Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/996e1f6b-2e3c-3f61-9bda-100a057d924c.roa
File: 996e1f6b-2e3c-3f61-9bda-100a057d924c.roa (raw, json)
Hash identifier: p+DEfIQDC0edu+FAXT1yFtBR6yuBFQgPkxth0WL2TXA=
Subject key identifier: 50:BD:4D:D2:29:CB:D7:13:EF:7F:24:24:7C:BD:7B:A4:15:4F:23:59
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C523A5E13B53B04C7C600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/996e1f6b-2e3c-3f61-9bda-100a057d924c.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 73.43.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:52:3a:5e:13:b5:3b:04:c7:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=a6afe9e6-4f53-452b-b961-5869b012efa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c3:8b:4f:68:1d:de:18:88:ef:15:77:d5:74:
eb:9f:44:4f:85:33:c4:74:6e:08:83:63:55:40:6c:
d1:ae:e3:6d:40:63:bb:92:9b:3f:9b:98:a5:21:3e:
34:7a:76:b4:96:b1:88:99:7d:66:17:a9:08:d5:9c:
fc:0b:27:a7:8f:dc:1d:d4:3e:c5:5f:a0:e7:ef:c1:
89:0c:6a:a9:8f:3c:ad:55:a2:df:58:3e:3a:0d:ff:
9c:0a:33:78:d0:d6:9c:fc:5d:93:10:0c:17:c5:ac:
48:c4:9e:ea:ed:a4:6b:8c:9f:24:54:5c:be:d1:06:
36:f0:81:14:6a:d2:ac:ec:5b:8f:09:cb:ad:7d:3d:
33:b1:db:bd:ba:4f:7e:a3:76:a8:21:be:fc:40:82:
5b:b6:6f:41:cc:1c:38:28:51:19:07:3b:69:9d:16:
6f:e5:c8:c1:8d:bf:94:69:e1:e2:12:0e:42:90:24:
f1:c7:e3:4a:99:f7:5b:a1:a5:56:00:91:21:13:0c:
c4:69:5a:55:15:5c:29:e4:f2:ce:d2:94:e4:5d:d9:
b8:d7:17:68:75:d6:91:d5:d3:3c:82:4d:b2:4f:af:
44:d1:b7:f9:dc:ad:5d:d7:5b:de:ac:5f:98:40:63:
4c:9e:b4:aa:2e:6e:1a:db:ad:3e:ea:a2:bb:38:91:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BD:4D:D2:29:CB:D7:13:EF:7F:24:24:7C:BD:7B:A4:15:4F:23:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/996e1f6b-2e3c-3f61-9bda-100a057d924c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.43.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:23:30:ca:6c:b5:48:d4:2c:72:cf:c8:7d:99:f3:64:bc:0c:
18:04:7f:ce:0e:28:42:f0:8b:f4:17:37:1d:78:d7:e6:11:06:
bf:62:34:55:b5:b3:de:4d:38:73:60:b7:21:cb:0b:87:c3:ea:
48:f0:99:ae:50:3a:b4:2d:6d:a0:e1:1c:23:89:ff:8c:a8:c6:
c7:fb:d9:75:29:4b:f0:8f:1d:cf:8e:75:67:ca:9c:a4:b8:da:
5b:b2:09:18:69:66:f1:7d:09:e5:b1:71:12:c4:01:09:21:63:
7c:db:68:7a:af:a3:d2:77:fd:81:95:ad:60:65:44:83:e6:80:
a9:45:36:eb:19:cd:c3:49:bf:79:9c:f4:4f:22:ac:ff:cd:da:
1f:3c:de:1b:30:b4:88:a0:30:81:3d:6c:2e:db:80:9f:42:8a:
32:86:92:42:ab:ce:c5:48:39:7e:b0:25:6f:67:84:0d:07:1a:
02:48:b4:60:bf:a2:e7:18:ca:9d:0c:e9:27:d1:77:d8:e7:35:
10:45:87:08:9e:ac:53:be:d9:b2:80:4d:f7:0f:d5:cb:ff:2c:
42:8d:9c:88:ec:1e:f4:34:d0:d5:f3:1d:22:64:f6:c4:cf:e0:
62:4b:ea:9e:a8:a9:25:ef:32:12:31:ea:b7:99:ba:ad:85:1d:
92:b7:1f:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPFI6XhO1OwTHxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
YTZhZmU5ZTYtNGY1My00NTJiLWI5NjEtNTg2OWIwMTJlZmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8OLT2gd3hiI7xV31XTrn0RPhTPEdG4Ig2NV
QGzRruNtQGO7kps/m5ilIT40ena0lrGImX1mF6kI1Zz8Cyenj9wd1D7FX6Dn78GJ
DGqpjzytVaLfWD46Df+cCjN40Nac/F2TEAwXxaxIxJ7q7aRrjJ8kVFy+0QY28IEU
atKs7FuPCcutfT0zsdu9uk9+o3aoIb78QIJbtm9BzBw4KFEZBztpnRZv5cjBjb+U
aeHiEg5CkCTxx+NKmfdboaVWAJEhEwzEaVpVFVwp5PLO0pTkXdm41xdoddaR1dM8
gk2yT69E0bf53K1d11verF+YQGNMnrSqLm4a260+6qK7OJHwLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFC9TdIpy9cT738kJHy9e6QVTyNZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTk2ZTFmNmItMmUzYy0z
ZjYxLTliZGEtMTAwYTA1N2Q5MjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUjMMpstUjULHLPyH2Z82S8DBgEf84OKELwi/QXNx141+YRBr9iNFW1
s95NOHNgtyHLC4fD6kjwma5QOrQtbaDhHCOJ/4yoxsf72XUpS/CPHc+OdWfKnKS4
2luyCRhpZvF9CeWxcRLEAQkhY3zbaHqvo9J3/YGVrWBlRIPmgKlFNusZzcNJv3mc
9E8irP/N2h883hswtIigMIE9bC7bgJ9CijKGkkKrzsVIOX6wJW9nhA0HGgJItGC/
oucYyp0M6SfRd9jnNRBFhwierFO+2bKATfcP1cv/LEKNnIjsHvQ00NXzHSJk9sTP
4GJL6p6oqSXvMhIx6reZuq2FHZK3HwY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:51:44 2025 by rpki-client