Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e23dc3d-7531-3e1d-be65-92b8f5706a5c.roa
File: 0e23dc3d-7531-3e1d-be65-92b8f5706a5c.roa (raw, json)
Hash identifier: 7POjZChOeqV7bfGcMneJXswrqHT1wytDUVIRx5y6xqw=
Subject key identifier: 8F:F6:6F:93:CE:BE:EE:CA:A0:97:F3:AF:A9:DB:01:E6:A7:7E:A2:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C48BCECC087DEE2248580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e23dc3d-7531-3e1d-be65-92b8f5706a5c.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 13367
IP address blocks: 73.62.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:48:bc:ec:c0:87:de:e2:24:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=aa91801b-106d-45ad-be4f-f2409e9fcc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c8:24:70:10:56:94:66:41:28:8c:85:a4:6e:
88:62:e2:eb:16:2e:9f:15:8c:d0:87:db:e2:fc:ee:
d5:f4:df:d9:7e:d6:26:4c:8f:94:8a:81:d3:07:a8:
38:3f:61:14:c1:4a:53:d5:cc:19:d2:b7:5e:cd:16:
33:49:dc:82:f5:c4:e6:24:46:84:f8:63:18:c0:b5:
b5:b3:61:3f:53:9d:9d:8a:c4:df:e1:b3:8f:ba:ba:
54:ec:32:77:06:e4:f5:9b:c6:86:ae:9d:91:1c:e8:
86:a8:2e:cb:62:8f:56:a4:4a:6f:1e:0c:0b:33:4b:
24:8c:bd:4d:55:24:38:0b:bd:41:77:f7:97:9a:bc:
2c:c2:8c:ec:5f:da:25:4f:b7:95:9c:8f:4f:43:b2:
b4:81:ff:9c:0a:11:a8:69:02:06:49:ec:aa:1c:b8:
fc:be:e0:b6:ea:83:c9:14:df:57:79:cf:61:ab:86:
4a:71:27:80:db:c5:31:ee:02:f4:a4:71:fd:e0:07:
9e:8f:14:75:9a:b7:04:4b:1c:2d:b3:d2:8f:c5:42:
7d:cb:53:2f:6f:c7:c6:95:2c:14:d7:cb:84:c4:a1:
af:b1:79:27:d9:8d:11:52:43:ef:44:1f:17:f4:cf:
11:86:3e:13:fe:d9:95:fa:4d:78:b2:2a:3e:71:18:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F6:6F:93:CE:BE:EE:CA:A0:97:F3:AF:A9:DB:01:E6:A7:7E:A2:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e23dc3d-7531-3e1d-be65-92b8f5706a5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.62.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:6f:81:8d:b2:e6:e4:29:d6:b0:81:ea:76:9a:ef:4f:93:53:
51:00:9e:56:fc:99:0a:c1:0c:57:f9:1e:64:06:c2:ba:a7:4e:
57:53:19:63:03:6d:d9:bd:a0:4b:ef:7a:7c:e4:2e:9b:a4:1a:
56:56:cc:13:bb:bb:15:4d:20:0c:e0:02:df:4c:11:9c:c6:51:
1d:8f:0c:a8:88:f4:da:c4:7d:8d:d7:d9:49:53:2a:31:b0:fc:
5c:ef:cb:ae:ac:25:0b:dd:bf:b0:80:0d:c9:a4:9d:1c:1a:68:
3d:9f:19:bf:ad:1d:f3:07:d2:85:ac:93:c8:16:84:3c:68:d8:
75:55:bc:92:ca:de:04:8f:8f:f4:01:c1:46:c5:f8:e0:ae:68:
66:b2:76:f3:1e:f6:b8:8f:58:f6:25:c9:35:b7:6d:ca:38:a4:
ce:1a:2c:c3:18:10:3f:e7:a6:90:18:0a:02:e5:88:06:ab:71:
35:96:35:04:cf:ac:ff:d4:53:ee:d1:c2:e4:f5:7b:24:32:4e:
25:a8:21:79:18:69:7f:f7:5a:9d:f9:0c:5d:3e:14:22:30:64:
b6:d6:df:73:2f:35:4e:4a:d1:46:78:ef:03:9e:be:ab:83:4a:
09:ab:59:5c:7c:4c:5a:24:fc:2f:7f:4a:17:f8:50:12:0c:bf:
84:14:21:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLEi87MCH3uIkhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
YWE5MTgwMWItMTA2ZC00NWFkLWJlNGYtZjI0MDllOWZjYzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcgkcBBWlGZBKIyFpG6IYuLrFi6fFYzQh9vi
/O7V9N/ZftYmTI+UioHTB6g4P2EUwUpT1cwZ0rdezRYzSdyC9cTmJEaE+GMYwLW1
s2E/U52disTf4bOPurpU7DJ3BuT1m8aGrp2RHOiGqC7LYo9WpEpvHgwLM0skjL1N
VSQ4C71Bd/eXmrwswozsX9olT7eVnI9PQ7K0gf+cChGoaQIGSeyqHLj8vuC26oPJ
FN9Xec9hq4ZKcSeA28Ux7gL0pHH94AeejxR1mrcESxwts9KPxUJ9y1Mvb8fGlSwU
18uExKGvsXkn2Y0RUkPvRB8X9M8Rhj4T/tmV+k14sio+cRhfSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/2b5POvu7KoJfzr6nbAeanfqJCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGUyM2RjM2QtNzUzMS0z
ZTFkLWJlNjUtOTJiOGY1NzA2YTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCST7MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1vgY2y5uQp1rCB6naa70+TU1EAnlb8mQrBDFf5HmQGwrqnTldTGWMD
bdm9oEvvenzkLpukGlZWzBO7uxVNIAzgAt9MEZzGUR2PDKiI9NrEfY3X2UlTKjGw
/Fzvy66sJQvdv7CADcmknRwaaD2fGb+tHfMH0oWsk8gWhDxo2HVVvJLK3gSPj/QB
wUbF+OCuaGaydvMe9riPWPYlyTW3bco4pM4aLMMYED/nppAYCgLliAarcTWWNQTP
rP/UU+7RwuT1eyQyTiWoIXkYaX/3Wp35DF0+FCIwZLbW33MvNU5K0UZ47wOevquD
SgmrWVx8TFok/C9/Shf4UBIMv4QUIf0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:11:15 2025 by rpki-client