Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dae38a7c-1fa6-31f0-9a60-aa76235d015c.roa
File: dae38a7c-1fa6-31f0-9a60-aa76235d015c.roa (raw, json)
Hash identifier: VErQ5s9CIxEEPc3RWeIy5vPOiLYhLCh25qAyaoEblBI=
Subject key identifier: CA:DF:E0:B8:66:78:FE:3E:A8:C5:82:A1:A5:B7:E3:F5:E1:86:EF:D4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12C1A897B272DA14D2F500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dae38a7c-1fa6-31f0-9a60-aa76235d015c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.44.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:c1:a8:97:b2:72:da:14:d2:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=3a664e56-258d-4170-bceb-8bb165b5b99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:ca:6e:78:8c:1f:4f:15:18:54:51:40:3f:
c9:a2:12:10:72:9b:d4:19:b9:b5:d9:09:dd:4b:3b:
0b:d6:31:92:62:cf:e6:2b:5d:11:45:9c:1a:0a:85:
b5:2c:85:6a:2f:26:ea:79:9d:1d:f6:11:bc:00:dd:
de:51:44:c4:31:1c:d2:ae:80:eb:2a:cc:ef:aa:b8:
ea:54:e7:d0:f5:3c:86:8a:1c:d5:61:5b:d8:7c:81:
24:58:69:94:1e:0f:d8:f1:11:f9:9b:61:1e:d9:19:
8f:30:90:22:80:be:a7:18:58:7a:90:44:2a:13:5b:
1e:e2:03:8f:d0:6f:22:b6:12:d0:cb:8b:2a:60:c9:
31:44:b4:ec:1e:f6:ea:a8:74:fb:d6:08:ce:f9:5a:
13:18:47:c4:47:87:16:00:f5:2c:1a:b7:49:4a:25:
f3:60:f7:a6:6e:47:de:43:02:af:b0:cc:be:c0:c4:
30:c2:be:dd:39:8d:1f:70:36:a4:ac:54:67:6f:eb:
f9:18:6d:d3:08:4b:e1:da:6c:18:aa:fe:a7:49:c6:
f9:6f:07:94:09:b4:7e:35:7b:fc:9e:63:25:0f:95:
46:f0:3c:e3:f9:df:4e:a5:a9:91:bb:09:0b:fc:31:
ec:50:ad:2f:e2:dd:ba:10:6e:87:d0:9d:de:a8:f7:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DF:E0:B8:66:78:FE:3E:A8:C5:82:A1:A5:B7:E3:F5:E1:86:EF:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dae38a7c-1fa6-31f0-9a60-aa76235d015c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.44.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:28:eb:0c:70:7c:cf:0d:ec:be:2c:62:2c:e5:25:09:1e:67:
0e:58:5a:54:db:f7:d1:53:78:91:ee:56:b1:97:24:e5:a3:67:
48:7e:fe:43:29:fd:e2:1c:12:be:e5:85:74:61:13:a1:ce:b5:
a9:6b:9b:c7:f8:76:1f:d4:67:40:27:67:14:74:a9:9e:10:83:
4a:b7:18:68:5a:ee:4c:ff:2f:9c:04:b0:ae:68:17:c8:c8:f9:
2f:f5:fc:33:e7:72:2b:fe:de:1d:84:28:09:e7:97:9c:34:f2:
12:4f:74:67:d0:05:9e:56:1e:26:cc:ee:2a:89:ee:e9:fa:09:
29:7c:43:5f:ba:c0:8d:c7:fc:5c:50:2b:90:30:1e:7b:58:31:
3a:0c:d2:18:1e:51:09:00:69:09:cd:40:0b:7c:d5:e6:cf:ba:
28:1b:44:82:fd:7a:21:8b:fa:17:8d:b7:00:0d:fc:70:1b:5f:
f9:86:28:6b:15:e8:18:72:46:a0:01:aa:e7:17:9b:1d:a2:6f:
98:a7:bc:13:8a:e2:9c:33:9f:c7:f0:5d:1f:93:b2:f5:2f:1c:
a0:ff:9a:01:37:ae:f2:1f:87:d4:05:5c:87:ce:22:58:aa:47:
cc:69:77:c4:27:d3:23:ef:f2:ca:a3:8c:13:15:13:c7:1f:0d:
60:8c:9f:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEsGol7Jy2hTS9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
M2E2NjRlNTYtMjU4ZC00MTcwLWJjZWItOGJiMTY1YjViOTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwfKbniMH08VGFRRQD/JohIQcpvUGbm12Qnd
SzsL1jGSYs/mK10RRZwaCoW1LIVqLybqeZ0d9hG8AN3eUUTEMRzSroDrKszvqrjq
VOfQ9TyGihzVYVvYfIEkWGmUHg/Y8RH5m2Ee2RmPMJAigL6nGFh6kEQqE1se4gOP
0G8ithLQy4sqYMkxRLTsHvbqqHT71gjO+VoTGEfER4cWAPUsGrdJSiXzYPembkfe
QwKvsMy+wMQwwr7dOY0fcDakrFRnb+v5GG3TCEvh2mwYqv6nScb5bweUCbR+NXv8
nmMlD5VG8Dzj+d9OpamRuwkL/DHsUK0v4t26EG6H0J3eqPewgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMrf4LhmeP4+qMWCoaW34/Xhhu/UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGFlMzhhN2MtMWZhNi0z
MWYwLTlhNjAtYWE3NjIzNWQwMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSSwsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEo6wxwfM8N7L4sYizlJQkeZw5YWlTb99FTeJHuVrGXJOWjZ0h+/kMp
/eIcEr7lhXRhE6HOtalrm8f4dh/UZ0AnZxR0qZ4Qg0q3GGha7kz/L5wEsK5oF8jI
+S/1/DPnciv+3h2EKAnnl5w08hJPdGfQBZ5WHibM7iqJ7un6CSl8Q1+6wI3H/FxQ
K5AwHntYMToM0hgeUQkAaQnNQAt81ebPuigbRIL9eiGL+heNtwAN/HAbX/mGKGsV
6BhyRqABqucXmx2ib5invBOK4pwzn8fwXR+TsvUvHKD/mgE3rvIfh9QFXIfOIliq
R8xpd8Qn0yPv8sqjjBMVE8cfDWCMnzs=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:43 2025 by rpki-client