Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa1f7013-a421-30c8-99e2-1f76f062b997.roa
File: fa1f7013-a421-30c8-99e2-1f76f062b997.roa (raw, json)
Hash identifier: N9U+6/3oLeP4n4z9DiMErfRfilCsdVQQO7hPR909bjA=
Subject key identifier: 42:21:94:C2:F8:18:28:B7:78:D4:99:9F:B1:50:FD:F4:09:24:9C:90
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1117FD0C9BE6D98E732740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa1f7013-a421-30c8-99e2-1f76f062b997.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 73.36.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:17:fd:0c:9b:e6:d9:8e:73:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=73a3c653-7fd1-4359-930e-eee1940021fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5d:4c:0e:76:e9:26:89:c5:41:e1:95:3f:8b:
eb:1a:ed:56:92:97:4a:43:d7:36:54:be:4e:d9:70:
dd:e0:de:d8:80:07:97:34:10:44:0e:5b:1a:9c:ed:
31:e5:a2:cd:85:b5:ce:ce:46:bc:ca:89:f5:76:08:
03:d8:66:b4:c3:98:f8:32:92:06:9b:92:67:92:28:
be:d6:f1:3f:8f:63:54:e6:db:0a:25:20:e3:cf:f5:
1d:c1:81:d1:ac:62:0e:7e:5b:c2:54:40:cd:d0:fb:
b3:2a:5f:1a:49:1a:94:62:5a:0b:ad:bb:28:84:9d:
f1:1d:d1:2f:df:77:9b:48:ad:57:14:54:92:c0:b3:
1b:96:45:3a:fc:b4:6c:f2:8c:f4:c7:cc:f8:b7:6a:
db:11:f3:f0:cf:36:0d:dc:5b:80:d1:e2:88:70:48:
85:c4:e5:2c:c8:b0:e6:3b:cd:32:e3:ea:b5:4a:f6:
66:06:88:c9:02:de:17:71:f0:27:64:ff:78:39:a1:
6e:d5:e6:a8:96:d2:44:c7:35:22:83:57:e5:b9:35:
74:38:17:d3:83:00:1f:cb:2e:13:61:cc:4c:a8:dd:
d9:66:1a:9c:bc:b9:a6:38:67:d7:df:2c:b4:e7:36:
c6:2c:5e:7a:0c:75:dd:da:0b:44:b8:4c:6e:2d:e8:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:21:94:C2:F8:18:28:B7:78:D4:99:9F:B1:50:FD:F4:09:24:9C:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa1f7013-a421-30c8-99e2-1f76f062b997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.36.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a7:e9:b5:f0:3c:dd:92:03:fa:8a:0e:76:17:32:dd:d9:fd:
56:8f:18:36:df:64:03:ec:ce:17:68:41:c1:c5:25:ef:d4:81:
b2:df:53:7a:66:6e:c8:a5:cf:ba:68:17:e6:aa:9b:78:02:4d:
a9:36:80:b7:ff:56:05:c6:1d:71:da:7b:74:32:8d:ed:2b:95:
0e:fe:df:8f:68:84:c8:e9:ac:b4:6c:93:73:ed:21:7d:83:3f:
f2:89:1c:ba:3c:2b:68:45:38:df:28:f0:74:9b:10:84:08:51:
52:f9:47:e7:fe:bc:1e:ed:27:b7:4f:2b:59:64:03:9d:8b:c8:
cb:ae:28:f7:0c:62:74:fd:4e:7b:a1:19:5b:f5:35:40:ab:63:
ec:ec:98:e9:e8:54:76:2f:e5:ff:ac:58:b1:cc:bb:cc:49:5d:
8d:ef:88:0d:32:cd:29:75:89:bb:44:76:41:bf:35:3c:05:7b:
5b:3a:a4:4e:b6:d0:30:c2:6c:47:11:6b:1f:f4:7f:d1:49:6e:
d6:e0:b9:5c:eb:17:2d:91:00:8a:00:8b:19:52:62:36:58:d3:
d7:53:8a:81:14:9b:bb:0a:a9:a5:af:22:7e:9c:2e:3f:60:7d:
ff:12:7e:48:0d:e9:45:d3:7c:b2:d8:ee:31:18:9d:e3:41:54:
7f:ff:5a:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMERf9DJvm2Y5zJ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NzNhM2M2NTMtN2ZkMS00MzU5LTkzMGUtZWVlMTk0MDAyMWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF1MDnbpJonFQeGVP4vrGu1WkpdKQ9c2VL5O
2XDd4N7YgAeXNBBEDlsanO0x5aLNhbXOzka8yon1dggD2Ga0w5j4MpIGm5Jnkii+
1vE/j2NU5tsKJSDjz/UdwYHRrGIOflvCVEDN0PuzKl8aSRqUYloLrbsohJ3xHdEv
33ebSK1XFFSSwLMblkU6/LRs8oz0x8z4t2rbEfPwzzYN3FuA0eKIcEiFxOUsyLDm
O80y4+q1SvZmBojJAt4XcfAnZP94OaFu1eaoltJExzUig1fluTV0OBfTgwAfyy4T
YcxMqN3ZZhqcvLmmOGfX3yy05zbGLF56DHXd2gtEuExuLeiqpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEIhlML4GCi3eNSZn7FQ/fQJJJyQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmExZjcwMTMtYTQyMS0z
MGM4LTk5ZTItMWY3NmYwNjJiOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASSQEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOn6bXwPN2SA/qKDnYXMt3Z/VaPGDbfZAPszhdoQcHFJe/UgbLfU3pm
bsilz7poF+aqm3gCTak2gLf/VgXGHXHae3Qyje0rlQ7+349ohMjprLRsk3PtIX2D
P/KJHLo8K2hFON8o8HSbEIQIUVL5R+f+vB7tJ7dPK1lkA52LyMuuKPcMYnT9Tnuh
GVv1NUCrY+zsmOnoVHYv5f+sWLHMu8xJXY3viA0yzSl1ibtEdkG/NTwFe1s6pE62
0DDCbEcRax/0f9FJbtbguVzrFy2RAIoAixlSYjZY09dTioEUm7sKqaWvIn6cLj9g
ff8SfkgN6UXTfLLY7jEYneNBVH//Whk=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:46 2025 by rpki-client