Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cef528c-7ea1-3bd5-9364-3f1d52a6bad3.roa
File: 9cef528c-7ea1-3bd5-9364-3f1d52a6bad3.roa (raw, json)
Hash identifier: oiZ6Kkg/kNP+cfc7kAWq41LtTXpQQOic4cAtqL3S1K8=
Subject key identifier: CE:0C:6C:5E:DB:EE:DA:BE:6B:19:08:6B:A7:61:8C:2D:6C:AB:A4:A0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8A00BE5A924F1A365E1A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cef528c-7ea1-3bd5-9364-3f1d52a6bad3.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.249.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:a0:0b:e5:a9:24:f1:a3:65:e1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=85f59331-e9c4-44bf-9d37-be58abd646e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6a:4a:c5:8f:8a:56:37:a1:c3:7d:a1:d9:a3:
48:60:3c:2e:eb:82:f1:ac:9e:83:02:80:c5:1a:00:
b9:7e:0a:60:f4:49:a0:a0:69:c2:42:d6:b5:9a:dc:
3d:9b:7b:31:63:e7:a4:09:ef:d3:79:cd:be:c1:4e:
28:87:fc:ad:68:86:0f:ad:74:68:a8:e5:c0:44:91:
46:1c:98:1b:f0:21:5c:8a:1f:77:79:a8:4a:eb:62:
43:21:6a:32:31:2c:c1:07:99:36:9c:1f:11:4a:cd:
46:96:e1:3a:1b:e4:59:af:3e:af:fe:bc:29:9e:46:
b6:a4:73:9e:95:2e:54:a5:c1:8a:0c:41:65:3e:63:
8d:7c:4b:0e:85:1c:23:6e:75:69:c4:44:72:65:61:
a4:24:ac:01:92:e7:aa:3e:09:74:22:d0:0c:d7:aa:
cf:4a:3c:74:b2:1d:90:f9:57:1c:4a:77:b3:f5:61:
9a:3c:da:17:a0:1f:e4:8f:07:71:22:53:4f:4a:a2:
1f:7d:c3:68:26:1b:86:e8:8f:3a:66:01:11:bb:0a:
9b:4f:af:77:b7:3d:9b:61:6b:e3:2d:9f:7f:84:8c:
83:c0:45:6e:88:b0:e9:13:c8:2e:d8:52:1f:6f:ea:
97:32:a1:5d:f0:84:f9:1e:f4:98:04:11:8f:d9:61:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0C:6C:5E:DB:EE:DA:BE:6B:19:08:6B:A7:61:8C:2D:6C:AB:A4:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cef528c-7ea1-3bd5-9364-3f1d52a6bad3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.249.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:f9:8a:41:18:3a:f0:87:b8:42:24:39:8f:ad:3a:de:2e:6a:
e1:ab:2b:70:07:6f:0d:8b:82:a3:08:e2:24:1f:63:9c:19:f0:
0d:24:df:0e:81:e3:0c:45:a2:d4:b7:cf:2d:36:f2:3b:60:19:
27:00:75:ac:f8:97:ba:aa:16:78:aa:60:12:ca:54:43:99:0a:
0a:52:99:84:4b:49:61:30:aa:7d:e0:bd:b5:45:67:b0:4f:b2:
45:04:b5:5e:1b:84:68:9c:bc:db:b8:6f:62:bf:22:75:8a:05:
f5:0c:20:dd:11:3c:88:fc:b6:4e:14:df:75:ba:b2:fc:f3:0a:
be:18:c4:4a:a1:14:08:80:7e:55:2b:20:74:5f:fe:29:c1:65:
f6:ba:07:d1:74:10:32:36:70:06:bd:ee:21:f9:93:46:81:a8:
d0:8d:38:a1:fe:e5:cf:33:3a:95:88:dc:ef:b9:f0:14:f0:8e:
8a:7a:dd:75:b5:21:17:da:d0:c8:36:1f:56:13:5e:2d:12:62:
69:18:49:20:80:9f:14:5b:6e:1a:d5:0c:47:52:ff:90:1d:4f:
fb:57:53:39:16:6d:72:48:a9:28:32:7e:d7:e2:f0:7f:46:20:
80:f7:15:7d:f1:77:91:b4:0f:45:11:3d:6f:3a:32:24:8a:7b:
e3:46:43:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+KAL5akk8aNl4aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ODVmNTkzMzEtZTljNC00NGJmLTlkMzctYmU1OGFiZDY0NmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGpKxY+KVjehw32h2aNIYDwu64LxrJ6DAoDF
GgC5fgpg9EmgoGnCQta1mtw9m3sxY+ekCe/Tec2+wU4oh/ytaIYPrXRoqOXARJFG
HJgb8CFcih93eahK62JDIWoyMSzBB5k2nB8RSs1GluE6G+RZrz6v/rwpnka2pHOe
lS5UpcGKDEFlPmONfEsOhRwjbnVpxERyZWGkJKwBkueqPgl0ItAM16rPSjx0sh2Q
+VccSnez9WGaPNoXoB/kjwdxIlNPSqIffcNoJhuG6I86ZgERuwqbT693tz2bYWvj
LZ9/hIyDwEVuiLDpE8gu2FIfb+qXMqFd8IT5HvSYBBGP2WE33QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4MbF7b7tq+axkIa6dhjC1sq6SgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWNlZjUyOGMtN2VhMS0z
YmQ1LTkzNjQtM2YxZDUyYTZiYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSfkUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGr5ikEYOvCHuEIkOY+tOt4uauGrK3AHbw2LgqMI4iQfY5wZ8A0k3w6B
4wxFotS3zy028jtgGScAdaz4l7qqFniqYBLKVEOZCgpSmYRLSWEwqn3gvbVFZ7BP
skUEtV4bhGicvNu4b2K/InWKBfUMIN0RPIj8tk4U33W6svzzCr4YxEqhFAiAflUr
IHRf/inBZfa6B9F0EDI2cAa97iH5k0aBqNCNOKH+5c8zOpWI3O+58BTwjop63XW1
IRfa0Mg2H1YTXi0SYmkYSSCAnxRbbhrVDEdS/5AdT/tXUzkWbXJIqSgyftfi8H9G
IID3FX3xd5G0D0URPW86MiSKe+NGQy8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:23 2025 by rpki-client