Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d3e27a7-3364-3cf7-b9ea-0ffd6e499f01.roa
File: 1d3e27a7-3364-3cf7-b9ea-0ffd6e499f01.roa (raw, json)
Hash identifier: 8dlSnENaNHsbQYlLYzRCpvQqyzfZqmugBlq+cVzZMiw=
Subject key identifier: 67:8E:05:DC:07:DD:4E:FA:0C:29:E2:6A:AF:D4:BE:FF:10:8A:63:72
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7F3CE80B6422EAB02FA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d3e27a7-3364-3cf7-b9ea-0ffd6e499f01.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 73.55.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:f3:ce:80:b6:42:2e:ab:02:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=47b606fd-b83d-4bf6-ba37-c56bf2d21e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:47:1d:9e:34:c2:c0:25:b8:35:fb:03:1a:
3e:09:bf:de:18:e4:d8:7c:4e:83:01:d4:37:cb:32:
1b:74:36:2a:c9:d8:46:b0:9b:2f:d9:6d:c9:37:a6:
a1:18:09:05:3b:5b:cd:80:1d:c5:61:41:82:f7:82:
9b:c2:60:28:2a:4f:1d:5e:75:0b:66:2f:bb:19:fe:
92:89:5d:b7:85:43:76:98:b4:5f:2c:f4:a8:ef:56:
a8:01:79:b9:80:7f:b4:50:df:9b:36:78:85:17:9f:
82:c1:d1:ae:23:46:72:47:2d:51:b5:28:57:09:1a:
80:bf:d4:0c:9f:b2:ce:03:f4:36:ad:95:7f:b0:c2:
58:6b:bb:5e:06:ce:75:dd:69:0b:d9:93:2f:60:25:
91:3e:d2:7a:7b:71:23:16:1a:69:8e:d5:33:cd:a2:
2e:a1:35:80:47:17:2d:15:63:8f:52:34:f7:88:96:
d9:af:75:c6:bf:dd:de:a6:fc:cb:d6:07:45:81:e1:
33:12:9c:65:34:36:c7:99:e8:19:f1:f4:ef:06:f0:
19:bb:90:fb:ac:58:70:97:9c:e4:b5:52:e9:b8:5a:
ad:3f:d7:3c:40:f8:4a:dc:44:c4:8e:6f:46:37:05:
bc:dc:24:69:26:77:42:95:e9:cf:14:1b:e2:ac:19:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8E:05:DC:07:DD:4E:FA:0C:29:E2:6A:AF:D4:BE:FF:10:8A:63:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d3e27a7-3364-3cf7-b9ea-0ffd6e499f01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.55.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:7f:92:17:6d:c0:94:4f:98:ba:58:86:2c:ef:78:0a:d1:e4:
be:27:33:bd:6c:de:f2:17:17:e5:95:4f:65:05:70:a5:4d:b9:
bb:3c:a3:45:41:1d:5e:d8:51:9e:c9:3d:fe:08:58:61:55:aa:
80:c9:1b:5f:13:fe:4e:45:18:97:39:dd:b9:3c:1a:26:4c:68:
06:8c:df:a6:ec:b0:ab:94:4a:bd:05:9f:3d:43:a4:5a:e7:7a:
71:79:c1:a8:08:59:8f:68:ce:e2:2c:fb:85:93:4a:c7:f0:06:
5e:8c:43:0b:e6:d1:ce:62:81:8f:eb:e2:29:35:27:64:eb:a3:
ba:13:bf:0d:0f:c2:cf:a0:8f:11:44:14:96:56:f7:0b:6a:7b:
15:7e:4b:b4:db:05:d1:0d:3f:c7:14:53:cd:56:50:63:05:d1:
e5:fc:b3:3d:2c:fd:aa:b7:b8:c4:01:38:56:a5:e5:f5:44:81:
d3:83:d0:42:3b:19:ea:74:dd:41:da:ce:e7:50:62:3c:28:a7:
48:86:6e:28:44:89:32:fe:e3:0f:d4:8f:18:c8:3a:3d:0c:03:
15:96:3d:b2:aa:d8:58:0c:97:2a:fe:b5:17:ac:5c:94:34:8f:
0f:a7:01:5b:ea:65:a4:ee:55:1f:87:ae:76:17:85:f9:5b:9f:
75:c9:97:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09/POgLZCLqsC+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NDdiNjA2ZmQtYjgzZC00YmY2LWJhMzctYzU2YmYyZDIxZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7xHHZ40wsAluDX7Axo+Cb/eGOTYfE6DAdQ3
yzIbdDYqydhGsJsv2W3JN6ahGAkFO1vNgB3FYUGC94KbwmAoKk8dXnULZi+7Gf6S
iV23hUN2mLRfLPSo71aoAXm5gH+0UN+bNniFF5+CwdGuI0ZyRy1RtShXCRqAv9QM
n7LOA/Q2rZV/sMJYa7teBs513WkL2ZMvYCWRPtJ6e3EjFhppjtUzzaIuoTWARxct
FWOPUjT3iJbZr3XGv93epvzL1gdFgeEzEpxlNDbHmegZ8fTvBvAZu5D7rFhwl5zk
tVLpuFqtP9c8QPhK3ETEjm9GNwW83CRpJndClenPFBvirBmBiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGeOBdwH3U76DCniaq/Uvv8QimNyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQzZTI3YTctMzM2NC0z
Y2Y3LWI5ZWEtMGZmZDZlNDk5ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSTfMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALd/khdtwJRPmLpYhizveArR5L4nM71s3vIXF+WVT2UFcKVNubs8o0VB
HV7YUZ7JPf4IWGFVqoDJG18T/k5FGJc53bk8GiZMaAaM36bssKuUSr0Fnz1DpFrn
enF5wagIWY9ozuIs+4WTSsfwBl6MQwvm0c5igY/r4ik1J2Tro7oTvw0Pws+gjxFE
FJZW9wtqexV+S7TbBdENP8cUU81WUGMF0eX8sz0s/aq3uMQBOFal5fVEgdOD0EI7
Gep03UHazudQYjwop0iGbihEiTL+4w/UjxjIOj0MAxWWPbKq2FgMlyr+tResXJQ0
jw+nAVvqZaTuVR+HrnYXhflbn3XJlxU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:58:51 2025 by rpki-client