Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e40e45a5-26ed-31d4-b7b1-7a9a2e400e92.roa
File: e40e45a5-26ed-31d4-b7b1-7a9a2e400e92.roa (raw, json)
Hash identifier: Rv7WYQ+L6R0kynpO6ACusgIcZLxtcqL/dflTwazNOEw=
Subject key identifier: 2A:CE:5F:44:7D:CC:13:17:23:0D:93:E4:D1:BB:C5:30:45:D7:A6:D9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0589C9C95CAF2799594C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e40e45a5-26ed-31d4-b7b1-7a9a2e400e92.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.33.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:58:9c:9c:95:ca:f2:79:95:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=725c1f2e-9906-405e-8b1c-c9825f55e056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:45:75:60:65:1e:d6:02:b3:29:01:0c:f3:
dc:92:aa:18:6d:ef:c3:e7:fe:de:ab:90:fc:85:1f:
b2:04:20:45:c6:42:29:67:51:24:32:f3:ad:61:a5:
ab:1a:49:a9:90:7c:15:4b:be:76:16:a7:37:8c:8f:
2f:b4:c5:9e:78:d1:c9:6d:f7:5b:f6:09:f3:1c:24:
b1:83:8b:10:0a:80:5c:12:57:13:2f:5e:fe:38:07:
c6:ca:5d:33:3b:fa:65:4e:0d:2f:fb:9a:03:27:f4:
1a:6d:0f:28:c8:18:54:9e:0e:55:bc:3e:3b:08:10:
fe:dd:04:62:07:2c:84:77:47:14:0b:10:ac:80:e9:
67:95:41:21:2d:91:bd:8a:52:a3:d9:30:d5:db:bb:
e9:e4:7d:61:82:fd:98:13:88:ed:a4:87:8b:29:87:
fa:b2:3e:b7:5d:a3:02:58:10:d6:ad:f1:2c:e1:b2:
cb:ff:e0:9a:8e:b7:64:b0:e8:20:61:6d:2d:a7:a3:
f3:9d:19:fb:3e:6f:8b:bd:84:85:28:4f:34:8e:af:
09:ed:ab:f8:3c:40:52:ba:75:77:97:0e:6d:49:e2:
36:f9:94:75:b4:09:9e:19:22:57:27:ce:d5:51:8e:
68:81:77:1d:5b:a3:29:fc:b0:59:c4:ad:2b:d2:c6:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CE:5F:44:7D:CC:13:17:23:0D:93:E4:D1:BB:C5:30:45:D7:A6:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e40e45a5-26ed-31d4-b7b1-7a9a2e400e92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.33.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:db:e2:87:1f:8b:af:1e:e0:54:dd:bb:e0:62:19:bc:52:9a:
60:79:aa:02:e2:26:03:9c:8f:13:b5:57:b2:e7:df:0d:32:2c:
4d:23:5a:e7:ad:a7:f0:57:f4:57:07:c0:19:1a:e3:87:53:30:
93:d7:eb:44:47:dd:83:50:14:ca:d3:aa:98:4f:03:64:30:3d:
d9:f0:c1:bb:19:5b:5c:53:e9:8d:a2:8d:89:2f:d4:5c:fe:ef:
63:81:6a:1d:94:32:e2:2a:b6:2c:1a:88:e6:1b:5f:8c:e3:e3:
a1:bb:3c:70:54:b0:d3:51:e5:bb:a6:92:15:af:83:cb:7f:82:
41:03:13:56:95:33:d8:9a:84:5d:1e:8a:02:7b:40:40:b1:c4:
aa:48:5b:b1:5f:4f:98:6b:a2:a5:e7:4c:40:76:a4:6c:d4:01:
e9:ef:d5:18:8f:f1:74:1e:6f:2e:c7:5d:ff:00:8b:f5:a3:8f:
1d:9c:a2:66:a1:a9:36:39:ab:e2:0c:7d:85:71:b6:04:19:12:
91:4e:91:57:4d:5f:8e:db:4d:7e:bb:b2:3f:0e:7e:73:7b:36:
de:e5:87:37:fb:b7:33:7b:af:77:aa:e0:52:0e:b0:84:62:95:
65:9d:da:af:77:9a:f4:62:7e:54:a6:38:f4:ee:99:0c:eb:f3:
c3:60:5a:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssFicnJXK8nmVlMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NzI1YzFmMmUtOTkwNi00MDVlLThiMWMtYzk4MjVmNTVlMDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFhFdWBlHtYCsykBDPPckqoYbe/D5/7eq5D8
hR+yBCBFxkIpZ1EkMvOtYaWrGkmpkHwVS752Fqc3jI8vtMWeeNHJbfdb9gnzHCSx
g4sQCoBcElcTL17+OAfGyl0zO/plTg0v+5oDJ/QabQ8oyBhUng5VvD47CBD+3QRi
ByyEd0cUCxCsgOlnlUEhLZG9ilKj2TDV27vp5H1hgv2YE4jtpIeLKYf6sj63XaMC
WBDWrfEs4bLL/+CajrdksOggYW0tp6PznRn7Pm+LvYSFKE80jq8J7av4PEBSunV3
lw5tSeI2+ZR1tAmeGSJXJ87VUY5ogXcdW6Mp/LBZxK0r0sZCRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrOX0R9zBMXIw2T5NG7xTBF16bZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTQwZTQ1YTUtMjZlZC0z
MWQ0LWI3YjEtN2E5YTJlNDAwZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSSEcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrb4ocfi68e4FTdu+BiGbxSmmB5qgLiJgOcjxO1V7Ln3w0yLE0jWuet
p/BX9FcHwBka44dTMJPX60RH3YNQFMrTqphPA2QwPdnwwbsZW1xT6Y2ijYkv1Fz+
72OBah2UMuIqtiwaiOYbX4zj46G7PHBUsNNR5bumkhWvg8t/gkEDE1aVM9iahF0e
igJ7QECxxKpIW7FfT5hroqXnTEB2pGzUAenv1RiP8XQeby7HXf8Ai/Wjjx2comah
qTY5q+IMfYVxtgQZEpFOkVdNX47bTX67sj8OfnN7Nt7lhzf7tzN7r3eq4FIOsIRi
lWWd2q93mvRiflSmOPTumQzr88NgWnw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:30 2025 by rpki-client