Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a648b667-a6c9-3b3f-a308-11ebd102d63b.roa
File: a648b667-a6c9-3b3f-a308-11ebd102d63b.roa (raw, json)
Hash identifier: CEPH/WJ8ind6lVKxcEQ3jXtI8lxGXitvh6ZuxX91lCc=
Subject key identifier: 63:3C:6D:CF:E9:D3:90:94:86:74:5C:88:11:C6:05:83:C9:AF:E5:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0677DFD0E7B98E2664080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a648b667-a6c9-3b3f-a308-11ebd102d63b.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.196.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:67:7d:fd:0e:7b:98:e2:66:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=caf328d6-8e89-4fd2-a422-7b851d0cebb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:76:83:67:bf:8d:c0:64:20:33:06:63:89:
ac:ba:e8:fa:06:5c:37:56:e8:a5:d0:65:eb:bc:95:
3e:a7:f5:eb:61:ca:73:44:08:ee:54:6f:50:3b:48:
14:b4:18:a8:cc:a7:30:38:17:a3:be:16:be:2a:9d:
0a:3f:cd:bb:61:b0:8d:00:10:78:ff:b3:0f:11:bf:
78:f3:89:b2:6b:e8:78:d9:a6:4e:74:aa:85:83:a1:
c6:13:84:a7:9a:01:d5:43:38:01:3b:df:ab:5d:f8:
02:3e:39:84:3c:66:3e:6e:e8:ad:3d:92:59:43:6f:
35:77:5c:1e:b1:9c:3c:5d:cd:d6:70:4e:fc:b6:8c:
98:7e:ee:36:05:fe:cf:30:7d:b4:db:a8:39:de:c2:
4f:e0:cc:ca:04:16:ea:07:2a:31:ec:2c:c3:db:87:
88:bb:95:07:10:a0:c7:24:bf:6c:9f:d3:79:c3:2e:
e5:17:7d:9d:81:e6:49:e1:b1:66:f5:a9:28:4b:cc:
fe:03:7f:f1:d2:30:21:0e:c1:35:b0:69:a1:f3:42:
56:73:b5:1c:73:21:89:70:ef:55:93:c2:12:55:4b:
d4:8b:bc:6c:63:d2:05:12:cd:3d:18:40:eb:be:85:
ed:8a:00:32:c6:bc:5c:6e:70:65:92:c3:61:00:3f:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3C:6D:CF:E9:D3:90:94:86:74:5C:88:11:C6:05:83:C9:AF:E5:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a648b667-a6c9-3b3f-a308-11ebd102d63b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.196.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:12:10:eb:3b:e6:2a:c7:00:ca:11:d1:70:b2:44:66:67:76:
49:26:9f:b5:21:d4:0f:8e:ec:60:18:7b:38:a4:08:f3:ee:90:
17:e2:92:b5:5f:e6:29:cb:31:ef:0e:85:b9:ce:51:19:8b:e6:
9f:51:5b:2b:e2:43:29:1b:d8:c7:94:54:2f:44:48:7f:c1:c0:
08:31:2a:05:84:65:1d:93:64:25:b3:de:9d:ec:ac:01:b0:c4:
06:7a:ee:33:e8:fa:f0:fe:83:b7:39:1a:b1:c5:c7:3a:8d:13:
52:1b:4e:40:3f:6e:bb:5e:a4:ba:b2:f4:64:e7:6f:29:5b:5e:
ff:f6:be:57:d7:c8:42:8e:3b:fd:67:df:df:d1:67:18:67:14:
47:8d:a7:6f:7c:34:92:4d:a7:15:b0:d4:31:a7:f0:11:a5:ff:
60:59:97:34:96:04:03:24:1d:3e:0f:a0:0b:22:64:68:c8:58:
1a:d7:61:31:30:e1:d0:4f:d6:47:0c:bd:0c:03:04:ed:77:54:
cb:42:ae:0d:9f:29:98:62:f1:cc:bb:ad:fe:bb:9e:9e:04:26:
12:38:f5:2c:6d:29:c1:07:cc:71:4c:b7:d1:39:cc:54:e5:0e:
03:56:15:de:7b:1a:4b:48:de:d0:d0:9a:41:06:f3:ff:bc:d3:
1f:53:b4:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssGd9/Q57mOJmQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2FmMzI4ZDYtOGU4OS00ZmQyLWE0MjItN2I4NTFkMGNlYmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx12g2e/jcBkIDMGY4msuuj6Blw3Vuil0GXr
vJU+p/XrYcpzRAjuVG9QO0gUtBiozKcwOBejvha+Kp0KP827YbCNABB4/7MPEb94
84mya+h42aZOdKqFg6HGE4SnmgHVQzgBO9+rXfgCPjmEPGY+buitPZJZQ281d1we
sZw8Xc3WcE78toyYfu42Bf7PMH2026g53sJP4MzKBBbqByox7CzD24eIu5UHEKDH
JL9sn9N5wy7lF32dgeZJ4bFm9akoS8z+A3/x0jAhDsE1sGmh80JWc7UccyGJcO9V
k8ISVUvUi7xsY9IFEs09GEDrvoXtigAyxrxcbnBlksNhAD+ZEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGM8bc/p05CUhnRciBHGBYPJr+WfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTY0OGI2NjctYTZjOS0z
YjNmLWEzMDgtMTFlYmQxMDJkNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScQqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD4SEOs75irHAMoR0XCyRGZndkkmn7Uh1A+O7GAYezikCPPukBfikrVf
5inLMe8OhbnOURmL5p9RWyviQykb2MeUVC9ESH/BwAgxKgWEZR2TZCWz3p3srAGw
xAZ67jPo+vD+g7c5GrHFxzqNE1IbTkA/brtepLqy9GTnbylbXv/2vlfXyEKOO/1n
39/RZxhnFEeNp298NJJNpxWw1DGn8BGl/2BZlzSWBAMkHT4PoAsiZGjIWBrXYTEw
4dBP1kcMvQwDBO13VMtCrg2fKZhi8cy7rf67np4EJhI49SxtKcEHzHFMt9E5zFTl
DgNWFd57GktI3tDQmkEG8/+80x9TtCQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:21 2025 by rpki-client