Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/157e9a9e-4881-3e2d-bf9f-37e028c56f4f.roa
File: 157e9a9e-4881-3e2d-bf9f-37e028c56f4f.roa (raw, json)
Hash identifier: 2yWRl2qK9cpsTulsCgcxLwLKJ+fmSqwiNxNjZzQ25ic=
Subject key identifier: FE:5B:92:0F:5C:C3:EB:C8:E5:C6:DB:F2:61:BB:72:E9:88:DC:DB:81
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F895F8994AA03B3337E6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/157e9a9e-4881-3e2d-bf9f-37e028c56f4f.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.227.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:95:f8:99:4a:a0:3b:33:37:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=570d0c8b-9728-4080-8e83-de3cce703570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:fa:ee:76:ca:c0:23:c7:29:68:df:8f:56:
8f:ed:3b:8c:03:41:e8:17:c6:39:b1:6e:3c:d7:8b:
d5:ff:90:d9:da:b7:95:56:0c:78:7a:86:55:a6:5d:
b2:32:37:4b:24:71:e5:4a:d9:3c:78:c1:cb:ff:48:
94:4c:de:4d:45:de:3a:94:a9:82:d0:34:73:54:d4:
ee:2f:ac:71:f6:cf:12:db:f7:b7:68:f7:35:31:39:
c7:66:5f:b1:5d:19:ac:8a:b4:f0:65:61:cc:cb:87:
6f:70:72:6c:6b:76:17:95:ee:88:b7:ff:d4:e9:aa:
c9:21:3e:2b:da:c5:9a:88:54:62:ff:fa:ae:83:ef:
28:06:6a:4a:57:64:9e:aa:6b:f3:7f:2a:41:c4:dd:
db:11:97:d1:c5:18:b6:75:e9:d0:88:6b:1a:23:f3:
4f:9f:25:d1:f3:ba:de:31:2f:18:03:34:47:8a:4f:
1b:05:cc:d9:6f:8e:ac:21:d4:db:08:19:a8:0a:f1:
6a:d2:19:fb:39:d0:64:fd:f5:4a:44:3b:ea:d5:c8:
92:c6:fe:c6:66:60:e6:61:1d:4d:66:92:4b:bf:00:
3a:5c:48:1e:be:ba:0c:a6:17:64:47:33:e1:df:6f:
c2:fd:32:a1:5a:a1:8a:19:ba:3b:91:25:00:27:7c:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5B:92:0F:5C:C3:EB:C8:E5:C6:DB:F2:61:BB:72:E9:88:DC:DB:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/157e9a9e-4881-3e2d-bf9f-37e028c56f4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.227.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:3e:18:da:4f:59:6b:3a:48:64:1a:61:2c:2d:41:7d:6c:59:
5e:a0:af:e6:e3:ed:9f:b3:f0:1f:f4:af:25:4d:59:13:de:90:
10:9f:f2:d7:34:2a:d6:3f:ad:ca:7f:6a:41:49:2f:c7:da:ff:
0c:af:aa:f1:d9:db:8a:96:61:80:6e:c6:91:bd:6a:22:5e:0e:
71:08:0a:d1:5e:9d:8d:f4:bf:7e:f9:22:3d:ec:f6:ff:d7:bc:
a1:cc:3f:55:64:9d:7e:ed:47:0f:5c:7f:31:53:ad:d6:4b:57:
81:70:52:b2:92:b7:59:68:61:3c:b0:24:68:63:3c:ce:0e:13:
ef:92:35:ff:40:9a:cf:c7:81:a2:3e:dd:b3:db:53:7b:13:55:
ce:ad:e6:36:2c:d4:c6:f2:49:69:8e:b7:96:52:e9:fa:b0:ca:
8b:3b:c7:be:14:d9:62:51:cd:37:9a:5a:f9:aa:54:f6:14:d3:
db:d5:18:9b:ec:67:86:d0:0f:a7:70:1f:5d:65:79:cb:62:2c:
0f:a7:9e:15:f8:ed:ac:92:b0:19:ed:73:78:0d:f5:6c:9f:1c:
b1:95:41:e9:64:cd:4a:0e:99:9e:2f:1d:2b:fb:4c:4d:8a:f2:
27:71:85:ba:43:b7:8b:53:b5:2c:ab:c2:9a:79:6a:38:57:37:
a0:b7:3d:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+JX4mUqgOzM35sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NTcwZDBjOGItOTcyOC00MDgwLThlODMtZGUzY2NlNzAzNTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXH67nbKwCPHKWjfj1aP7TuMA0HoF8Y5sW48
14vV/5DZ2reVVgx4eoZVpl2yMjdLJHHlStk8eMHL/0iUTN5NRd46lKmC0DRzVNTu
L6xx9s8S2/e3aPc1MTnHZl+xXRmsirTwZWHMy4dvcHJsa3YXle6It//U6arJIT4r
2sWaiFRi//qug+8oBmpKV2SeqmvzfypBxN3bEZfRxRi2denQiGsaI/NPnyXR87re
MS8YAzRHik8bBczZb46sIdTbCBmoCvFq0hn7OdBk/fVKRDvq1ciSxv7GZmDmYR1N
ZpJLvwA6XEgevroMphdkRzPh32/C/TKhWqGKGbo7kSUAJ3zM7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5bkg9cw+vI5cbb8mG7cumI3NuBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTU3ZTlhOWUtNDg4MS0z
ZTJkLWJmOWYtMzdlMDI4YzU2ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeMUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABk+GNpPWWs6SGQaYSwtQX1sWV6gr+bj7Z+z8B/0ryVNWRPekBCf8tc0
KtY/rcp/akFJL8fa/wyvqvHZ24qWYYBuxpG9aiJeDnEICtFenY30v375Ij3s9v/X
vKHMP1VknX7tRw9cfzFTrdZLV4FwUrKSt1loYTywJGhjPM4OE++SNf9Ams/HgaI+
3bPbU3sTVc6t5jYs1MbySWmOt5ZS6fqwyos7x74U2WJRzTeaWvmqVPYU09vVGJvs
Z4bQD6dwH11lectiLA+nnhX47aySsBntc3gN9WyfHLGVQelkzUoOmZ4vHSv7TE2K
8idxhbpDt4tTtSyrwpp5ajhXN6C3Pd0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:31 2025 by rpki-client