:dd:77:e0:2e:36:22:18:
b8:0f:82:97:fb:39:99:4e:04:66:b4:e5:76:63:53:66:e1:70:
ab:17:62:34:8a:c4:a7:40:3f:19:d0:e2:a1:da:ab:14:5c:49:
97:36:a7:d2:62:98:b5:16:3c:ca:b4:18:fe:9b:ac:4e:45:36:
fe:09:01:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMFDuzLDlWulC6JkIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NGVkMjNkMGMtNmZkOS00YjBhLWExZDctNzkwOGJiMDkxY2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii4wdwXcA79nB6biQ3YcY3EmiPk4EwLtJ+Gq
ujPYeQGEXVvKKK6oHFhRmq8PjvFhuQcg7l5DAVCPwCojYJOoko31WvCs38/EuGXb
pDi2kWFO3/DJA1WGAXY3Gaev2Bk0qnYiLxBEHVx4K49nFhT7yLu02/r0qFtn0M2k
j0vK1AhM2zPV3l4VVy2jnJ5QMUxMWDCnZqVNeOSIF53pPCmAa4Kmn9H+wSg6bHRj
a2WzONahYca/7Ueh1GCR3959gcbiEWXlBm8o63arp9vhqpeltsMSvhllvrB0IBj+
d02efDnMHWPUUkQwkCM2vhVIabefpdSYgfGnOZqXDo65oB0vVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMyGo07w+U/nqohocET0cRoBTks3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzg5ZTE3ZDItMzg4Ny0z
ZTY0LTk1M2ItZDBmOTM2M2YzYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd9gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/EzJMOO6akq/LzmXj8TyN7ABV2jjC/ZPFIdNUrp6/luLVV/GbDypnK
qx/oBZxyVKihtlcnMD8ll24d4J1NXRqdWy/hSAuUicD6r4zuxdaryv4Jllyr6f5J
MFqVzrWChTi9burEy2d/BTtTJgsBBQ8JGshnXooW64zRpmfmGvMVUOgEqvgeJiWD
PJeC0YFT/V0pDzjfdlBE0n5YtAzxJTCXEip1zVC1cFr1mh/NRcsCZBiAc8QuQsur
SV/wlsy73XfgLjYiGLgPgpf7OZlOBGa05XZjU2bhcKsXYjSKxKdAPxnQ4qHaqxRc
SZc2p9JimLUWPMq0GP6brE5FNv4JAXg=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:51 2025 by rpki-client