Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13c99d98-0939-3667-b2a4-437e5a4d99c2.roa
File: 13c99d98-0939-3667-b2a4-437e5a4d99c2.roa (raw, json)
Hash identifier: zpIP9Vqhx8iNoC13LJOn0gcfRGd4zTwE2Ngz0qoHG74=
Subject key identifier: D6:40:31:85:96:00:2B:D6:58:7B:86:13:1D:8B:FE:9C:53:D0:F4:27
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB054D01D9CA3BDB81B5200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13c99d98-0939-3667-b2a4-437e5a4d99c2.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.10.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:54:d0:1d:9c:a3:bd:b8:1b:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=eb5e3ce3-4c82-44c5-bb85-e6810930e2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:6c:5f:aa:bc:c6:b1:ed:87:13:38:dc:14:
29:3e:ed:39:e1:24:bf:f6:e6:1d:44:a1:6b:eb:55:
94:fe:d6:65:40:fa:25:f8:17:bc:2f:18:d2:3a:c0:
6e:fe:e1:52:31:cb:4a:6d:4c:42:de:2c:75:82:2c:
64:6f:d0:67:5c:1e:81:4f:85:85:46:71:54:0b:3a:
ab:89:9c:ac:ca:76:96:90:cc:be:05:15:d7:5a:ba:
68:08:e2:f5:e5:ba:37:1b:85:3c:eb:81:61:85:70:
7a:50:51:84:a2:fd:02:64:78:cd:f3:18:e8:7e:20:
fd:88:41:42:01:2a:4c:4b:96:6b:ad:23:e2:80:6a:
78:db:94:88:f4:fa:11:6b:4f:11:dc:99:2a:fc:e1:
e2:67:47:e3:8a:94:75:58:0f:da:4b:ad:3c:e6:1b:
13:66:60:bf:97:00:51:54:34:13:0e:1c:a4:0d:a1:
09:c9:c3:34:98:cf:3d:8b:9d:fa:9e:96:51:7a:29:
3f:f0:6f:a3:f7:78:d1:ab:f6:d7:ef:f1:4c:ca:e2:
ec:ec:59:0b:07:a9:34:94:59:3a:32:33:04:ad:04:
70:89:3d:d4:cc:2d:92:20:a9:75:ed:93:79:a3:4c:
86:5a:02:f0:9f:1d:36:e8:4e:08:32:a8:f9:4c:f3:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:40:31:85:96:00:2B:D6:58:7B:86:13:1D:8B:FE:9C:53:D0:F4:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13c99d98-0939-3667-b2a4-437e5a4d99c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.10.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:10:89:b0:fb:50:4f:fa:db:7d:af:37:cd:a0:74:db:60:29:
52:f6:5d:ab:38:c1:de:ee:15:81:07:42:d2:6f:c7:2d:6e:5b:
15:80:93:a0:64:0c:60:2a:52:1c:00:e2:33:dc:5a:2f:42:3e:
9f:66:37:05:e9:bc:86:7c:41:82:4d:f6:3a:d0:01:5d:51:df:
b2:e3:f2:6d:c9:94:08:15:a3:8f:5d:cc:0e:79:65:ae:a4:8b:
fd:63:c2:da:90:32:fb:e4:a4:42:e1:33:10:59:21:c7:03:db:
79:62:eb:fb:30:1e:e1:2a:e1:86:dc:a2:95:f6:1b:0b:a9:69:
27:fa:94:c1:d8:de:12:1d:99:b3:16:03:d4:d4:aa:db:a4:38:
76:55:6e:e0:15:6d:27:a7:be:35:d6:ff:5c:0e:1d:a0:13:5d:
d0:24:bb:df:4d:9f:04:f1:cd:18:76:df:ac:88:55:64:09:77:
bf:9b:7d:7c:19:9c:6a:a4:28:2c:fd:65:46:f7:a3:c9:1d:a8:
5f:b3:49:ea:a3:7f:a8:c1:63:93:ca:3f:9a:85:a2:72:d4:bd:
6b:2a:b1:ce:76:35:ca:2a:4f:be:82:8f:cc:ec:d2:97:ac:6f:
33:6b:a6:48:95:57:7b:86:ce:40:b7:a8:08:cb:6a:e2:8e:15:
a4:85:54:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssFTQHZyjvbgbUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZWI1ZTNjZTMtNGM4Mi00NGM1LWJiODUtZTY4MTA5MzBlMmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6NsX6q8xrHthxM43BQpPu054SS/9uYdRKFr
61WU/tZlQPol+Be8LxjSOsBu/uFSMctKbUxC3ix1gixkb9BnXB6BT4WFRnFUCzqr
iZysynaWkMy+BRXXWrpoCOL15bo3G4U864FhhXB6UFGEov0CZHjN8xjofiD9iEFC
ASpMS5ZrrSPigGp425SI9PoRa08R3Jkq/OHiZ0fjipR1WA/aS6085hsTZmC/lwBR
VDQTDhykDaEJycM0mM89i536npZReik/8G+j93jRq/bX7/FMyuLs7FkLB6k0lFk6
MjMErQRwiT3UzC2SIKl17ZN5o0yGWgLwnx026E4IMqj5TPPIHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZAMYWWACvWWHuGEx2L/pxT0PQnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTNjOTlkOTgtMDkzOS0z
NjY3LWIyYTQtNDM3ZTVhNGQ5OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSQpwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0QibD7UE/6232vN82gdNtgKVL2Xas4wd7uFYEHQtJvxy1uWxWAk6Bk
DGAqUhwA4jPcWi9CPp9mNwXpvIZ8QYJN9jrQAV1R37Lj8m3JlAgVo49dzA55Za6k
i/1jwtqQMvvkpELhMxBZIccD23li6/swHuEq4YbcopX2GwupaSf6lMHY3hIdmbMW
A9TUqtukOHZVbuAVbSenvjXW/1wOHaATXdAku99NnwTxzRh236yIVWQJd7+bfXwZ
nGqkKCz9ZUb3o8kdqF+zSeqjf6jBY5PKP5qFonLUvWsqsc52NcoqT76Cj8zs0pes
bzNrpkiVV3uGzkC3qAjLauKOFaSFVLw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:24 2025 by rpki-client