Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee6f223-dc4d-39d5-b1b2-b301375ced5e.roa
File: dee6f223-dc4d-39d5-b1b2-b301375ced5e.roa (raw, json)
Hash identifier: Kz0N9YE5FP4W+cJ9k+Q63FZp57JKCuZKloy2BcbM46g=
Subject key identifier: 43:05:3E:04:AC:11:FB:F6:49:DC:1E:44:13:24:B4:19:BD:3F:4D:8B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FDD41B7B38555C1D6A800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee6f223-dc4d-39d5-b1b2-b301375ced5e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 73.166.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:dd:41:b7:b3:85:55:c1:d6:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ac771096-15c1-4fdb-8969-6b27a3f19a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:bd:ec:77:f3:10:62:cd:93:cb:8e:84:25:18:
8a:3c:13:47:3f:7d:b7:67:ec:07:1a:e4:77:b2:f7:
f7:c3:89:57:82:9f:07:e4:2a:ef:f4:87:b9:e6:37:
ad:66:3c:fc:a5:a9:a1:42:c7:9f:24:24:76:64:58:
ab:04:bc:b8:75:a9:bc:1d:ad:35:a0:04:9a:d0:d7:
53:45:a4:65:1e:88:05:42:0c:dd:94:b0:52:9a:6c:
f3:d9:12:4e:66:04:92:28:62:0b:25:a0:c1:a7:89:
aa:ed:2a:01:66:fc:5a:2e:c4:53:1e:0e:6d:63:c9:
b6:bd:15:1d:04:b8:e7:f3:3e:5e:6c:08:e7:e1:f3:
b5:7b:ef:11:5f:f0:c4:1b:cb:7c:0b:1d:e8:1a:89:
e5:6f:98:4f:94:01:33:2c:56:1b:12:a8:44:bf:70:
d3:ca:cb:63:18:ce:c6:47:13:fc:05:14:b3:05:2e:
21:a0:cd:6f:7b:62:da:75:f8:29:ec:bb:75:c4:ca:
80:13:5c:35:5f:11:db:1a:66:92:9e:89:04:e8:6d:
99:06:af:51:be:8e:b0:ca:c1:7f:ed:b8:54:bc:65:
06:1a:06:ea:63:6b:07:90:98:5d:19:57:fa:96:a0:
46:e2:94:04:1f:44:28:da:f6:1d:aa:34:65:5e:1b:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:05:3E:04:AC:11:FB:F6:49:DC:1E:44:13:24:B4:19:BD:3F:4D:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee6f223-dc4d-39d5-b1b2-b301375ced5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.166.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:fd:35:c8:dc:d6:ac:c9:01:33:3a:03:39:73:2f:c7:34:43:
2e:0f:29:21:22:d6:2a:01:1b:b7:a3:55:c4:b4:29:81:f5:dd:
d8:10:b2:10:33:02:c3:14:42:a6:b1:d0:6e:10:8e:ad:4d:11:
b9:9a:7e:b7:10:5c:a6:49:cc:8a:6a:3b:5b:73:ce:92:93:80:
aa:ab:16:35:0a:d1:d2:dc:85:ca:e4:ac:f4:af:4f:42:ed:df:
31:69:ae:13:cd:15:8f:e6:33:99:c2:4b:79:0f:7e:a9:1d:c2:
2d:3d:92:4c:a1:bf:7a:8b:2a:54:67:c5:3e:32:d2:6f:4f:6a:
5f:14:6c:cf:fd:e3:4f:2a:cb:2a:ed:9b:22:24:d5:0a:ee:bf:
92:09:01:1b:5e:8c:8f:92:b2:09:a2:84:a2:e5:5e:1c:c7:77:
f9:62:ba:55:99:6e:27:a5:f7:55:6b:80:43:9c:a8:8c:be:9f:
c6:bb:ba:c1:0a:1c:23:bd:4f:4c:70:ab:41:bb:03:34:ff:b9:
a6:97:bc:ee:1a:84:4a:8c:3b:5d:20:6a:4b:28:6b:f2:3a:b0:
43:18:4d:36:34:bd:6f:2e:14:37:13:8e:51:d7:55:4f:99:54:
08:99:84:ae:5a:91:d8:15:c5:a7:ab:a0:73:ac:13:cb:49:a0:
7c:e5:09:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUP91Bt7OFVcHWqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
YWM3NzEwOTYtMTVjMS00ZmRiLTg5NjktNmIyN2EzZjE5YTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+73sd/MQYs2Ty46EJRiKPBNHP323Z+wHGuR3
svf3w4lXgp8H5Crv9Ie55jetZjz8pamhQsefJCR2ZFirBLy4dam8Ha01oASa0NdT
RaRlHogFQgzdlLBSmmzz2RJOZgSSKGILJaDBp4mq7SoBZvxaLsRTHg5tY8m2vRUd
BLjn8z5ebAjn4fO1e+8RX/DEG8t8Cx3oGonlb5hPlAEzLFYbEqhEv3DTystjGM7G
RxP8BRSzBS4hoM1ve2Ladfgp7Lt1xMqAE1w1XxHbGmaSnokE6G2ZBq9Rvo6wysF/
7bhUvGUGGgbqY2sHkJhdGVf6lqBG4pQEH0Qo2vYdqjRlXhsJnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMFPgSsEfv2SdweRBMktBm9P02LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGVlNmYyMjMtZGM0ZC0z
OWQ1LWIxYjItYjMwMTM3NWNlZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSab4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJf9Ncjc1qzJATM6AzlzL8c0Qy4PKSEi1ioBG7ejVcS0KYH13dgQshAz
AsMUQqax0G4Qjq1NEbmafrcQXKZJzIpqO1tzzpKTgKqrFjUK0dLchcrkrPSvT0Lt
3zFprhPNFY/mM5nCS3kPfqkdwi09kkyhv3qLKlRnxT4y0m9Pal8UbM/9408qyyrt
myIk1Qruv5IJARtejI+SsgmihKLlXhzHd/liulWZbiel91VrgEOcqIy+n8a7usEK
HCO9T0xwq0G7AzT/uaaXvO4ahEqMO10gaksoa/I6sEMYTTY0vW8uFDcTjlHXVU+Z
VAiZhK5akdgVxaeroHOsE8tJoHzlCX8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:05:35 2025 by rpki-client