Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea0c97b8-a7bd-3ab6-95f3-5ad662485011.roa
File: ea0c97b8-a7bd-3ab6-95f3-5ad662485011.roa (raw, json)
Hash identifier: ANEiZSUuzK5EyntK6lUvYyX4wEG+ZvEJlIONeJH0+Zk=
Subject key identifier: 1B:18:8D:CF:89:C2:7E:24:79:41:3D:F0:3C:BA:FC:FB:0C:39:79:71
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B6F6F73EFBD2107C29D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea0c97b8-a7bd-3ab6-95f3-5ad662485011.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 73.145.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:6f:6f:73:ef:bd:21:07:c2:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f0b6e6f8-7049-4394-9e7d-47701d50db55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:d0:2d:91:1a:b0:17:fd:60:ae:49:d2:12:
1f:a1:05:d6:be:f7:c9:30:db:c4:8c:bb:c8:91:22:
7e:fc:42:8d:0a:53:6a:b7:a1:19:57:c9:93:c2:45:
f7:08:2f:0c:98:6d:49:c4:d4:28:11:bf:33:8f:58:
e8:8e:87:d4:10:32:0e:33:6c:c0:be:c6:63:14:a6:
1e:2b:d4:24:95:f2:e0:66:32:be:16:99:de:89:16:
d1:5d:15:c9:24:20:a7:70:78:f9:76:5a:06:2e:ca:
ec:2e:a9:0b:0f:49:5e:e0:b5:aa:9d:90:a1:bd:f3:
6e:f2:00:6b:01:97:a5:33:17:00:ee:70:4a:8d:2d:
47:bf:ea:22:28:37:54:d6:de:7f:62:d3:3d:50:0c:
a5:29:7e:8d:2b:ae:d0:24:0a:ac:1c:f3:91:85:44:
18:85:41:14:ab:59:6b:55:b1:c5:9a:46:dd:34:e7:
a8:91:6b:25:12:5e:f5:3f:29:c0:08:c0:39:e1:bc:
0b:2d:98:58:54:e0:a8:02:a2:e5:a0:c1:8d:b4:b0:
e8:56:d9:fa:0c:3f:1e:ba:a0:08:fe:8b:88:28:d9:
8e:93:62:d2:8d:37:f6:22:8b:0c:90:bb:bb:4e:83:
55:c3:82:c9:7a:b1:44:87:c5:c2:02:5a:89:dc:11:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:18:8D:CF:89:C2:7E:24:79:41:3D:F0:3C:BA:FC:FB:0C:39:79:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea0c97b8-a7bd-3ab6-95f3-5ad662485011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.145.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:42:21:78:cb:77:32:5d:75:36:0d:28:85:79:5c:02:06:ee:
ca:b1:57:68:8d:86:21:66:0a:6a:72:38:0d:2f:c2:9c:ec:80:
41:67:5d:cf:7a:eb:11:a7:74:27:2b:a8:07:49:8a:c5:f2:5f:
15:88:70:c1:93:00:dc:bb:df:75:6d:5a:b8:54:a9:e2:88:0d:
de:6f:09:1f:fa:ad:e0:b5:3c:74:47:c4:28:e0:9e:43:4e:4a:
05:39:f5:e9:e1:24:2f:f7:e6:d2:1e:8a:c1:93:8e:a3:20:77:
48:2b:74:7c:5e:a2:17:93:1c:69:5b:58:40:34:14:d3:86:0c:
3a:30:92:dc:f0:49:9f:2c:38:73:de:57:ac:13:10:d1:7d:ca:
f1:18:99:99:e1:ac:01:e7:3c:22:b6:c1:cc:44:18:6d:f3:2c:
bc:df:c6:d9:6b:69:bf:5d:64:c9:c2:57:e2:7f:f9:83:d8:85:
7b:63:85:cf:84:48:cc:03:fa:5e:1b:35:62:8f:94:79:69:7a:
16:87:63:bd:a4:0b:e2:8f:4b:df:c1:e3:1d:22:03:13:14:5e:
21:94:dc:8e:13:35:e1:31:c6:e5:8c:41:03:69:41:87:95:43:
c1:84:37:2a:b0:35:66:a0:e9:af:97:0a:69:ca:c6:00:6d:e0:
66:cd:4a:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO29vc++9IQfCnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZjBiNmU2ZjgtNzA0OS00Mzk0LTllN2QtNDc3MDFkNTBkYjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPfQLZEasBf9YK5J0hIfoQXWvvfJMNvEjLvI
kSJ+/EKNClNqt6EZV8mTwkX3CC8MmG1JxNQoEb8zj1jojofUEDIOM2zAvsZjFKYe
K9QklfLgZjK+FpneiRbRXRXJJCCncHj5dloGLsrsLqkLD0le4LWqnZChvfNu8gBr
AZelMxcA7nBKjS1Hv+oiKDdU1t5/YtM9UAylKX6NK67QJAqsHPORhUQYhUEUq1lr
VbHFmkbdNOeokWslEl71PynACMA54bwLLZhYVOCoAqLloMGNtLDoVtn6DD8euqAI
/ouIKNmOk2LSjTf2IosMkLu7ToNVw4LJerFEh8XCAlqJ3BE88QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsYjc+Jwn4keUE98Dy6/PsMOXlxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWEwYzk3YjgtYTdiZC0z
YWI2LTk1ZjMtNWFkNjYyNDg1MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSZFoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALtCIXjLdzJddTYNKIV5XAIG7sqxV2iNhiFmCmpyOA0vwpzsgEFnXc96
6xGndCcrqAdJisXyXxWIcMGTANy733VtWrhUqeKIDd5vCR/6reC1PHRHxCjgnkNO
SgU59enhJC/35tIeisGTjqMgd0grdHxeoheTHGlbWEA0FNOGDDowktzwSZ8sOHPe
V6wTENF9yvEYmZnhrAHnPCK2wcxEGG3zLLzfxtlrab9dZMnCV+J/+YPYhXtjhc+E
SMwD+l4bNWKPlHlpehaHY72kC+KPS9/B4x0iAxMUXiGU3I4TNeExxuWMQQNpQYeV
Q8GENyqwNWag6a+XCmnKxgBt4GbNSpI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:15:29 2025 by rpki-client