Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f3b607b-9a7d-3b40-af7d-2254f38af185.roa
File: 9f3b607b-9a7d-3b40-af7d-2254f38af185.roa (raw, json)
Hash identifier: NQesOMnsErWsJ9NG+bhVUKN+PkQ87fNfwxUfF+gf+GI=
Subject key identifier: 5F:D0:5E:C7:2C:DD:4B:E2:24:A3:6E:AB:CE:FA:BD:A8:7F:6F:21:78
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B8CF7E41FB9A4C27FF900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f3b607b-9a7d-3b40-af7d-2254f38af185.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 73.58.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:8c:f7:e4:1f:b9:a4:c2:7f:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=44fb0c8d-31ac-4016-9f1e-6d7f8adec050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:c0:86:2f:14:59:15:23:9d:36:42:37:b4:
89:78:1b:6f:9e:b0:45:19:c3:27:c3:56:51:82:71:
bc:69:9b:3f:ff:9f:ee:ff:96:df:62:5e:c4:86:18:
52:a4:91:d2:de:e7:13:5e:17:ac:36:28:22:b6:63:
3a:81:8e:b3:67:29:01:b3:ec:c6:a6:2d:f8:c7:e9:
eb:8b:a8:f7:53:f5:f9:81:2a:32:b1:c1:94:f2:64:
f8:5e:a9:f6:dc:80:3c:dc:1d:f3:24:1d:d4:19:58:
48:bd:06:40:f8:5d:7d:9e:c3:6e:58:60:b4:90:34:
01:e2:c1:fd:05:b8:9a:3e:03:5b:31:69:80:76:36:
fa:fa:33:88:e5:3f:d9:d7:0c:26:d6:c7:8e:1b:a9:
31:cf:b4:c4:8a:37:18:38:96:07:b3:29:16:1c:08:
da:98:31:c7:da:e8:da:e4:08:8f:f1:10:5f:e6:5f:
b8:c1:52:58:6c:c9:52:8e:86:bf:43:3b:a6:4d:b9:
2e:5b:64:e5:5a:ad:83:0a:51:fd:d0:28:b8:28:fd:
2e:57:0d:6f:6c:6c:c0:0d:2e:41:8a:ca:40:5b:42:
b0:50:7e:28:47:ab:a5:db:6d:4d:5f:b9:00:44:c9:
0e:c4:a1:af:16:a7:8b:41:49:9b:98:43:0a:9c:ff:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D0:5E:C7:2C:DD:4B:E2:24:A3:6E:AB:CE:FA:BD:A8:7F:6F:21:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f3b607b-9a7d-3b40-af7d-2254f38af185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.58.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:c7:0f:c4:b5:4f:b1:aa:e2:56:60:32:7a:88:cf:4a:65:8e:
ca:f3:6e:91:b1:28:39:8f:58:c2:af:56:7f:e6:36:db:80:04:
98:7d:93:34:f6:87:c5:01:89:13:5a:ad:44:42:96:1d:53:80:
45:ae:ed:8f:0c:eb:01:9e:e4:d8:42:53:9c:80:42:be:09:bd:
ae:b6:5a:fa:62:52:c1:59:f5:12:33:88:3e:f9:17:75:6f:2c:
f4:e0:fd:30:5e:24:0e:3a:a2:d6:4f:c9:dd:87:7b:55:a6:98:
13:68:40:35:db:b8:1c:64:39:f5:84:87:f3:c9:b8:9d:5d:6b:
17:24:d8:d2:1c:a0:65:93:e9:d9:18:dd:34:2d:8c:74:ba:07:
60:85:6d:c9:e3:28:f8:1d:c9:22:9a:76:74:e5:7d:d9:fd:75:
54:b4:d5:1a:ae:9f:62:5e:bd:68:1a:38:1c:cc:ec:3b:71:b4:
18:99:a3:39:b2:8f:fb:b4:61:47:9d:8b:c4:3b:a0:e5:31:5f:
7a:a5:f4:6c:58:4a:b1:20:4b:d6:d4:c8:f2:c0:af:87:84:06:
0a:0f:00:c1:df:1c:84:c8:27:68:be:89:72:19:aa:94:35:56:
bb:5d:18:81:63:69:7f:ed:13:53:2a:e1:20:5d:e2:49:a9:40:
dd:e3:08:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea4z35B+5pMJ/+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NDRmYjBjOGQtMzFhYy00MDE2LTlmMWUtNmQ3ZjhhZGVjMDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlevAhi8UWRUjnTZCN7SJeBtvnrBFGcMnw1ZR
gnG8aZs//5/u/5bfYl7EhhhSpJHS3ucTXhesNigitmM6gY6zZykBs+zGpi34x+nr
i6j3U/X5gSoyscGU8mT4Xqn23IA83B3zJB3UGVhIvQZA+F19nsNuWGC0kDQB4sH9
BbiaPgNbMWmAdjb6+jOI5T/Z1wwm1seOG6kxz7TEijcYOJYHsykWHAjamDHH2uja
5AiP8RBf5l+4wVJYbMlSjoa/QzumTbkuW2TlWq2DClH90Ci4KP0uVw1vbGzADS5B
ispAW0KwUH4oR6ul221NX7kARMkOxKGvFqeLQUmbmEMKnP9kZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/QXscs3UviJKNuq876vah/byF4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWYzYjYwN2ItOWE3ZC0z
YjQwLWFmN2QtMjI1NGYzOGFmMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSTqIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDHD8S1T7Gq4lZgMnqIz0pljsrzbpGxKDmPWMKvVn/mNtuABJh9kzT2
h8UBiRNarURClh1TgEWu7Y8M6wGe5NhCU5yAQr4Jva62WvpiUsFZ9RIziD75F3Vv
LPTg/TBeJA46otZPyd2He1WmmBNoQDXbuBxkOfWEh/PJuJ1daxck2NIcoGWT6dkY
3TQtjHS6B2CFbcnjKPgdySKadnTlfdn9dVS01Rqun2JevWgaOBzM7DtxtBiZozmy
j/u0YUedi8Q7oOUxX3ql9GxYSrEgS9bUyPLAr4eEBgoPAMHfHITIJ2i+iXIZqpQ1
VrtdGIFjaX/tE1Mq4SBd4kmpQN3jCE0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:33:41 2025 by rpki-client