Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30b9730a-dc5d-3c63-ac53-e780235f9b3d.roa
File: 30b9730a-dc5d-3c63-ac53-e780235f9b3d.roa (raw, json)
Hash identifier: HlQxa7g+i1PSb4YmDKWWeqLKnNvN8tNTnXkP7Nnmx8w=
Subject key identifier: FB:57:45:E4:32:1C:EF:74:F9:70:5C:F6:ED:F0:8B:07:1B:A7:24:03
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB01F5CEFD86761CBF05C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30b9730a-dc5d-3c63-ac53-e780235f9b3d.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 76.133.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:1f:5c:ef:d8:67:61:cb:f0:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=f1bc1da3-b94c-4100-a548-530c7dd6b3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:16:01:1b:6e:ce:a2:c5:0c:94:95:37:1b:
4a:dc:f8:2d:da:1b:92:83:d7:94:10:9e:68:a0:69:
32:6f:ad:37:74:72:31:b2:0f:18:0c:62:eb:6d:e5:
30:64:ec:96:8e:f7:36:83:a9:31:cb:66:04:1a:db:
44:b7:20:f2:44:7a:25:27:41:a4:ff:d2:b8:45:c9:
e3:8d:1d:02:d8:2a:4f:8d:37:16:48:3a:94:fb:eb:
da:c2:ff:29:b0:85:a3:03:a9:57:0f:cd:7d:52:23:
b7:9c:fe:bf:c2:97:2d:a9:3c:bd:90:44:7d:76:c0:
5a:1b:ae:eb:aa:f9:9b:c7:7b:86:f5:a2:45:f2:db:
c1:ad:8f:fd:40:95:c7:1f:e2:69:05:e4:cb:7c:e6:
78:46:4e:6f:2c:27:f5:5a:1f:05:11:80:04:03:51:
06:bc:08:ec:30:ca:c0:b5:2e:18:72:52:09:7b:cc:
a0:b5:e0:90:c0:1b:72:50:6d:02:d2:87:f1:97:10:
f0:0c:5e:a7:bc:18:83:7f:63:18:1b:5b:cc:6a:2e:
f0:9b:ba:7f:61:31:d3:94:62:30:94:28:86:e5:a7:
fa:96:30:ff:ea:02:4e:43:30:37:29:7a:f3:04:35:
d1:e3:a6:41:c8:eb:b8:2c:a2:e6:db:1f:25:52:7a:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:57:45:E4:32:1C:EF:74:F9:70:5C:F6:ED:F0:8B:07:1B:A7:24:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30b9730a-dc5d-3c63-ac53-e780235f9b3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.133.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:70:36:04:cc:48:e6:f1:e4:16:99:90:bc:38:61:61:78:0d:
96:d3:dc:5b:fb:36:fe:90:63:58:d8:5b:50:a7:8f:87:ea:a3:
a7:5c:a2:f8:a6:62:9f:0a:1a:3a:5c:1f:b6:56:e3:fb:fb:8b:
b2:86:1a:a9:6e:fa:b4:0f:e8:7f:cd:4a:79:c7:16:c1:46:c0:
d6:13:35:75:c9:2c:95:08:ed:8a:69:21:9e:1f:df:73:a8:c2:
77:6e:17:47:31:21:32:0e:f1:36:0c:c1:57:ca:a5:ce:d9:ae:
2d:91:c2:c0:e6:79:66:e6:ab:fc:01:1f:a1:33:50:e4:22:5a:
92:5e:66:ef:15:bb:15:a3:a0:56:60:07:6a:cd:dd:3c:cb:3f:
37:89:b7:24:c3:c0:12:71:ba:e4:d5:5d:b1:81:f7:0e:0c:12:
91:d3:96:21:59:61:45:db:62:38:bc:48:52:43:a0:c5:24:45:
38:13:87:35:fe:5f:d4:3c:60:23:a3:bf:6b:b5:95:91:49:2c:
29:15:64:b1:e9:37:c9:f6:a5:a0:48:a6:97:c8:79:6d:5e:d7:
02:dd:b9:d2:66:91:0b:7a:1b:39:ca:3e:2f:a6:4b:e7:d4:46:
19:45:9f:b2:ab:bf:94:fe:8c:13:d7:81:4a:26:b2:90:78:60:
e4:cb:df:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssB9c79hnYcvwXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjFiYzFkYTMtYjk0Yy00MTAwLWE1NDgtNTMwYzdkZDZiM2YyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7sWARtuzqLFDJSVNxtK3Pgt2huSg9eUEJ5o
oGkyb603dHIxsg8YDGLrbeUwZOyWjvc2g6kxy2YEGttEtyDyRHolJ0Gk/9K4Rcnj
jR0C2CpPjTcWSDqU++vawv8psIWjA6lXD819UiO3nP6/wpctqTy9kER9dsBaG67r
qvmbx3uG9aJF8tvBrY/9QJXHH+JpBeTLfOZ4Rk5vLCf1Wh8FEYAEA1EGvAjsMMrA
tS4YclIJe8ygteCQwBtyUG0C0ofxlxDwDF6nvBiDf2MYG1vMai7wm7p/YTHTlGIw
lCiG5af6ljD/6gJOQzA3KXrzBDXR46ZByOu4LKLm2x8lUno98wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtXReQyHO90+XBc9u3wiwcbpyQDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzBiOTczMGEtZGM1ZC0z
YzYzLWFjNTMtZTc4MDIzNWY5YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIXyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtwNgTMSObx5BaZkLw4YWF4DZbT3Fv7Nv6QY1jYW1Cnj4fqo6dcovim
Yp8KGjpcH7ZW4/v7i7KGGqlu+rQP6H/NSnnHFsFGwNYTNXXJLJUI7YppIZ4f33Oo
wnduF0cxITIO8TYMwVfKpc7Zri2RwsDmeWbmq/wBH6EzUOQiWpJeZu8VuxWjoFZg
B2rN3TzLPzeJtyTDwBJxuuTVXbGB9w4MEpHTliFZYUXbYji8SFJDoMUkRTgThzX+
X9Q8YCOjv2u1lZFJLCkVZLHpN8n2paBIppfIeW1e1wLdudJmkQt6GznKPi+mS+fU
RhlFn7Krv5T+jBPXgUomspB4YOTL334=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:22:50 2025 by rpki-client