Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c009503-6037-3321-99ff-60e38121618a.roa
File: 8c009503-6037-3321-99ff-60e38121618a.roa (raw, json)
Hash identifier: EGQHXB8c2SlpdAN+79V8Fj/yDm4FJJEQtVbS5uSIj1c=
Subject key identifier: 7B:0C:C4:13:FC:51:B4:64:96:D5:46:0D:FB:60:8A:D6:51:D9:80:BE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8896623BC3D48359DD340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c009503-6037-3321-99ff-60e38121618a.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.17.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:89:66:23:bc:3d:48:35:9d:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=a2424f51-46be-415b-85cc-d791d8bf9830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:ce:86:dc:f4:37:86:ba:57:49:40:48:55:
18:2d:4a:fe:70:3a:21:56:90:b9:b7:bb:bd:fa:7b:
2a:67:77:7d:99:b7:e6:7a:1d:fa:9a:a3:fd:ce:e3:
fe:91:37:c7:3c:5d:8c:be:ff:58:85:3a:43:91:6f:
4b:d1:08:cc:e5:c6:d4:2f:ea:0f:fa:51:99:5f:a3:
0d:a4:18:81:7d:0b:51:c2:75:8c:e3:31:44:15:f6:
ed:71:14:26:9e:0d:6f:ae:67:d1:fd:69:9b:2d:d6:
fb:21:74:f3:04:ad:9b:6a:8e:e2:1f:31:98:6f:b6:
96:d5:dd:93:18:6d:57:c8:0e:64:b4:7c:67:a9:82:
30:2e:bc:91:ec:b9:13:47:77:cf:4c:8b:28:44:d7:
04:4c:5e:7a:15:18:58:eb:04:ee:76:4f:09:bd:9b:
62:6e:02:0c:fa:9b:b7:d8:95:e9:64:5c:90:98:ec:
df:27:e6:b9:92:8d:6d:38:80:57:e7:1f:ba:7e:ca:
70:73:c0:be:c2:99:15:a9:27:c2:f0:50:a5:ce:02:
14:89:5d:28:f2:a6:dc:01:b9:88:65:06:23:8d:4e:
30:c1:55:b2:eb:8e:df:f2:29:bf:8b:3d:e9:1e:da:
22:e4:e4:97:5a:00:7f:e8:21:a9:93:1d:25:bb:f6:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0C:C4:13:FC:51:B4:64:96:D5:46:0D:FB:60:8A:D6:51:D9:80:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c009503-6037-3321-99ff-60e38121618a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.17.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:49:d4:b0:3c:14:55:4e:fb:4c:3d:96:6b:9c:52:1f:fe:e7:
cc:42:26:93:d7:84:6e:57:71:98:e3:9e:8e:48:64:09:d0:94:
41:08:c3:6c:86:7a:92:9e:07:89:bc:78:c7:fc:ac:0b:2a:d4:
c4:a0:84:23:1c:9c:64:82:c4:1b:11:64:45:aa:0d:36:24:dd:
cc:57:1f:93:c3:25:1d:f5:37:d3:46:e0:b0:6e:35:0f:83:6f:
a5:e3:04:88:54:0f:29:72:ad:df:75:fe:85:ac:23:ce:fb:ed:
ba:0a:1b:83:f6:f3:4e:e8:14:a6:87:c0:b3:ee:50:c2:7b:9a:
04:d8:07:0a:57:b2:3a:55:4a:c9:fe:6c:70:74:a4:83:5a:9e:
11:98:cb:ef:f8:cf:b6:7f:d6:1c:bc:41:83:da:fa:47:59:05:
99:08:f3:fa:d9:17:f1:65:c7:2b:10:1a:dc:36:90:65:8e:7e:
08:ff:ec:08:d3:fc:d0:79:e4:c0:fc:e8:26:a5:6b:bc:bf:85:
a4:98:4f:de:f2:66:43:5f:e0:d1:e4:21:b0:7f:32:dd:ba:c0:
cc:b6:dd:cc:46:3e:50:e0:e7:02:37:c6:f8:31:41:c5:60:25:
57:bf:10:4d:b7:16:d5:5f:64:4b:89:ff:0f:36:22:04:61:5b:
65:9b:62:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+IlmI7w9SDWd00AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YTI0MjRmNTEtNDZiZS00MTViLTg1Y2MtZDc5MWQ4YmY5ODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRbOhtz0N4a6V0lASFUYLUr+cDohVpC5t7u9
+nsqZ3d9mbfmeh36mqP9zuP+kTfHPF2Mvv9YhTpDkW9L0QjM5cbUL+oP+lGZX6MN
pBiBfQtRwnWM4zFEFfbtcRQmng1vrmfR/WmbLdb7IXTzBK2bao7iHzGYb7aW1d2T
GG1XyA5ktHxnqYIwLryR7LkTR3fPTIsoRNcETF56FRhY6wTudk8JvZtibgIM+pu3
2JXpZFyQmOzfJ+a5ko1tOIBX5x+6fspwc8C+wpkVqSfC8FClzgIUiV0o8qbcAbmI
ZQYjjU4wwVWy647f8im/iz3pHtoi5OSXWgB/6CGpkx0lu/adKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHsMxBP8UbRkltVGDftgitZR2YC+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGMwMDk1MDMtNjAzNy0z
MzIxLTk5ZmYtNjBlMzgxMjE2MThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSREwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1J1LA8FFVO+0w9lmucUh/+58xCJpPXhG5XcZjjno5IZAnQlEEIw2yG
epKeB4m8eMf8rAsq1MSghCMcnGSCxBsRZEWqDTYk3cxXH5PDJR31N9NG4LBuNQ+D
b6XjBIhUDylyrd91/oWsI8777boKG4P2807oFKaHwLPuUMJ7mgTYBwpXsjpVSsn+
bHB0pINanhGYy+/4z7Z/1hy8QYPa+kdZBZkI8/rZF/FlxysQGtw2kGWOfgj/7AjT
/NB55MD86Cala7y/haSYT97yZkNf4NHkIbB/Mt26wMy23cxGPlDg5wI3xvgxQcVg
JVe/EE23FtVfZEuJ/w82IgRhW2WbYn8=
-----END CERTIFICATE-----
Generated at Thu Apr 10 12:49:24 2025 by rpki-client