Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c458e676-5d93-39d3-8b1e-93a4125f3a54.roa
File: c458e676-5d93-39d3-8b1e-93a4125f3a54.roa (raw, json)
Hash identifier: 9EZD+/6TQ6W57Mt1EFwz+hJyxUSnxZA3F5/URQ8We3U=
Subject key identifier: 65:FA:20:F4:FD:45:E1:62:87:99:7C:44:B8:C4:2F:56:46:10:DE:52
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F749C44EBA5EE6E9D56300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c458e676-5d93-39d3-8b1e-93a4125f3a54.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.38.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:49:c4:4e:ba:5e:e6:e9:d5:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=6ae5d1d5-c244-40b8-bffe-3ae71cf78aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:0b:2e:12:f7:1e:89:60:94:ab:de:1e:8c:
b5:be:b9:a7:5a:04:6a:ed:41:ff:7c:42:32:fa:3d:
39:8a:00:b9:09:67:71:52:a1:f4:22:56:ad:a5:e8:
db:82:5b:75:5c:dc:a1:48:93:ae:49:bc:71:7c:a9:
62:ed:3d:ce:85:f2:73:65:68:aa:1f:fa:85:4d:46:
0c:2a:ec:f5:db:70:ad:3f:84:67:e3:c1:a4:39:31:
94:86:a5:21:eb:60:fd:e7:81:5c:3f:94:b3:bd:92:
8d:cb:74:cc:d7:06:68:71:47:8f:f2:94:77:66:f2:
d0:72:38:f9:85:59:5d:68:8a:33:c3:20:e0:35:e1:
2f:0f:13:e3:41:16:0c:2d:ca:d2:a0:7a:06:fd:8d:
2e:fc:e9:5b:dd:02:5d:e8:74:47:4c:2f:9e:cf:69:
46:0d:16:db:fe:8b:95:47:78:f6:9d:3d:cf:75:08:
25:53:b9:2e:29:79:ee:1d:f6:70:60:0f:d9:b6:6f:
9f:69:3d:17:f8:ab:48:c4:e8:98:de:8c:b5:f2:ce:
ec:57:7b:70:a8:d6:64:4c:1c:5b:d3:43:9a:e5:31:
2f:d1:97:b9:f6:4b:d5:d5:cd:ec:a7:96:61:77:43:
0c:29:e7:be:43:5e:42:dd:b2:f3:0b:f2:23:2f:e1:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FA:20:F4:FD:45:E1:62:87:99:7C:44:B8:C4:2F:56:46:10:DE:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c458e676-5d93-39d3-8b1e-93a4125f3a54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.38.26.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:2b:fd:db:21:dd:cc:ad:52:c6:c6:77:48:91:26:90:42:12:
46:26:73:b0:e8:68:77:fd:45:02:b4:2c:05:39:e4:9e:d3:aa:
ac:7e:cb:f7:cb:8c:99:1a:30:8a:06:79:7b:d6:ed:43:b5:4f:
79:23:76:f6:23:d4:41:af:b1:d1:ae:36:38:e2:7d:f1:08:0f:
f2:3e:15:85:a0:c2:87:29:11:ae:be:ae:1f:99:a2:57:92:f9:
1f:ae:96:ff:49:27:ed:13:2a:03:cb:90:9f:c9:60:33:05:b7:
72:e7:b5:a1:86:78:80:92:17:b5:bb:10:11:94:47:16:73:f4:
17:86:90:bc:a7:43:49:d8:78:c6:a6:7d:15:73:8d:df:aa:b4:
26:ab:b7:5a:92:fe:61:c8:45:77:3f:fb:21:23:45:6c:91:2d:
00:e7:f4:e7:80:ef:bd:50:28:47:99:93:d7:6d:53:21:dc:b8:
c7:34:f7:c5:7e:a2:ad:3e:3d:47:29:70:cd:cc:75:ae:02:b5:
02:1d:78:10:ec:92:6d:7f:28:5d:45:be:ee:5b:69:25:79:88:
7a:bd:a9:39:9e:2c:a4:cf:81:e6:90:92:8b:a7:d6:25:e8:db:
07:44:da:b7:8a:8e:39:f3:f7:75:72:eb:5f:f6:04:f1:be:7d:
02:e6:0b:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj090nETrpe5unVYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NmFlNWQxZDUtYzI0NC00MGI4LWJmZmUtM2FlNzFjZjc4YWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkULLhL3HolglKveHoy1vrmnWgRq7UH/fEIy
+j05igC5CWdxUqH0Ilatpejbglt1XNyhSJOuSbxxfKli7T3OhfJzZWiqH/qFTUYM
Kuz123CtP4Rn48GkOTGUhqUh62D954FcP5SzvZKNy3TM1wZocUeP8pR3ZvLQcjj5
hVldaIozwyDgNeEvDxPjQRYMLcrSoHoG/Y0u/Olb3QJd6HRHTC+ez2lGDRbb/ouV
R3j2nT3PdQglU7kuKXnuHfZwYA/Ztm+faT0X+KtIxOiY3oy18s7sV3twqNZkTBxb
00Oa5TEv0Ze59kvV1c3sp5Zhd0MMKee+Q15C3bLzC/IjL+EIzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGX6IPT9ReFih5l8RLjEL1ZGEN5SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzQ1OGU2NzYtNWQ5My0z
OWQzLThiMWUtOTNhNDEyNWYzYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSYaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADor/dsh3cytUsbGd0iRJpBCEkYmc7DoaHf9RQK0LAU55J7Tqqx+y/fL
jJkaMIoGeXvW7UO1T3kjdvYj1EGvsdGuNjjiffEID/I+FYWgwocpEa6+rh+ZoleS
+R+ulv9JJ+0TKgPLkJ/JYDMFt3LntaGGeICSF7W7EBGURxZz9BeGkLynQ0nYeMam
fRVzjd+qtCart1qS/mHIRXc/+yEjRWyRLQDn9OeA771QKEeZk9dtUyHcuMc098V+
oq0+PUcpcM3Mda4CtQIdeBDskm1/KF1Fvu5baSV5iHq9qTmeLKTPgeaQkoun1iXo
2wdE2reKjjnz93Vy61/2BPG+fQLmC8c=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:34 2025 by rpki-client