Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e56a48-96bf-3ead-b1d9-0e5d82ec3953.roa
File: 40e56a48-96bf-3ead-b1d9-0e5d82ec3953.roa (raw, json)
Hash identifier: ngJS0CbMLDpzyMUux00nW+HRGjjnfGs7ETT/P+sETls=
Subject key identifier: 95:83:E7:F4:F7:D2:02:F7:F2:A4:FF:90:24:18:82:D6:BE:4E:3E:CB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F837ABB9BE948077754A04
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e56a48-96bf-3ead-b1d9-0e5d82ec3953.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 73.240.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:37:ab:b9:be:94:80:77:75:4a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d767f5d8-b41d-4591-965c-093950946ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:6d:ef:88:a9:0b:73:6e:2d:69:f3:25:16:
95:50:df:33:9c:7c:9c:6a:d9:bb:40:e2:30:b9:2e:
16:33:19:d7:b1:0c:1d:4f:18:14:53:3e:2b:de:4b:
c1:77:eb:8d:9d:3f:60:32:25:89:90:65:7d:ad:75:
cd:50:71:63:99:e6:34:65:f2:b7:02:4b:34:c4:30:
8f:a3:6d:5b:29:2e:f8:db:26:f6:0a:77:0a:63:15:
ec:13:65:ca:8a:b4:a2:32:39:5e:b2:e4:d5:a4:66:
1c:a5:36:6b:7e:a6:1f:15:18:9e:4e:52:4b:a7:4c:
b3:87:44:52:14:53:50:3e:e9:c9:b9:22:3f:b5:7f:
c9:c3:0f:2c:5b:b7:94:e0:90:32:c4:c0:81:11:ca:
f3:2c:9f:3f:0e:b6:6c:a4:8d:a1:23:1b:a9:05:98:
7f:6a:83:e2:a3:93:97:7c:2d:e6:37:e4:72:eb:ea:
df:8e:73:9e:45:e1:ee:f6:06:c6:2d:ea:a4:65:42:
91:3b:c1:5b:76:53:9e:d3:96:18:d2:b5:f4:c1:76:
89:b8:ed:c2:c8:d3:f5:c2:1a:00:e9:da:3b:68:70:
1a:31:14:28:eb:c5:1c:a0:80:67:64:8d:b1:18:3a:
c8:7f:bf:3e:0f:60:a7:22:d6:2b:70:22:1b:2f:bc:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:83:E7:F4:F7:D2:02:F7:F2:A4:FF:90:24:18:82:D6:BE:4E:3E:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e56a48-96bf-3ead-b1d9-0e5d82ec3953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.240.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:f9:6c:ba:f9:38:91:a3:20:26:a5:38:03:82:a5:17:2f:c6:
4d:83:fa:78:c6:c2:fb:89:bf:72:b0:33:30:4c:a1:88:24:52:
8a:da:73:b6:53:ae:48:88:e2:12:d0:2f:a4:66:17:a3:ff:94:
31:34:17:cd:66:79:a0:15:bf:70:69:fb:54:15:42:19:1b:b0:
22:eb:10:f3:a1:9d:c6:02:38:04:04:1a:98:1f:55:22:a9:79:
3b:c7:0c:7d:96:28:f0:8b:b0:f6:23:7e:99:59:94:3e:e8:91:
d4:a5:b4:af:e4:7a:73:5d:51:fe:43:39:c0:76:4e:07:8a:84:
0a:be:f8:85:0c:b6:86:bb:fe:4f:3b:91:52:53:53:ce:d4:a8:
47:bf:04:d0:ed:89:f4:de:d7:9c:d0:10:b8:6c:e1:1f:f6:9c:
02:e9:25:61:ea:23:1e:2f:7a:03:a1:7c:93:6a:2c:7f:b6:4e:
3f:ef:f7:a9:fc:10:87:08:be:8d:7a:9a:8c:14:5a:07:b2:b7:
db:f0:39:2d:0f:f4:60:92:28:ab:8c:cc:c4:73:bf:a1:f3:33:
92:f4:eb:49:82:f9:d7:71:d6:e6:9b:e8:50:7d:90:97:19:ab:
6c:cc:51:45:87:d6:e4:08:e1:f4:e1:80:f1:20:e1:86:29:ce:
ab:7b:bd:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Derub6UgHd1SgQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ZDc2N2Y1ZDgtYjQxZC00NTkxLTk2NWMtMDkzOTUwOTQ2ZWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuZt74ipC3NuLWnzJRaVUN8znHycatm7QOIw
uS4WMxnXsQwdTxgUUz4r3kvBd+uNnT9gMiWJkGV9rXXNUHFjmeY0ZfK3Aks0xDCP
o21bKS742yb2CncKYxXsE2XKirSiMjlesuTVpGYcpTZrfqYfFRieTlJLp0yzh0RS
FFNQPunJuSI/tX/Jww8sW7eU4JAyxMCBEcrzLJ8/DrZspI2hIxupBZh/aoPio5OX
fC3mN+Ry6+rfjnOeReHu9gbGLeqkZUKRO8FbdlOe05YY0rX0wXaJuO3CyNP1whoA
6do7aHAaMRQo68UcoIBnZI2xGDrIf78+D2CnItYrcCIbL7yxFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWD5/T30gL38qT/kCQYgta+Tj7LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBlNTZhNDgtOTZiZi0z
ZWFkLWIxZDktMGU1ZDgyZWMzOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfBmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAET5bLr5OJGjICalOAOCpRcvxk2D+njGwvuJv3KwMzBMoYgkUorac7ZT
rkiI4hLQL6RmF6P/lDE0F81meaAVv3Bp+1QVQhkbsCLrEPOhncYCOAQEGpgfVSKp
eTvHDH2WKPCLsPYjfplZlD7okdSltK/kenNdUf5DOcB2TgeKhAq++IUMtoa7/k87
kVJTU87UqEe/BNDtifTe15zQELhs4R/2nALpJWHqIx4vegOhfJNqLH+2Tj/v96n8
EIcIvo16mowUWgeyt9vwOS0P9GCSKKuMzMRzv6HzM5L060mC+ddx1uab6FB9kJcZ
q2zMUUWH1uQI4fThgPEg4YYpzqt7vbg=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:45 2025 by rpki-client