Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abab1d58-bf42-3c91-8346-41951a4b7eea.roa
File: abab1d58-bf42-3c91-8346-41951a4b7eea.roa (raw, json)
Hash identifier: beDsmioPpHqh3YItlb3vjs8mIo4bu9t4te1GvorGILQ=
Subject key identifier: 31:36:1B:F0:D4:D2:AA:77:0B:2F:E4:2A:F0:C9:6E:95:22:72:E8:C7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB066157237E75674463D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abab1d58-bf42-3c91-8346-41951a4b7eea.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.195.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:66:15:72:37:e7:56:74:46:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=649f1ab7-c16d-408e-b3a2-6a2e4f659015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:8f:c6:53:54:74:5f:9c:66:eb:64:31:8b:
02:3f:a6:9c:5b:96:e4:7e:27:76:30:2d:05:46:06:
86:e8:9e:a7:08:79:fc:97:a6:1e:6d:da:9b:9a:65:
eb:82:1b:4b:ca:be:fd:77:4a:1b:68:ef:05:2e:6f:
f0:e4:ba:44:b9:69:0e:4b:50:f9:e4:a8:b6:fe:25:
f5:c4:a3:de:b8:26:a5:3d:ec:ca:d0:9c:2d:36:dd:
69:e7:c5:fc:3a:fe:b7:8a:71:dd:c5:7a:ba:b1:a7:
31:e4:8d:4e:a8:41:c8:5d:91:82:29:ef:82:0d:48:
14:f0:96:39:6c:1f:40:1f:89:6c:83:2b:66:3a:ad:
77:85:8c:12:7a:45:0d:a9:66:de:ec:25:43:9f:07:
43:c3:db:40:4c:fc:8b:1b:6d:97:d9:ba:5e:04:0f:
7e:6c:c8:0b:0e:d9:70:28:31:33:fb:7b:8b:db:73:
db:7f:fb:95:65:94:ad:cd:95:12:32:d4:cd:be:c7:
00:73:a0:53:f4:e4:04:04:e7:c3:1d:12:4c:1d:09:
f5:e6:16:95:c8:cb:c6:8c:b6:61:bc:1f:fa:c0:08:
bb:2d:d6:c3:22:46:17:ec:04:03:3b:52:da:ee:fe:
02:e8:93:b1:1f:41:64:0e:a1:17:4c:97:2b:be:4f:
96:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:36:1B:F0:D4:D2:AA:77:0B:2F:E4:2A:F0:C9:6E:95:22:72:E8:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/abab1d58-bf42-3c91-8346-41951a4b7eea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.195.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:72:8a:6c:d9:de:d4:c2:6b:a7:9a:53:84:4f:ab:ae:d2:b1:
39:8d:89:33:78:56:68:58:1a:cd:40:ab:10:e6:bc:87:0c:51:
a3:c4:a8:3d:25:88:77:a1:9c:7c:34:06:ab:87:cd:31:7f:9b:
70:e4:92:31:57:2a:86:6b:b7:40:34:57:15:7c:b4:21:9f:20:
80:8f:43:bc:c0:b6:25:fd:57:e0:3c:a2:7d:d2:6f:5f:97:2c:
b1:ec:24:a1:e6:4b:bd:1a:81:74:41:88:96:bd:a7:3f:f7:de:
54:9d:5f:cc:6e:ee:82:eb:80:06:7e:4d:c4:04:98:3f:84:7e:
7c:96:2f:e6:0d:4c:d9:d8:af:a6:c2:66:48:6b:7c:df:bf:45:
b4:44:98:62:38:38:4e:b3:9a:df:a7:f8:53:85:de:b7:39:94:
6f:70:6b:90:83:23:c3:99:f3:3a:f5:95:2b:f2:3d:8e:02:23:
7d:2b:f4:23:ec:15:05:1e:b8:30:2b:a8:56:cf:a2:40:ba:76:
2f:35:a8:72:2d:58:0d:65:79:99:63:e8:4d:84:e2:f2:89:4a:
c5:59:eb:8d:bf:14:9a:aa:11:3a:3d:d9:52:68:45:a6:f6:ea:
86:18:f3:1d:9a:1a:4e:89:7f:9e:25:a6:90:0f:93:3e:5c:3d:
b1:66:a1:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssGYVcjfnVnRGPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NjQ5ZjFhYjctYzE2ZC00MDhlLWIzYTItNmEyZTRmNjU5MDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3aPxlNUdF+cZutkMYsCP6acW5bkfid2MC0F
RgaG6J6nCHn8l6YebdqbmmXrghtLyr79d0obaO8FLm/w5LpEuWkOS1D55Ki2/iX1
xKPeuCalPezK0JwtNt1p58X8Ov63inHdxXq6sacx5I1OqEHIXZGCKe+CDUgU8JY5
bB9AH4lsgytmOq13hYwSekUNqWbe7CVDnwdDw9tATPyLG22X2bpeBA9+bMgLDtlw
KDEz+3uL23Pbf/uVZZStzZUSMtTNvscAc6BT9OQEBOfDHRJMHQn15haVyMvGjLZh
vB/6wAi7LdbDIkYX7AQDO1La7v4C6JOxH0FkDqEXTJcrvk+WxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDE2G/DU0qp3Cy/kKvDJbpUicujHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWJhYjFkNTgtYmY0Mi0z
YzkxLTgzNDYtNDE5NTFhNGI3ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScOoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMlyimzZ3tTCa6eaU4RPq67SsTmNiTN4VmhYGs1AqxDmvIcMUaPEqD0l
iHehnHw0BquHzTF/m3DkkjFXKoZrt0A0VxV8tCGfIICPQ7zAtiX9V+A8on3Sb1+X
LLHsJKHmS70agXRBiJa9pz/33lSdX8xu7oLrgAZ+TcQEmD+EfnyWL+YNTNnYr6bC
ZkhrfN+/RbREmGI4OE6zmt+n+FOF3rc5lG9wa5CDI8OZ8zr1lSvyPY4CI30r9CPs
FQUeuDArqFbPokC6di81qHItWA1leZlj6E2E4vKJSsVZ642/FJqqETo92VJoRab2
6oYY8x2aGk6Jf54lppAPkz5cPbFmoTc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:02 2025 by rpki-client