Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4487e32-4ef8-33b1-b35b-9a093e91b8e1.roa
File: f4487e32-4ef8-33b1-b35b-9a093e91b8e1.roa (raw, json)
Hash identifier: x58clocr8dRVmIYsltfjouVop/hQ2SNXq1iqEePR4ag=
Subject key identifier: A1:F4:FB:B4:40:9F:A7:5B:95:C4:19:36:C6:FD:7E:7C:1B:6B:F7:A7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F886269024B2C73C602040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4487e32-4ef8-33b1-b35b-9a093e91b8e1.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.167.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:86:26:90:24:b2:c7:3c:60:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=c2ba9f6c-1581-4095-a18a-44481bb9331c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:d7:d2:5d:67:23:92:44:50:76:ce:eb:07:
03:90:5a:87:ab:fb:80:51:fb:a7:97:36:d2:a7:12:
8d:76:fd:37:ac:1c:89:7c:2c:da:c0:ad:3e:ab:c3:
f6:24:d2:ed:5a:da:5a:6b:01:6a:e8:24:e6:42:7e:
a8:dd:d2:0b:68:ab:24:ff:d4:ea:dc:5f:35:c0:7e:
45:40:a7:93:4a:55:75:63:bf:94:c6:e0:2a:c4:cc:
f5:a5:1d:de:32:e0:6a:8b:2f:1c:34:8a:1e:1f:aa:
23:36:fd:72:da:76:0e:43:bd:fd:70:81:b0:17:52:
8d:cb:f9:4e:09:c6:f4:0d:cd:43:04:13:b6:df:3e:
a3:00:58:77:7c:84:71:8c:ba:75:aa:c5:53:a4:96:
84:88:3a:58:fb:22:d5:63:a0:90:b8:0f:5e:ee:1f:
a7:20:64:88:0e:fd:b9:cf:e2:6b:17:bf:18:e8:f1:
02:bd:6c:ee:1d:52:57:3b:b5:ad:49:49:50:2b:fa:
58:c2:09:62:5a:83:33:d2:b2:f3:eb:4b:49:c2:70:
fe:4d:6c:7c:0a:e3:49:60:b8:8f:ad:39:28:b3:9f:
cb:d7:d5:9c:fc:7a:2b:aa:a8:40:c1:0b:4d:a4:3c:
7d:0a:d8:50:6a:59:01:c4:07:60:4f:52:a8:5f:c6:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F4:FB:B4:40:9F:A7:5B:95:C4:19:36:C6:FD:7E:7C:1B:6B:F7:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4487e32-4ef8-33b1-b35b-9a093e91b8e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.167.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:a4:69:af:55:45:a2:fc:75:56:da:ab:84:c9:88:a8:a2:0a:
7b:ff:4a:b4:94:b3:ce:ce:59:dc:87:ee:0a:86:ac:6a:b8:3c:
d3:d5:62:8b:c2:64:18:fa:0c:50:f5:e2:d5:c0:e5:f1:1e:59:
f6:f9:bd:1f:30:aa:67:06:95:04:f4:97:71:3a:e5:5f:26:a1:
f2:b3:65:3e:3c:6b:aa:7a:77:cf:58:35:17:89:a9:81:18:cb:
7d:3f:2e:75:36:93:43:0f:04:0e:de:6a:00:1e:7d:d1:08:1d:
85:8a:d8:13:4e:48:77:43:e5:29:d3:ff:7c:79:ba:6a:81:14:
9b:14:fd:cd:09:3e:49:d5:9a:c2:57:32:08:5b:fa:e1:c4:cb:
b3:d0:e5:22:f1:81:5a:e0:f8:60:81:95:ef:8d:e3:c1:7d:73:
e0:3e:74:a6:2f:c9:95:13:70:19:15:36:44:0d:78:66:ad:fa:
ee:bf:00:d9:8f:f7:3d:97:7c:d8:08:ae:c9:cc:97:2e:29:c9:
0f:99:37:d8:9c:86:4c:48:e4:d1:70:f3:f2:f7:81:6c:5e:dd:
9d:de:45:a4:87:6b:74:97:21:ba:ab:05:60:16:c9:3b:f0:54:
6f:11:81:3b:47:06:3f:f9:71:4d:6c:4f:4c:e6:80:a6:1b:0c:
34:03:02:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+IYmkCSyxzxgIEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YzJiYTlmNmMtMTU4MS00MDk1LWExOGEtNDQ0ODFiYjkzMzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR/X0l1nI5JEUHbO6wcDkFqHq/uAUfunlzbS
pxKNdv03rByJfCzawK0+q8P2JNLtWtpaawFq6CTmQn6o3dILaKsk/9Tq3F81wH5F
QKeTSlV1Y7+UxuAqxMz1pR3eMuBqiy8cNIoeH6ojNv1y2nYOQ739cIGwF1KNy/lO
Ccb0Dc1DBBO23z6jAFh3fIRxjLp1qsVTpJaEiDpY+yLVY6CQuA9e7h+nIGSIDv25
z+JrF78Y6PECvWzuHVJXO7WtSUlQK/pYwgliWoMz0rLz60tJwnD+TWx8CuNJYLiP
rTkos5/L19Wc/HorqqhAwQtNpDx9CthQalkBxAdgT1KoX8ZeWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKH0+7RAn6dblcQZNsb9fnwba/enMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQ0ODdlMzItNGVmOC0z
M2IxLWIzNWItOWEwOTNlOTFiOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSacgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6kaa9VRaL8dVbaq4TJiKiiCnv/SrSUs87OWdyH7gqGrGq4PNPVYovC
ZBj6DFD14tXA5fEeWfb5vR8wqmcGlQT0l3E65V8mofKzZT48a6p6d89YNReJqYEY
y30/LnU2k0MPBA7eagAefdEIHYWK2BNOSHdD5SnT/3x5umqBFJsU/c0JPknVmsJX
Mghb+uHEy7PQ5SLxgVrg+GCBle+N48F9c+A+dKYvyZUTcBkVNkQNeGat+u6/ANmP
9z2XfNgIrsnMly4pyQ+ZN9ichkxI5NFw8/L3gWxe3Z3eRaSHa3SXIbqrBWAWyTvw
VG8RgTtHBj/5cU1sT0zmgKYbDDQDAo4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:18 2025 by rpki-client