Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac9ddd7-d3f5-321f-8f29-374b1a3a63e8.roa
File: 2ac9ddd7-d3f5-321f-8f29-374b1a3a63e8.roa (raw, json)
Hash identifier: JAUz463BNmeIHfRRTnLwefHFsvwDqA5Job0j3EMOSMg=
Subject key identifier: D9:2A:55:14:2A:F0:3E:26:A2:1A:67:A6:24:B9:BA:57:15:72:B5:1A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFA6855D9E81DB18E8D1E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac9ddd7-d3f5-321f-8f29-374b1a3a63e8.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.8.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:a6:85:5d:9e:81:db:18:e8:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=a5a56e4b-83bb-47e5-b7c3-e976fe237873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:f0:08:fe:b4:bc:8c:3b:07:1e:63:24:7c:
1a:1a:5f:23:bc:40:4d:92:25:21:83:e6:c0:17:92:
b6:3a:cd:83:4c:34:ff:95:11:ec:4a:78:56:3c:01:
8e:b3:e6:62:2e:26:4a:39:0e:0a:80:7e:3d:e0:c0:
5e:58:92:40:a4:04:cc:8c:48:9b:9e:9d:81:16:4f:
af:fe:64:6b:63:61:c9:32:19:b4:3d:db:9b:92:b0:
19:34:70:1e:90:1a:7d:62:25:64:93:23:0f:6a:22:
a1:87:35:54:8e:97:4e:01:40:a3:af:6b:b4:1b:1a:
da:f4:0f:77:0e:e9:dd:94:78:bc:e9:54:48:c4:49:
bf:d0:6f:05:07:3e:f6:d1:68:f6:49:ac:fe:8c:59:
2c:5c:92:c7:7a:c3:6b:56:72:17:9c:a2:02:35:f5:
af:68:d5:9c:99:8a:29:09:4f:06:fd:e8:bb:ac:a6:
e1:0b:09:5d:d5:e6:7c:fd:49:78:71:f7:29:68:34:
8d:b4:49:30:04:56:a7:88:ea:ac:83:32:f3:f5:2e:
0c:39:53:10:a5:d6:8e:2a:d0:2d:12:c0:2e:52:35:
9e:3e:78:19:bb:1c:2a:9c:9b:cc:d0:27:c6:ab:31:
01:60:9f:5a:e3:d5:af:ba:8a:fc:0f:1c:e0:f4:f1:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:55:14:2A:F0:3E:26:A2:1A:67:A6:24:B9:BA:57:15:72:B5:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac9ddd7-d3f5-321f-8f29-374b1a3a63e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.8.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:81:3e:6c:9b:0e:a7:be:b6:60:98:5a:b9:a9:05:25:87:97:
43:01:5d:1c:18:87:be:04:95:77:68:8f:34:d1:a9:8d:2e:3f:
de:d3:aa:dd:46:89:26:85:1d:46:d8:c5:8b:1e:a9:71:23:10:
80:d6:0c:20:ec:f2:6c:9d:4a:8e:16:8d:77:a3:5e:c2:0f:c0:
33:79:b5:a4:f5:db:86:cb:b2:d5:ed:c4:a4:e3:98:a3:0a:5d:
14:fa:3a:ed:2c:8b:ed:88:6a:99:df:66:d7:9d:27:36:9c:b8:
4e:18:1c:75:69:b5:73:51:b8:b5:3e:88:ba:fe:4e:d1:33:55:
34:e3:83:b5:e7:be:43:0f:05:5d:f7:eb:87:bd:fe:68:a8:fd:
61:f0:6b:89:0e:d1:f7:c4:09:e4:7c:04:ab:31:6a:c1:01:2c:
54:f7:40:35:a1:f6:22:e4:a0:1b:fd:e4:56:ef:91:1b:bc:c7:
77:7a:b9:40:40:01:fb:02:21:a3:a5:99:45:5d:bb:d2:eb:5e:
a4:64:38:a3:4b:80:3f:9d:6a:04:e9:15:e5:e3:a6:86:e1:b6:
be:e6:05:45:45:bf:72:0e:83:f6:fb:a4:0f:82:23:69:9f:b9:
ba:9b:d4:b0:f9:3c:61:6a:07:ff:94:2f:f6:e2:bb:05:cd:f3:
3d:f5:e0:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr6aFXZ6B2xjo0eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YTVhNTZlNGItODNiYi00N2U1LWI3YzMtZTk3NmZlMjM3ODczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkorwCP60vIw7Bx5jJHwaGl8jvEBNkiUhg+bA
F5K2Os2DTDT/lRHsSnhWPAGOs+ZiLiZKOQ4KgH494MBeWJJApATMjEibnp2BFk+v
/mRrY2HJMhm0PdubkrAZNHAekBp9YiVkkyMPaiKhhzVUjpdOAUCjr2u0Gxra9A93
DundlHi86VRIxEm/0G8FBz720Wj2Saz+jFksXJLHesNrVnIXnKICNfWvaNWcmYop
CU8G/ei7rKbhCwld1eZ8/Ul4cfcpaDSNtEkwBFaniOqsgzLz9S4MOVMQpdaOKtAt
EsAuUjWePngZuxwqnJvM0CfGqzEBYJ9a49Wvuor8Dxzg9PEPswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkqVRQq8D4mohpnpiS5ulcVcrUaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFjOWRkZDctZDNmNS0z
MjFmLThmMjktMzc0YjFhM2E2M2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQgKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANmBPmybDqe+tmCYWrmpBSWHl0MBXRwYh74ElXdojzTRqY0uP97Tqt1G
iSaFHUbYxYseqXEjEIDWDCDs8mydSo4WjXejXsIPwDN5taT124bLstXtxKTjmKMK
XRT6Ou0si+2IapnfZtedJzacuE4YHHVptXNRuLU+iLr+TtEzVTTjg7XnvkMPBV33
64e9/mio/WHwa4kO0ffECeR8BKsxasEBLFT3QDWh9iLkoBv95FbvkRu8x3d6uUBA
AfsCIaOlmUVdu9LrXqRkOKNLgD+dagTpFeXjpobhtr7mBUVFv3IOg/b7pA+CI2mf
ubqb1LD5PGFqB/+UL/biuwXN8z314JM=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:51:49 2025 by rpki-client