Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9a45627-706a-3d2f-bd05-d230b15ef9fe.roa
File: d9a45627-706a-3d2f-bd05-d230b15ef9fe.roa (raw, json)
Hash identifier: SCurf3aRzAE619z+OZ/s3Ug7SyFdQwCHMZI8z3BJCy0=
Subject key identifier: C4:AA:8F:1B:ED:94:ED:21:9D:E5:44:35:64:B8:09:CC:1A:B3:D0:6B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F73A37AA3D688CEE890540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9a45627-706a-3d2f-bd05-d230b15ef9fe.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.219.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:3a:37:aa:3d:68:8c:ee:89:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=1eb27a5b-76ee-4106-80a2-711d957388e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:b2:4f:ea:9f:eb:aa:41:31:e3:63:13:1a:
11:d0:ea:86:0d:54:63:82:b5:58:91:6b:55:c5:77:
c0:73:11:26:de:8a:ec:fe:e2:98:11:1b:1f:bb:7c:
dc:05:0d:94:5f:8e:ee:95:f5:aa:06:81:27:a9:9e:
75:1b:ad:da:3c:4e:0e:7d:c9:d5:31:1c:51:8e:5d:
ad:5f:6a:cd:de:8a:94:a7:18:48:cd:ac:27:5e:6d:
bf:16:93:3b:85:4d:9b:3c:0b:cd:c5:93:7d:4d:63:
c5:c4:56:1e:44:45:74:cd:b6:36:99:de:30:f7:6e:
51:14:27:e3:a1:b5:65:23:f2:02:dc:a2:4f:bf:f9:
f0:4c:20:bc:6c:3d:29:3e:e0:8d:9f:83:a2:b1:73:
75:cc:89:23:b7:47:3d:8d:93:6e:90:62:c2:cb:10:
0d:9b:83:98:22:d0:cc:f7:d4:72:47:69:85:64:37:
3e:48:d8:38:ed:cc:49:f0:6d:42:fa:04:cc:8c:be:
ff:f3:f6:86:64:21:d8:b0:26:ed:b8:86:ca:fb:52:
41:e5:d1:57:95:51:e0:a4:9f:5a:a1:a5:46:d3:88:
a8:a2:ea:10:c6:90:14:be:d6:e9:56:57:c8:42:c8:
ea:13:bf:b2:02:c7:fe:fb:e8:cf:e3:8e:98:60:9e:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AA:8F:1B:ED:94:ED:21:9D:E5:44:35:64:B8:09:CC:1A:B3:D0:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9a45627-706a-3d2f-bd05-d230b15ef9fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.219.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:f7:88:cf:17:ed:8d:7f:77:a8:54:09:5c:4e:43:6d:66:c7:
45:8c:a5:ee:9d:28:c6:e1:b9:f6:fc:3b:5d:08:66:4c:f1:7e:
4f:d6:ea:a2:aa:6b:85:9a:02:4b:f5:a5:49:c1:8d:83:17:29:
23:5d:72:d8:43:a3:97:c3:2d:7f:04:da:67:ca:22:f4:2f:de:
b1:e2:5d:b9:5b:97:62:22:58:0a:c9:7d:8c:15:60:70:70:e7:
1f:e7:9c:dc:55:23:91:60:e1:6a:8f:fa:cd:12:39:fd:de:fb:
1e:5f:8f:76:24:0e:c7:31:65:e9:35:83:1f:e2:67:8e:88:1e:
e1:6a:c5:8e:1f:c2:0b:f6:8e:7c:d6:ff:5c:95:11:7f:96:89:
b5:53:17:7b:9e:a9:d5:e2:2b:41:08:cf:5c:c5:1f:29:23:ab:
c4:2a:04:cc:84:4b:60:e2:d4:37:93:47:af:35:c0:78:be:e0:
87:60:09:ac:8a:25:ce:5b:b6:6f:a1:f6:76:cf:93:b2:0c:5c:
50:77:bf:ce:72:ab:6f:2a:d3:80:d0:dd:aa:85:d1:b8:97:8a:
f3:32:ca:70:6c:38:a1:47:f2:e6:38:96:70:36:29:99:b9:b7:
9f:84:8a:a0:65:b4:46:f7:cc:e4:95:26:bb:49:2a:68:43:60:
72:e8:96:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09zo3qj1ojO6JBUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MWViMjdhNWItNzZlZS00MTA2LTgwYTItNzExZDk1NzM4OGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj+yT+qf66pBMeNjExoR0OqGDVRjgrVYkWtV
xXfAcxEm3ors/uKYERsfu3zcBQ2UX47ulfWqBoEnqZ51G63aPE4OfcnVMRxRjl2t
X2rN3oqUpxhIzawnXm2/FpM7hU2bPAvNxZN9TWPFxFYeREV0zbY2md4w925RFCfj
obVlI/IC3KJPv/nwTCC8bD0pPuCNn4OisXN1zIkjt0c9jZNukGLCyxANm4OYItDM
99RyR2mFZDc+SNg47cxJ8G1C+gTMjL7/8/aGZCHYsCbtuIbK+1JB5dFXlVHgpJ9a
oaVG04ioouoQxpAUvtbpVlfIQsjqE7+yAsf+++jP446YYJ5K5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSqjxvtlO0hneVENWS4Ccwas9BrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDlhNDU2MjctNzA2YS0z
ZDJmLWJkMDUtZDIzMGIxNWVmOWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSdvoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHr3iM8X7Y1/d6hUCVxOQ21mx0WMpe6dKMbhufb8O10IZkzxfk/W6qKq
a4WaAkv1pUnBjYMXKSNdcthDo5fDLX8E2mfKIvQv3rHiXblbl2IiWArJfYwVYHBw
5x/nnNxVI5Fg4WqP+s0SOf3e+x5fj3YkDscxZek1gx/iZ46IHuFqxY4fwgv2jnzW
/1yVEX+WibVTF3ueqdXiK0EIz1zFHykjq8QqBMyES2Di1DeTR681wHi+4IdgCayK
Jc5btm+h9nbPk7IMXFB3v85yq28q04DQ3aqF0biXivMyynBsOKFH8uY4lnA2KZm5
t5+EiqBltEb3zOSVJrtJKmhDYHLolss=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:51 2025 by rpki-client