Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b403f9c7-c7fc-3101-be35-c41506903f3b.roa
File: b403f9c7-c7fc-3101-be35-c41506903f3b.roa (raw, json)
Hash identifier: C415QhMaeTJlFuAyTdGk/sA6YpJBZo2tbXWxboBWaQc=
Subject key identifier: A4:F2:FA:D7:6D:A7:2C:A9:90:12:E0:E7:24:89:3B:A7:3B:D9:6F:37
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203CAD187718ACCF8CB71F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b403f9c7-c7fc-3101-be35-c41506903f3b.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 73.43.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:ad:18:77:18:ac:cf:8c:b7:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=fbbbc2ee-18ed-4cf3-b679-bb9ead7fe315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:ea:58:62:a9:b5:22:40:0b:3b:f3:7a:5a:
17:d4:c3:37:11:29:e1:5d:c7:79:b3:6b:80:cc:75:
03:f9:9e:b5:36:dc:9d:c8:14:b1:a4:0f:cc:fc:0c:
4d:cb:75:f7:b0:c0:b1:ba:d3:15:fd:a8:08:6f:62:
db:00:74:26:e5:5f:b8:7b:4f:d3:c6:b6:1f:2d:48:
46:83:2d:68:e8:0b:30:31:c2:00:4b:73:22:89:fc:
35:c9:02:09:12:d2:14:a6:ce:c0:3f:e1:ba:d1:e9:
7f:b9:81:98:c3:3e:90:54:11:df:d4:28:31:f8:53:
dd:e8:18:c0:8a:4d:03:62:fb:4f:79:78:ab:a1:a0:
88:79:39:ac:e4:5c:0b:5e:de:3d:3f:a3:a0:79:bf:
27:28:dc:82:13:40:ee:ab:f1:fc:93:b7:cf:90:61:
2c:e8:6c:ca:60:c6:87:86:eb:91:96:6b:6a:fb:05:
2c:23:9d:b2:51:c4:25:b3:48:de:42:a5:06:33:4b:
3e:91:15:f3:12:28:31:6c:a1:f8:df:0e:99:4f:46:
b2:f6:95:03:52:d0:5e:31:c6:13:66:59:32:45:7b:
e5:de:44:f6:70:bc:7b:ee:53:bd:19:d7:eb:c5:9c:
03:97:b1:50:be:ed:09:e7:04:3e:d6:2f:68:55:7e:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F2:FA:D7:6D:A7:2C:A9:90:12:E0:E7:24:89:3B:A7:3B:D9:6F:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b403f9c7-c7fc-3101-be35-c41506903f3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.43.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:1a:0b:50:00:e7:65:73:0a:25:eb:46:2a:1f:47:2f:b4:0d:
20:d9:5c:7c:b1:40:a4:82:b6:5e:79:0c:ad:54:cf:48:8c:60:
6b:5a:37:81:a9:0a:2e:26:0f:fb:73:7c:0c:7c:54:f2:b9:2c:
32:b7:ed:a4:58:b0:1d:ae:0f:09:55:49:87:5d:21:90:21:4e:
db:47:60:de:16:dd:fa:f7:6d:dd:4e:1f:fc:4a:1e:6e:6e:45:
7b:78:90:2c:19:3b:08:98:11:6b:15:c8:87:fa:53:d7:c5:55:
5d:ca:e7:f5:95:4f:b0:02:a6:da:5a:75:04:f0:ee:ae:6e:20:
d5:16:5f:f7:49:d1:55:ac:a0:9a:2b:70:4c:1d:e0:25:5f:01:
99:b3:ba:04:87:ef:9e:b2:f4:4b:0f:a8:d0:0a:76:f5:07:07:
3c:bf:e2:79:2b:cf:d0:80:68:39:b0:7b:ba:94:76:f3:8a:ac:
72:b6:74:b6:5a:a4:38:88:29:c1:4c:93:dc:bb:0d:96:d2:a3:
63:39:d0:58:22:da:91:ae:00:f0:74:89:92:62:31:90:23:94:
bc:04:d3:1e:a3:55:8a:e5:75:aa:50:58:b2:ef:aa:b0:1f:25:
4e:17:3e:96:d6:f1:d2:b5:42:0f:e2:3b:2f:d4:6d:0c:26:ae:
73:20:17:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPK0Ydxisz4y3H4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZmJiYmMyZWUtMThlZC00Y2YzLWI2NzktYmI5ZWFkN2ZlMzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4/qWGKptSJACzvzeloX1MM3ESnhXcd5s2uA
zHUD+Z61NtydyBSxpA/M/AxNy3X3sMCxutMV/agIb2LbAHQm5V+4e0/TxrYfLUhG
gy1o6AswMcIAS3Miifw1yQIJEtIUps7AP+G60el/uYGYwz6QVBHf1Cgx+FPd6BjA
ik0DYvtPeXiroaCIeTms5FwLXt49P6Ogeb8nKNyCE0Duq/H8k7fPkGEs6GzKYMaH
huuRlmtq+wUsI52yUcQls0jeQqUGM0s+kRXzEigxbKH43w6ZT0ay9pUDUtBeMcYT
ZlkyRXvl3kT2cLx77lO9GdfrxZwDl7FQvu0J5wQ+1i9oVX7T5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKTy+tdtpyypkBLg5ySJO6c72W83MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjQwM2Y5YzctYzdmYy0z
MTAxLWJlMzUtYzQxNTA2OTAzZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSSswMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUaC1AA52VzCiXrRiofRy+0DSDZXHyxQKSCtl55DK1Uz0iMYGtaN4Gp
Ci4mD/tzfAx8VPK5LDK37aRYsB2uDwlVSYddIZAhTttHYN4W3fr3bd1OH/xKHm5u
RXt4kCwZOwiYEWsVyIf6U9fFVV3K5/WVT7ACptpadQTw7q5uINUWX/dJ0VWsoJor
cEwd4CVfAZmzugSH756y9EsPqNAKdvUHBzy/4nkrz9CAaDmwe7qUdvOKrHK2dLZa
pDiIKcFMk9y7DZbSo2M50Fgi2pGuAPB0iZJiMZAjlLwE0x6jVYrldapQWLLvqrAf
JU4XPpbW8dK1Qg/iOy/UbQwmrnMgF/4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:11:04 2025 by rpki-client