Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f690e4b7-aa6c-3522-8b00-2914fe6fe4f3.roa
File: f690e4b7-aa6c-3522-8b00-2914fe6fe4f3.roa (raw, json)
Hash identifier: tKMJ8SUNAbNjTtj4hx2BdIcQmxN+GcgSmpEHzIL8MPo=
Subject key identifier: C8:64:FE:38:25:21:C2:D4:1C:71:A9:84:C9:61:2E:FA:32:C8:AD:09
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B7542311C7FEEAF6F0490
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f690e4b7-aa6c-3522-8b00-2914fe6fe4f3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 73.18.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:75:42:31:1c:7f:ee:af:6f:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=12ee25a3-e56b-45c5-9674-85f18296945f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:42:2b:e2:ee:46:86:08:de:8e:59:89:94:
98:29:74:1e:2f:f7:58:20:94:99:7b:85:9f:18:88:
cf:69:86:34:d9:24:4c:95:4e:57:6c:4c:2e:b9:74:
71:c5:09:12:e9:05:ed:b8:92:40:02:86:25:52:68:
f5:11:04:d9:8a:6d:70:b9:1c:22:d1:f1:93:53:43:
74:74:69:e2:93:fc:57:3c:da:a0:60:f6:41:ee:9a:
1a:e5:31:cf:89:0f:ea:9b:6d:87:23:5a:2b:07:7b:
22:ca:41:65:d2:5f:f7:70:2f:f9:16:a0:19:f4:f1:
16:28:b6:00:06:d8:56:84:ca:cd:e8:fd:28:c6:f6:
83:80:f8:87:4f:04:fd:6b:08:61:a7:b8:d7:f9:c8:
ae:71:76:ae:05:04:10:e0:66:eb:7a:3b:e8:23:fe:
03:9c:1a:56:23:df:83:4f:1a:15:35:e6:9d:89:48:
6c:d5:64:15:30:b8:c4:e3:d4:2f:99:8d:e0:6f:23:
bd:27:23:97:41:1f:fa:63:90:aa:c0:a3:9c:39:95:
50:49:de:47:b2:2b:2e:68:2b:86:c0:e9:be:c8:ae:
95:b7:29:81:6e:85:cf:dc:40:5c:f8:7b:fd:73:f8:
bf:1d:d8:bc:3b:a7:47:35:a8:d0:1a:d6:21:4d:af:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:64:FE:38:25:21:C2:D4:1C:71:A9:84:C9:61:2E:FA:32:C8:AD:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f690e4b7-aa6c-3522-8b00-2914fe6fe4f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.18.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:52:65:fe:ba:18:31:3e:28:d6:bb:d6:25:38:16:ca:85:d5:
bd:af:64:b8:d8:0e:0f:45:91:b8:53:91:28:4e:8f:75:a5:65:
dd:92:5d:ea:02:4b:35:0f:fe:21:a5:85:53:77:10:54:5e:f9:
88:3a:29:23:71:b9:e6:b6:cb:40:30:9e:74:c3:08:11:fb:eb:
5e:1d:58:08:7e:7d:58:61:fc:04:fa:a1:9a:94:db:11:03:2d:
4f:c8:23:bf:e3:31:a3:fc:6e:8f:85:ab:d4:e6:4a:cd:b4:6c:
d0:a8:64:1f:1b:8a:c4:65:c6:3c:63:a4:e7:76:ba:43:7f:02:
aa:44:82:7e:8b:4a:96:58:7c:b8:a9:93:48:cb:38:a2:85:8b:
7a:fc:5e:fc:f1:fc:b1:db:e1:7e:13:c5:d7:73:8b:62:7e:76:
aa:23:3f:a3:f4:30:8d:f9:70:ea:ae:8a:6b:5f:1c:e4:42:29:
89:40:c7:2e:11:96:06:d3:b7:af:03:a0:ad:b0:0f:6a:06:65:
0e:26:c4:9a:f8:d8:87:06:e0:2d:50:a7:45:2d:cb:7c:35:56:
a1:ad:ff:9c:75:57:39:21:aa:77:02:bd:2b:62:42:04:20:b4:
48:a1:40:d8:a6:21:73:8b:b8:c5:a1:23:c3:c3:83:3d:f8:b0:
31:43:d6:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO3VCMRx/7q9vBJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MTJlZTI1YTMtZTU2Yi00NWM1LTk2NzQtODVmMTgyOTY5NDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SxCK+LuRoYI3o5ZiZSYKXQeL/dYIJSZe4Wf
GIjPaYY02SRMlU5XbEwuuXRxxQkS6QXtuJJAAoYlUmj1EQTZim1wuRwi0fGTU0N0
dGnik/xXPNqgYPZB7poa5THPiQ/qm22HI1orB3siykFl0l/3cC/5FqAZ9PEWKLYA
BthWhMrN6P0oxvaDgPiHTwT9awhhp7jX+ciucXauBQQQ4GbrejvoI/4DnBpWI9+D
TxoVNeadiUhs1WQVMLjE49QvmY3gbyO9JyOXQR/6Y5CqwKOcOZVQSd5HsisuaCuG
wOm+yK6VtymBboXP3EBc+Hv9c/i/Hdi8O6dHNajQGtYhTa8Q3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhk/jglIcLUHHGphMlhLvoyyK0JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjY5MGU0YjctYWE2Yy0z
NTIyLThiMDAtMjkxNGZlNmZlNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASRICMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKxSZf66GDE+KNa71iU4FsqF1b2vZLjYDg9FkbhTkShOj3WlZd2SXeoC
SzUP/iGlhVN3EFRe+Yg6KSNxuea2y0AwnnTDCBH7614dWAh+fVhh/AT6oZqU2xED
LU/II7/jMaP8bo+Fq9TmSs20bNCoZB8bisRlxjxjpOd2ukN/AqpEgn6LSpZYfLip
k0jLOKKFi3r8Xvzx/LHb4X4Txddzi2J+dqojP6P0MI35cOquimtfHORCKYlAxy4R
lgbTt68DoK2wD2oGZQ4mxJr42IcG4C1Qp0Uty3w1VqGt/5x1VzkhqncCvStiQgQg
tEihQNimIXOLuMWhI8PDgz34sDFD1oI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:12 2025 by rpki-client