Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2581e8ea-a0c5-3991-ad26-ad8b25aae4ae.roa
File: 2581e8ea-a0c5-3991-ad26-ad8b25aae4ae.roa (raw, json)
Hash identifier: mo+D1Ed1dX75QyJyWpG0tm5XI9udSrmdnNXuyPgmFJ8=
Subject key identifier: D4:F2:DD:F8:67:84:53:66:E0:1C:89:56:99:FC:AF:D2:B6:87:33:58
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CFC8BEFE7A16205F1C800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2581e8ea-a0c5-3991-ad26-ad8b25aae4ae.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 73.121.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:fc:8b:ef:e7:a1:62:05:f1:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=42ae418e-89f0-4940-a8ba-2d0626fee5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:05:c6:a6:57:b0:be:17:78:26:d3:42:b7:
1b:02:2c:12:27:fb:aa:4c:3b:29:d8:12:dd:2c:00:
67:83:e2:b6:5b:bc:77:2f:63:85:a7:02:8a:39:33:
61:8f:32:fc:7a:7e:6d:5c:36:62:13:38:e7:f9:75:
c6:5f:98:47:93:7a:0e:e4:13:3a:2b:34:72:97:40:
d4:fa:ba:05:ad:5f:33:00:17:44:d6:a0:00:b7:e5:
77:33:03:74:f4:4d:a6:a0:7a:4b:cb:f1:ca:70:0d:
0d:ee:2b:2c:e7:f7:02:38:b9:5c:ea:ab:0c:6d:fb:
d7:12:bd:90:d8:f8:68:f3:21:15:c4:16:6a:74:e2:
64:12:3b:1d:e1:2a:b2:77:f4:0b:82:be:08:39:f8:
fc:20:2a:66:89:b8:7a:19:f6:00:66:c1:f6:b1:ec:
e6:f2:dd:39:85:4f:80:bc:89:d4:a3:05:05:3c:ac:
8c:f3:f9:08:82:3b:a4:e7:ad:53:37:c3:0d:cf:df:
16:79:36:30:f7:f6:67:90:b7:ee:63:07:6e:3d:d0:
76:f6:0d:ac:18:8f:24:dc:07:b8:bd:29:19:4e:ee:
fc:59:30:ff:e7:b3:f6:58:63:a4:c1:1a:4e:4f:ff:
44:4f:3c:f1:e5:ff:db:e9:92:bc:03:00:c9:bb:3d:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F2:DD:F8:67:84:53:66:E0:1C:89:56:99:FC:AF:D2:B6:87:33:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2581e8ea-a0c5-3991-ad26-ad8b25aae4ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.121.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d7:64:39:79:ee:6f:63:2b:c8:6c:46:ce:50:9f:bd:e3:42:ea:
7d:ca:34:e6:cf:bf:83:de:bd:42:9d:18:12:6b:00:11:fd:03:
5b:21:62:fc:38:e9:50:26:a0:20:da:9e:98:0e:c9:e1:fa:7d:
b8:18:ee:24:4c:9d:f2:ba:27:d8:d6:a2:06:ff:dc:de:ea:62:
17:1c:78:6b:ff:bc:ee:50:7f:4b:8f:fb:2f:41:ee:97:2f:50:
40:e8:2a:74:16:4e:cb:5d:91:d1:26:e3:dd:a3:dd:7d:22:cc:
55:7d:ab:7b:b6:a9:11:56:64:f4:df:10:a5:62:9c:c5:05:7b:
c9:a7:f6:e1:1f:97:a7:a3:25:2e:57:c3:f2:fc:76:3e:80:71:
a5:d5:c9:8b:08:34:96:a1:0b:01:e1:5f:0b:c7:76:43:16:21:
fc:f4:91:6a:31:53:c9:90:7a:e6:c0:f2:2b:1a:07:f1:79:12:
b3:16:35:51:77:00:f7:45:3b:ec:59:ae:ca:dc:b2:e1:11:0f:
d2:03:bb:19:bb:df:3d:41:c5:f3:2e:31:fe:b0:fd:d2:8f:9f:
af:02:cd:c9:a6:39:be:04:a4:d6:c3:d1:ce:7a:fb:2a:e0:bb:
98:ca:49:f4:db:99:f6:b9:c7:25:20:43:22:6b:da:ec:55:bd:
19:64:bd:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebPyL7+ehYgXxyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NDJhZTQxOGUtODlmMC00OTQwLWE4YmEtMmQwNjI2ZmVlNWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jMFxqZXsL4XeCbTQrcbAiwSJ/uqTDsp2BLd
LABng+K2W7x3L2OFpwKKOTNhjzL8en5tXDZiEzjn+XXGX5hHk3oO5BM6KzRyl0DU
+roFrV8zABdE1qAAt+V3MwN09E2moHpLy/HKcA0N7iss5/cCOLlc6qsMbfvXEr2Q
2Pho8yEVxBZqdOJkEjsd4Sqyd/QLgr4IOfj8ICpmibh6GfYAZsH2sezm8t05hU+A
vInUowUFPKyM8/kIgjuk561TN8MNz98WeTYw9/ZnkLfuYwduPdB29g2sGI8k3Ae4
vSkZTu78WTD/57P2WGOkwRpOT/9ETzzx5f/b6ZK8AwDJuz0AoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTy3fhnhFNm4ByJVpn8r9K2hzNYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjU4MWU4ZWEtYTBjNS0z
OTkxLWFkMjYtYWQ4YjI1YWFlNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXkIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANdkOXnub2MryGxGzlCfveNC6n3KNObPv4PevUKdGBJrABH9A1shYvw4
6VAmoCDanpgOyeH6fbgY7iRMnfK6J9jWogb/3N7qYhcceGv/vO5Qf0uP+y9B7pcv
UEDoKnQWTstdkdEm492j3X0izFV9q3u2qRFWZPTfEKVinMUFe8mn9uEfl6ejJS5X
w/L8dj6AcaXVyYsINJahCwHhXwvHdkMWIfz0kWoxU8mQeubA8isaB/F5ErMWNVF3
APdFO+xZrsrcsuERD9IDuxm73z1BxfMuMf6w/dKPn68CzcmmOb4EpNbD0c56+yrg
u5jKSfTbmfa5xyUgQyJr2uxVvRlkvZA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:26 2025 by rpki-client