Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbb51d1a-eee7-30be-a55a-413eebd380ae.roa
File: fbb51d1a-eee7-30be-a55a-413eebd380ae.roa (raw, json)
Hash identifier: DqCngE4BTil8bebPB+yrmh84ROMoa3O8NOilTRHXubM=
Subject key identifier: 3B:15:9C:AD:71:7F:10:A4:C6:D2:6C:52:AA:EA:E8:87:0C:F3:BD:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B703F9936737B4EFBBC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbb51d1a-eee7-30be-a55a-413eebd380ae.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 73.145.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:70:3f:99:36:73:7b:4e:fb:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=06d5e096-8e6b-4e78-bc07-e23cfd6eb6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:2c:03:7a:7d:02:48:0b:0e:5a:14:60:35:
19:7c:52:06:7a:bc:4a:98:03:f5:32:7c:6a:9c:fa:
51:64:14:18:78:25:a8:f5:02:87:91:61:bc:71:ce:
0d:71:c2:44:7c:5c:d4:04:c8:6f:ab:43:80:77:e5:
5d:ef:ae:23:4f:fe:94:61:30:b1:7a:4d:48:c1:f8:
52:18:f4:24:9b:ea:f5:6e:59:17:4c:41:82:55:be:
e7:d6:a1:fa:44:ef:53:6f:db:21:c2:9a:66:46:77:
e7:f9:3b:ec:8a:bd:49:21:e2:79:22:31:8c:bc:36:
b9:43:5c:bc:c8:b8:69:55:32:cb:38:0f:86:44:15:
22:2d:4c:bf:3c:e8:f1:94:7b:cc:ac:b4:a6:5a:fc:
03:ae:d4:a0:70:dc:e6:3a:03:79:df:ed:c8:46:bc:
70:b8:87:ce:a1:2e:f1:cd:4c:ba:75:63:01:62:d3:
f0:7c:be:1f:6c:9e:e1:18:d6:19:69:af:5f:8e:8f:
63:c4:13:8e:fb:e4:84:7d:a0:76:a7:e7:d9:2f:ab:
54:e8:6c:3e:3f:7f:90:a3:1f:b0:f3:f5:c5:91:ba:
63:69:2b:c3:49:a2:51:94:6d:fa:b3:12:79:50:37:
d6:a1:e2:54:65:31:04:42:17:93:2c:f9:d3:b9:d8:
85:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:9C:AD:71:7F:10:A4:C6:D2:6C:52:AA:EA:E8:87:0C:F3:BD:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbb51d1a-eee7-30be-a55a-413eebd380ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.145.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:4e:cd:68:9a:74:c3:6e:27:84:79:26:23:d2:b0:89:e3:37:
c3:61:87:10:6a:ad:59:55:e2:ba:15:ce:5f:62:08:e3:13:73:
7d:e2:58:9c:19:97:2d:7b:fa:e0:14:7b:64:80:0f:d0:3c:4a:
6a:62:8d:b7:55:08:30:61:e3:64:47:50:60:10:23:42:cb:a1:
5f:5f:1b:c4:13:39:2d:98:65:f4:fd:b0:ec:04:fa:cb:8b:ee:
d6:ff:a8:64:f0:2e:90:31:3a:fe:ee:ae:51:21:a4:08:33:79:
fd:77:a5:e8:7a:a2:80:d9:a0:29:b2:d8:26:e2:ac:d8:13:9f:
cd:06:f4:3e:ff:fc:1d:c1:2e:95:2c:83:8a:57:ab:bf:39:30:
03:33:8d:e5:62:a4:21:a0:fc:d9:1c:91:39:16:e9:53:e5:50:
fe:a7:4b:bf:c5:a1:f5:0a:fd:5d:dd:d9:9b:1f:74:06:77:eb:
e5:7c:43:12:bf:fa:bc:a8:f1:8f:ba:1d:f7:ef:00:d6:77:bf:
7e:63:b1:a9:4a:f2:78:49:ec:10:fd:73:3c:46:25:70:0a:cc:
f7:e8:e5:c8:bf:63:07:4c:10:41:59:be:12:34:d3:ac:17:5d:
85:01:e3:95:d0:80:3d:f0:8a:8c:08:3e:d9:f2:bf:8a:3b:e7:
a5:3a:99:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO3A/mTZze077vEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MDZkNWUwOTYtOGU2Yi00ZTc4LWJjMDctZTIzY2ZkNmViNmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDIsA3p9AkgLDloUYDUZfFIGerxKmAP1Mnxq
nPpRZBQYeCWo9QKHkWG8cc4NccJEfFzUBMhvq0OAd+Vd764jT/6UYTCxek1IwfhS
GPQkm+r1blkXTEGCVb7n1qH6RO9Tb9shwppmRnfn+Tvsir1JIeJ5IjGMvDa5Q1y8
yLhpVTLLOA+GRBUiLUy/POjxlHvMrLSmWvwDrtSgcNzmOgN53+3IRrxwuIfOoS7x
zUy6dWMBYtPwfL4fbJ7hGNYZaa9fjo9jxBOO++SEfaB2p+fZL6tU6Gw+P3+Qox+w
8/XFkbpjaSvDSaJRlG36sxJ5UDfWoeJUZTEEQheTLPnTudiFbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDsVnK1xfxCkxtJsUqrq6IcM8733MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmJiNTFkMWEtZWVlNy0z
MGJlLWE1NWEtNDEzZWViZDM4MGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSZEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMxOzWiadMNuJ4R5JiPSsInjN8NhhxBqrVlV4roVzl9iCOMTc33iWJwZ
ly17+uAUe2SAD9A8SmpijbdVCDBh42RHUGAQI0LLoV9fG8QTOS2YZfT9sOwE+suL
7tb/qGTwLpAxOv7urlEhpAgzef13peh6ooDZoCmy2CbirNgTn80G9D7//B3BLpUs
g4pXq785MAMzjeVipCGg/NkckTkW6VPlUP6nS7/FofUK/V3d2ZsfdAZ36+V8QxK/
+ryo8Y+6HffvANZ3v35jsalK8nhJ7BD9czxGJXAKzPfo5ci/YwdMEEFZvhI006wX
XYUB45XQgD3wiowIPtnyv4o756U6mfM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:46:12 2025 by rpki-client