Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f87dff8b-26f1-3694-be88-610b44a5ff56.roa
File: f87dff8b-26f1-3694-be88-610b44a5ff56.roa (raw, json)
Hash identifier: tXwdB04yr6tQ4p+WmoOfdwkfYZy8Q/KY57218KTPNqE=
Subject key identifier: E4:E6:03:AF:55:94:5A:30:2A:D2:5E:17:C5:EF:A6:8A:38:A7:DD:45
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13E99B8E9D5CD8AFF9D180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f87dff8b-26f1-3694-be88-610b44a5ff56.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 73.170.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:e9:9b:8e:9d:5c:d8:af:f9:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6742d4d0-6403-4607-898e-9c7ec325c4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:1b:b1:c0:b6:78:39:97:53:72:8a:83:6e:
df:72:dd:43:46:a7:1c:b0:27:2e:ef:54:fe:6a:04:
1b:34:58:4e:29:3a:5a:56:22:af:c5:82:77:90:4f:
2d:d3:97:8a:2c:02:91:52:16:94:c4:fd:33:88:53:
73:33:8a:64:59:e3:60:db:c6:cd:0f:22:3c:4f:ce:
6c:d8:5c:7f:d8:2f:5a:f3:b5:a7:95:0d:39:2a:d0:
ed:10:1c:8e:e9:ad:ba:af:f7:fb:a5:4e:00:cb:55:
19:1b:53:95:b0:72:f2:33:72:3c:18:20:1e:1d:52:
12:7c:e4:24:01:85:6e:be:7c:fb:37:38:e7:93:ef:
19:a4:94:45:75:ab:87:32:ab:07:68:fa:74:9f:62:
bc:27:d4:43:38:72:ee:50:f1:d5:bc:ce:df:06:9f:
57:52:bf:15:ba:44:ba:54:28:f4:e4:90:ee:10:8f:
03:f8:8f:cc:54:ed:9a:a1:20:30:32:01:97:d2:90:
09:4d:9c:3f:3c:6e:c2:66:ed:5f:0d:f0:4a:7a:bb:
23:f2:8d:8e:22:7f:3c:1a:75:97:fe:80:dd:16:c5:
97:ea:cb:f8:e8:94:62:f2:33:a3:07:e4:93:3a:6b:
ab:42:dd:16:e3:75:df:ea:5e:9f:f4:1b:81:5d:d3:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:03:AF:55:94:5A:30:2A:D2:5E:17:C5:EF:A6:8A:38:A7:DD:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f87dff8b-26f1-3694-be88-610b44a5ff56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.170.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:82:a5:59:76:80:13:6e:84:73:42:91:d1:46:5c:7d:39:f4:
7e:ff:35:ba:30:ef:f7:83:df:77:37:ed:aa:42:5f:90:fb:30:
b0:07:32:1d:77:e8:ad:92:2a:40:fe:e7:7d:88:54:ce:b5:14:
24:09:7c:a5:a1:5f:a2:d0:dc:5b:8a:a0:ab:ad:85:96:94:55:
74:57:f8:c4:31:be:e7:e0:da:97:f7:c5:19:77:7b:a4:f6:df:
6f:ec:8b:e9:42:7a:71:68:d4:1e:36:02:24:58:9a:b0:5f:20:
96:56:d7:ef:c8:ff:5a:fc:a5:cf:fb:49:7a:0d:bd:3d:bd:fa:
d8:41:9d:d9:8d:f9:cf:52:11:c1:01:34:a0:57:e2:32:6a:0b:
f8:b4:e9:b5:80:76:e2:41:45:24:b7:0f:64:bd:05:12:e3:26:
c4:56:4e:3a:23:b3:86:6f:78:0b:bf:cd:b6:fd:0c:76:21:aa:
69:62:94:5a:b1:ed:d8:5a:b1:01:77:2d:9f:40:6b:b3:67:b9:
58:a6:c5:f2:9a:ae:47:27:4e:4d:14:7a:df:fb:02:96:2a:8f:
46:64:f2:8b:85:fe:f0:36:e0:83:40:70:b2:11:aa:2c:d6:c2:
80:6a:43:05:29:52:56:2b:82:ca:e1:67:d5:bb:27:96:f6:eb:
55:33:8f:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhME+mbjp1c2K/50YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
Njc0MmQ0ZDAtNjQwMy00NjA3LTg5OGUtOWM3ZWMzMjVjNGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CAbscC2eDmXU3KKg27fct1DRqccsCcu71T+
agQbNFhOKTpaViKvxYJ3kE8t05eKLAKRUhaUxP0ziFNzM4pkWeNg28bNDyI8T85s
2Fx/2C9a87WnlQ05KtDtEByO6a26r/f7pU4Ay1UZG1OVsHLyM3I8GCAeHVISfOQk
AYVuvnz7Nzjnk+8ZpJRFdauHMqsHaPp0n2K8J9RDOHLuUPHVvM7fBp9XUr8VukS6
VCj05JDuEI8D+I/MVO2aoSAwMgGX0pAJTZw/PG7CZu1fDfBKersj8o2OIn88GnWX
/oDdFsWX6sv46JRi8jOjB+STOmurQt0W43Xf6l6f9BuBXdML3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTmA69VlFowKtJeF8Xvpoo4p91FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg3ZGZmOGItMjZmMS0z
Njk0LWJlODgtNjEwYjQ0YTVmZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaoWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKeCpVl2gBNuhHNCkdFGXH059H7/Nbow7/eD33c37apCX5D7MLAHMh13
6K2SKkD+532IVM61FCQJfKWhX6LQ3FuKoKuthZaUVXRX+MQxvufg2pf3xRl3e6T2
32/si+lCenFo1B42AiRYmrBfIJZW1+/I/1r8pc/7SXoNvT29+thBndmN+c9SEcEB
NKBX4jJqC/i06bWAduJBRSS3D2S9BRLjJsRWTjojs4ZveAu/zbb9DHYhqmlilFqx
7dhasQF3LZ9Aa7NnuVimxfKarkcnTk0Uet/7ApYqj0Zk8ouF/vA24INAcLIRqizW
woBqQwUpUlYrgsrhZ9W7J5b261Uzjyk=
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:32:26 2025 by rpki-client