Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6829af1-e6c7-3cb1-bc1d-08a64c5be0f4.roa
File: f6829af1-e6c7-3cb1-bc1d-08a64c5be0f4.roa (raw, json)
Hash identifier: +hu7ID/L9yaqm2LXPJvCe5BK8S4XSBfpopdxBup9zgA=
Subject key identifier: F8:35:1A:84:28:8C:75:F5:4A:AB:E9:A6:AE:75:C6:C1:35:90:53:18
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAECB76A59287967E1EDBC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6829af1-e6c7-3cb1-bc1d-08a64c5be0f4.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.33.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:cb:76:a5:92:87:96:7e:1e:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=3d887418-63f0-45c6-9f58-c7fd3ec2c322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:6b:a0:38:f9:d9:cd:02:55:29:35:75:e9:
19:00:14:25:b1:7e:73:38:24:84:95:61:fe:b3:d3:
a9:20:10:6e:3e:c6:1d:13:c6:79:c0:b5:82:79:66:
5f:3e:57:92:c5:c0:53:a3:b1:5f:46:18:07:6d:05:
14:30:76:b2:39:04:dd:bf:3d:45:55:cd:95:cb:e6:
2f:97:65:b1:1a:39:00:ec:a4:08:3e:2f:84:07:ab:
29:1c:d4:8d:85:db:c6:ac:95:ac:45:ce:d6:44:c4:
a4:79:6f:51:67:db:3e:7a:dd:20:46:8a:44:8f:80:
ab:e2:31:8d:bc:36:bf:e1:09:8a:b7:a4:ca:f1:3a:
fc:e8:55:17:7d:e2:ff:2d:18:5b:99:07:93:33:4c:
38:cd:29:17:a7:85:64:43:66:43:9b:95:74:19:c1:
ed:0d:95:5a:66:2f:c8:25:a1:a0:5f:2a:89:b6:ed:
47:71:1e:f7:37:b2:78:68:41:5e:6b:2c:53:ef:1f:
58:30:63:ca:58:9a:11:d2:9d:60:ae:d2:c5:1e:3c:
53:ef:88:7e:3f:3f:de:53:8e:b7:f9:b4:c3:75:52:
8d:86:fd:5b:bd:ed:dc:85:3e:10:36:fa:a3:48:b9:
5f:e3:12:15:6f:6f:0e:2b:fe:f5:9d:99:f6:78:68:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:35:1A:84:28:8C:75:F5:4A:AB:E9:A6:AE:75:C6:C1:35:90:53:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6829af1-e6c7-3cb1-bc1d-08a64c5be0f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.33.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:3b:df:45:c0:0e:a4:c5:f6:4d:be:86:df:aa:f6:c0:b9:e3:
06:ce:e4:ab:8f:46:fc:b0:6d:10:3c:81:94:02:38:e5:fb:31:
81:88:73:6a:d9:4d:03:75:99:8b:01:e3:1b:a1:f2:cc:b8:7c:
21:7c:0a:16:98:cf:02:fc:93:25:dd:f3:47:ca:71:6d:5f:b4:
00:60:a2:da:29:83:5e:c2:60:69:69:b5:b4:56:71:3c:99:79:
2e:0a:f9:cc:ea:79:5f:59:74:df:21:03:55:d2:23:da:93:17:
47:45:05:7c:54:b0:96:e1:76:a7:c9:fd:37:31:23:bc:aa:e6:
82:fc:15:0c:fe:f4:81:f5:4c:7d:79:26:10:a2:b6:90:fb:33:
35:19:9d:fc:41:e7:30:7d:f2:c2:cd:46:4f:fe:49:ca:f9:df:
36:bd:92:cb:93:e0:a7:78:d3:12:e7:b2:ac:7b:a6:aa:b8:ac:
05:77:ff:26:9c:d8:85:04:7a:ce:bb:fc:ca:80:68:e0:1b:b2:
df:0a:bd:c4:ab:b8:07:d9:65:70:54:43:73:1d:30:0a:97:2c:
85:e3:57:21:d5:61:02:31:ed:e5:b0:2c:c7:d2:a4:85:22:2c:
b1:5f:32:3e:40:f0:44:88:28:b3:53:fa:76:55:99:b2:c5:d8:
87:0a:f6:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrst2pZKHln4e28AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
M2Q4ODc0MTgtNjNmMC00NWM2LTlmNTgtYzdmZDNlYzJjMzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDVroDj52c0CVSk1dekZABQlsX5zOCSElWH+
s9OpIBBuPsYdE8Z5wLWCeWZfPleSxcBTo7FfRhgHbQUUMHayOQTdvz1FVc2Vy+Yv
l2WxGjkA7KQIPi+EB6spHNSNhdvGrJWsRc7WRMSkeW9RZ9s+et0gRopEj4Cr4jGN
vDa/4QmKt6TK8Tr86FUXfeL/LRhbmQeTM0w4zSkXp4VkQ2ZDm5V0GcHtDZVaZi/I
JaGgXyqJtu1HcR73N7J4aEFeayxT7x9YMGPKWJoR0p1grtLFHjxT74h+Pz/eU463
+bTDdVKNhv1bve3chT4QNvqjSLlf4xIVb28OK/71nZn2eGghpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPg1GoQojHX1Sqvppq51xsE1kFMYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjY4MjlhZjEtZTZjNy0z
Y2IxLWJjMWQtMDhhNjRjNWJlMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSSFgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHo730XADqTF9k2+ht+q9sC54wbO5KuPRvywbRA8gZQCOOX7MYGIc2rZ
TQN1mYsB4xuh8sy4fCF8ChaYzwL8kyXd80fKcW1ftABgotopg17CYGlptbRWcTyZ
eS4K+czqeV9ZdN8hA1XSI9qTF0dFBXxUsJbhdqfJ/TcxI7yq5oL8FQz+9IH1TH15
JhCitpD7MzUZnfxB5zB98sLNRk/+Scr53za9ksuT4Kd40xLnsqx7pqq4rAV3/yac
2IUEes67/MqAaOAbst8KvcSruAfZZXBUQ3MdMAqXLIXjVyHVYQIx7eWwLMfSpIUi
LLFfMj5A8ESIKLNT+nZVmbLF2IcK9rA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:15:18 2025 by rpki-client