Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c81c392-0527-376b-a569-97f619297c70.roa
File: 8c81c392-0527-376b-a569-97f619297c70.roa (raw, json)
Hash identifier: Ax3M2iFBa62KrgqtK4cGc24xf3ebE3315LnZtmArebY=
Subject key identifier: 43:71:0D:7D:76:4F:C8:E3:0A:65:88:07:36:28:9B:88:9C:0C:AE:AE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8B78FEDE60CF52F64D6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c81c392-0527-376b-a569-97f619297c70.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.89.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:b7:8f:ed:e6:0c:f5:2f:64:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=01bc834a-04ad-420c-8580-0b3ef87294b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:02:fc:83:b9:e4:ce:2a:3e:10:b3:9a:1e:
4b:1e:2b:08:c6:9a:c1:4b:bf:6a:65:c2:11:5d:65:
e6:3c:c0:3f:3e:70:e9:53:9a:17:63:c4:e4:9e:0b:
fb:9f:0f:a8:5d:7f:2c:ef:90:68:7b:a2:87:15:3b:
d1:62:f9:92:15:6d:49:1d:d0:9b:fd:5c:81:56:f6:
ac:6c:9f:4c:10:75:54:d8:4b:ff:2d:da:07:8d:cd:
b1:35:2f:a7:28:bb:01:5e:b5:eb:c3:49:ff:e1:32:
bb:41:d6:07:0a:d8:b8:8f:36:11:1c:b8:b6:93:19:
44:f5:99:84:c5:26:c7:ff:3b:9a:29:d9:c0:e8:de:
56:fa:95:da:25:7b:74:5e:ac:16:30:8c:ab:8c:17:
27:08:fe:30:74:7d:f3:44:3b:9a:18:5c:4b:dc:7b:
91:9f:52:0a:8a:d4:db:fb:98:aa:e5:c3:30:17:01:
ce:35:80:de:28:f3:c0:9f:74:90:a7:2b:a8:cc:7c:
40:b6:67:bf:23:92:75:fd:7e:76:86:0c:06:e3:6e:
5f:30:c4:f4:43:58:c2:c2:f2:8c:fa:0a:24:ef:37:
31:b5:d5:de:ec:cb:4b:81:c4:49:bf:05:34:b5:26:
88:db:8e:34:0d:fb:55:f8:29:45:5b:8c:a9:23:6c:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:71:0D:7D:76:4F:C8:E3:0A:65:88:07:36:28:9B:88:9C:0C:AE:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c81c392-0527-376b-a569-97f619297c70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.89.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:9f:9c:aa:b6:2f:28:2e:f3:9e:64:bc:a4:ac:a5:d0:f7:31:
f3:d9:f0:9f:dc:0f:aa:fb:bd:eb:c3:11:51:4c:fa:c6:40:4e:
95:25:eb:27:55:f8:b6:64:32:f7:fa:34:6d:e8:19:90:54:d4:
57:c2:65:56:d5:c7:0e:80:1f:0f:dd:07:40:42:11:ad:0f:25:
a9:b6:e2:d3:2e:d2:70:56:1e:10:0e:48:e1:94:e4:db:c3:4d:
19:65:65:83:2d:8f:a0:2b:52:3e:c3:b6:70:f6:e4:c9:d7:aa:
1b:6f:65:e5:24:70:d9:06:6b:76:b5:25:cc:e6:99:7d:bb:07:
0a:7a:83:41:9a:74:eb:50:49:27:77:f9:41:f6:47:69:66:ce:
5d:8e:94:e0:b4:04:b3:b0:8c:44:91:33:5f:fc:0c:e9:88:af:
2a:2e:28:41:4e:f9:de:6c:52:da:88:40:1c:ca:dd:db:ed:5d:
87:70:3f:e3:41:55:43:64:c5:be:a5:dc:05:82:bf:b9:01:0b:
40:30:30:fb:63:76:df:d5:df:fb:d5:a0:3e:ce:4b:ae:3a:df:
b5:52:43:b1:95:e3:7a:e7:bb:91:a6:0e:fd:8c:82:f7:77:39:
99:88:16:0d:22:8d:c8:1b:e6:96:ca:7f:e1:00:3c:35:b9:d2:
ec:3d:15:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+LeP7eYM9S9k1sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MDFiYzgzNGEtMDRhZC00MjBjLTg1ODAtMGIzZWY4NzI5NGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFIC/IO55M4qPhCzmh5LHisIxprBS79qZcIR
XWXmPMA/PnDpU5oXY8Tkngv7nw+oXX8s75Boe6KHFTvRYvmSFW1JHdCb/VyBVvas
bJ9MEHVU2Ev/LdoHjc2xNS+nKLsBXrXrw0n/4TK7QdYHCti4jzYRHLi2kxlE9ZmE
xSbH/zuaKdnA6N5W+pXaJXt0XqwWMIyrjBcnCP4wdH3zRDuaGFxL3HuRn1IKitTb
+5iq5cMwFwHONYDeKPPAn3SQpyuozHxAtme/I5J1/X52hgwG425fMMT0Q1jCwvKM
+gok7zcxtdXe7MtLgcRJvwU0tSaI2440DftV+ClFW4ypI2xtpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFENxDX12T8jjCmWIBzYom4icDK6uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM4MWMzOTItMDUyNy0z
NzZiLWE1NjktOTdmNjE5Mjk3YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSVlIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMSfnKq2Lygu855kvKSspdD3MfPZ8J/cD6r7vevDEVFM+sZATpUl6ydV
+LZkMvf6NG3oGZBU1FfCZVbVxw6AHw/dB0BCEa0PJam24tMu0nBWHhAOSOGU5NvD
TRllZYMtj6ArUj7DtnD25MnXqhtvZeUkcNkGa3a1JczmmX27Bwp6g0GadOtQSSd3
+UH2R2lmzl2OlOC0BLOwjESRM1/8DOmIryouKEFO+d5sUtqIQBzK3dvtXYdwP+NB
VUNkxb6l3AWCv7kBC0AwMPtjdt/V3/vVoD7OS64637VSQ7GV43rnu5GmDv2Mgvd3
OZmIFg0ijcgb5pbKf+EAPDW50uw9FZg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:00 2025 by rpki-client