Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa
File: 2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa (raw, json)
Hash identifier: COgBcf27fj5QPYESsgFl7txv6K51EabU0jcKikUim+o=
Subject key identifier: 56:34:88:4C:F7:44:13:F9:30:43:12:6B:EE:39:E0:35:65:BB:97:66
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB06D8DFC68C23EF58987C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.199.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:6d:8d:fc:68:c2:3e:f5:89:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=10cb5647-ddec-49ba-96e9-ac70b1578e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:4a:9d:6b:14:51:eb:db:db:4b:c4:c7:d7:
44:8c:0a:37:53:92:e3:ac:ce:69:99:b4:2c:b1:1b:
ea:bb:b1:fd:5f:7d:36:46:be:2e:7e:e4:cb:13:83:
b1:f4:6c:74:80:e4:24:8e:d8:38:ca:33:3f:40:ca:
ea:d2:91:59:e3:e7:c9:9d:eb:fc:ae:ee:5b:47:7a:
b6:f0:b0:fa:37:ac:ec:e2:ee:3e:20:a8:13:86:d8:
f2:25:c7:7a:a2:47:84:83:2f:41:38:34:86:e7:17:
ca:d4:97:bb:3e:41:4a:fa:f0:2f:3c:3d:ee:db:f3:
bc:89:81:81:df:9f:26:7c:f3:a4:8b:a2:70:c7:86:
31:4d:3a:4d:dd:ed:19:44:47:e6:52:f1:7d:1b:a4:
16:70:2a:f0:47:8b:8a:e8:2e:63:e3:2c:a3:d3:b3:
2a:6b:4b:dc:51:a2:52:04:a5:51:ba:b2:a1:08:64:
f4:34:67:e9:82:ef:fd:6f:7a:77:98:f9:e4:1a:55:
74:5d:3d:0c:1a:d5:ba:7f:c0:54:a0:46:57:6d:71:
3b:b7:10:ed:6d:ce:04:56:2e:e0:6d:69:cf:28:ab:
49:91:42:af:02:08:8a:42:cc:a0:96:fb:87:97:93:
94:cc:c5:49:7e:c9:2c:6e:ca:8d:1b:a2:fd:de:aa:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:34:88:4C:F7:44:13:F9:30:43:12:6B:EE:39:E0:35:65:BB:97:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.199.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:a2:5f:0a:07:f2:dd:ac:5d:a4:c1:37:e6:24:54:2a:ea:99:
28:be:56:6a:bf:03:a7:3c:6f:90:3e:f2:bc:19:dc:27:1c:85:
51:7e:84:1a:f5:49:de:28:2b:47:0a:d9:3d:00:d8:e3:e2:8b:
9b:c0:2a:2f:41:d5:5a:ef:9a:6a:3a:6c:78:1b:f3:c5:ff:81:
8b:d8:88:f8:af:51:de:69:b7:20:04:54:43:e4:92:a3:aa:7a:
40:52:84:d5:2e:34:0a:45:95:b2:88:e6:f4:7a:c5:1e:54:b5:
0b:23:27:cb:61:e4:cf:3d:4b:df:f2:23:40:27:66:17:43:ca:
6e:df:fb:ba:89:23:c6:64:be:fc:8e:4b:67:b7:0c:a1:a0:b0:
f2:d1:0a:67:59:e1:3a:da:b5:c3:a4:ed:ff:bd:2a:de:98:0f:
7b:27:aa:f8:1d:3f:82:d9:54:fc:f9:2f:0e:05:b5:58:76:94:
60:bb:cd:f6:1e:de:84:d4:b1:76:ec:5d:c6:9e:b0:5e:0b:0b:
3c:b6:e5:81:a6:0c:89:83:6d:c5:fb:d5:d5:01:83:90:6a:cb:
cf:92:d8:9c:ec:1b:27:f0:23:5b:9f:85:2a:97:cf:d9:ea:4a:
7c:21:0b:29:84:0b:39:d3:00:5f:20:6f:88:65:51:6d:02:75:
a9:0a:7c:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssG2N/GjCPvWJh8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MTBjYjU2NDctZGRlYy00OWJhLTk2ZTktYWM3MGIxNTc4ZTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI1KnWsUUevb20vEx9dEjAo3U5LjrM5pmbQs
sRvqu7H9X302Rr4ufuTLE4Ox9Gx0gOQkjtg4yjM/QMrq0pFZ4+fJnev8ru5bR3q2
8LD6N6zs4u4+IKgThtjyJcd6okeEgy9BODSG5xfK1Je7PkFK+vAvPD3u2/O8iYGB
358mfPOki6Jwx4YxTTpN3e0ZREfmUvF9G6QWcCrwR4uK6C5j4yyj07Mqa0vcUaJS
BKVRurKhCGT0NGfpgu/9b3p3mPnkGlV0XT0MGtW6f8BUoEZXbXE7txDtbc4EVi7g
bWnPKKtJkUKvAgiKQsyglvuHl5OUzMVJfsksbsqNG6L93qqvawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFY0iEz3RBP5MEMSa+454DVlu5dmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQ2NTg3OWMtOGMyZS0z
MGQyLWJlOTgtY2FiNmYwYmVmNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSccUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJeiXwoH8t2sXaTBN+YkVCrqmSi+Vmq/A6c8b5A+8rwZ3CcchVF+hBr1
Sd4oK0cK2T0A2OPii5vAKi9B1Vrvmmo6bHgb88X/gYvYiPivUd5ptyAEVEPkkqOq
ekBShNUuNApFlbKI5vR6xR5UtQsjJ8th5M89S9/yI0AnZhdDym7f+7qJI8ZkvvyO
S2e3DKGgsPLRCmdZ4TratcOk7f+9Kt6YD3snqvgdP4LZVPz5Lw4FtVh2lGC7zfYe
3oTUsXbsXcaesF4LCzy25YGmDImDbcX71dUBg5Bqy8+S2JzsGyfwI1ufhSqXz9nq
SnwhCymECznTAF8gb4hlUW0CdakKfBQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:48:26 2025 by rpki-client