Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a9ffcc0-d21d-3da2-8ae7-710227e146e6.roa
File: 8a9ffcc0-d21d-3da2-8ae7-710227e146e6.roa (raw, json)
Hash identifier: RTf9/lm123xsP3grQXRfHT+7dRqlJzhEmwR8RX32Aws=
Subject key identifier: 02:71:F3:5D:72:1A:9C:64:ED:B1:6E:39:5D:7F:02:73:84:74:09:D5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F73E52CB09B8F2B8CECD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a9ffcc0-d21d-3da2-8ae7-710227e146e6.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.234.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:3e:52:cb:09:b8:f2:b8:ce:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=6b32544e-4012-40d8-9c28-89fbdd082d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:16:35:98:df:87:18:66:4c:52:c8:8d:58:
ad:ad:d0:4b:a0:51:60:25:8d:b8:77:a3:0b:ad:4b:
34:f6:28:39:de:d7:c1:7a:41:fa:a5:74:aa:f1:cd:
1e:96:3d:aa:c8:1b:3c:af:8b:a3:a6:e0:22:7a:0a:
a7:98:f6:09:75:15:5a:17:ae:63:00:b7:e2:cb:5d:
44:5f:bf:03:d5:ef:c6:bd:ea:78:b3:11:3d:18:85:
30:7d:25:54:fc:04:e6:e4:1a:32:e4:fa:fc:d9:5f:
13:a5:87:23:e4:00:7f:d9:9c:b4:fe:6e:1b:36:73:
98:30:a1:e5:b3:4c:40:86:5a:a2:c5:47:59:ef:b8:
4b:5e:77:10:f6:9b:b5:d6:ed:c8:0d:56:54:fa:89:
96:ae:57:c8:b9:6e:40:97:d3:0c:97:45:b2:8f:74:
fc:3b:d4:3b:10:ec:7e:02:45:89:fe:7b:5c:03:a8:
1c:75:4e:eb:1b:58:7d:1f:db:4b:9d:eb:2a:c2:38:
75:d1:84:2b:46:2b:59:22:4d:57:21:c6:4c:7d:21:
08:67:0b:ae:9d:4d:11:0a:45:e9:6f:c8:41:a0:04:
db:3b:d8:bc:71:3d:64:04:67:41:97:cf:42:f8:65:
cc:55:af:d1:e3:7a:74:5f:c7:b0:31:3c:03:9f:80:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:F3:5D:72:1A:9C:64:ED:B1:6E:39:5D:7F:02:73:84:74:09:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a9ffcc0-d21d-3da2-8ae7-710227e146e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.234.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:10:73:12:0e:aa:20:3c:38:28:e7:8f:28:53:29:7f:2c:19:
7d:50:03:47:ea:31:d4:47:fc:fa:4d:d7:57:d3:26:87:12:4f:
13:ba:48:48:78:bd:07:74:08:db:51:62:17:b4:de:c7:d2:2c:
ca:5b:4a:9b:9b:16:1c:34:a3:f4:c0:14:28:42:5c:13:0f:4a:
01:2f:65:6d:9f:3a:0a:3c:82:46:ba:2d:f9:84:6c:a7:e8:94:
66:4a:3b:82:b5:62:47:1f:39:4a:02:4d:09:c3:7d:f5:6a:73:
74:47:ef:23:a4:96:cb:03:91:a1:4d:87:b1:ba:81:2a:db:9e:
ff:d8:f2:fc:95:1c:91:8a:1f:cb:22:bf:46:5e:94:c3:5c:5e:
d8:3e:80:6c:1a:16:17:fb:c0:e1:ef:3d:04:26:32:e2:3e:5e:
c9:8d:57:d5:85:85:dc:3e:27:88:fc:dd:1c:c2:d4:a9:2f:da:
84:3a:be:cc:f3:bd:c6:c0:0a:64:9f:b5:8d:34:98:61:0f:a0:
fb:e3:b1:a8:df:7a:99:4b:7c:0a:cd:d0:95:2c:86:39:85:7f:
13:0a:fc:5a:58:db:cd:a3:7d:bb:71:16:e8:b9:7d:05:4c:53:
98:53:b1:0b:78:49:36:a3:96:b7:5f:9b:3e:f0:8d:1e:7d:d5:
22:fb:f2:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09z5Sywm48rjOzUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NmIzMjU0NGUtNDAxMi00MGQ4LTljMjgtODlmYmRkMDgyZDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oUWNZjfhxhmTFLIjVitrdBLoFFgJY24d6ML
rUs09ig53tfBekH6pXSq8c0elj2qyBs8r4ujpuAiegqnmPYJdRVaF65jALfiy11E
X78D1e/Gvep4sxE9GIUwfSVU/ATm5Boy5Pr82V8TpYcj5AB/2Zy0/m4bNnOYMKHl
s0xAhlqixUdZ77hLXncQ9pu11u3IDVZU+omWrlfIuW5Al9MMl0Wyj3T8O9Q7EOx+
AkWJ/ntcA6gcdU7rG1h9H9tLnesqwjh10YQrRitZIk1XIcZMfSEIZwuunU0RCkXp
b8hBoATbO9i8cT1kBGdBl89C+GXMVa/R43p0X8ewMTwDn4Br5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJx811yGpxk7bFuOV1/AnOEdAnVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE5ZmZjYzAtZDIxZC0z
ZGEyLThhZTctNzEwMjI3ZTE0NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASeqvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACcQcxIOqiA8OCjnjyhTKX8sGX1QA0fqMdRH/PpN11fTJocSTxO6SEh4
vQd0CNtRYhe03sfSLMpbSpubFhw0o/TAFChCXBMPSgEvZW2fOgo8gka6LfmEbKfo
lGZKO4K1YkcfOUoCTQnDffVqc3RH7yOklssDkaFNh7G6gSrbnv/Y8vyVHJGKH8si
v0ZelMNcXtg+gGwaFhf7wOHvPQQmMuI+XsmNV9WFhdw+J4j83RzC1Kkv2oQ6vszz
vcbACmSftY00mGEPoPvjsajfeplLfArN0JUshjmFfxMK/FpY282jfbtxFui5fQVM
U5hTsQt4STajlrdfmz7wjR591SL78qU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:09 2025 by rpki-client