Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f161bf-9dbd-3119-a24c-d15429750813.roa
File: f8f161bf-9dbd-3119-a24c-d15429750813.roa (raw, json)
Hash identifier: 62k10iz4Vc5h1/BGUEYt4QevzEGsN+EevRYg8trYW+I=
Subject key identifier: BB:41:5A:C6:22:24:F1:C8:E1:B3:3C:EC:E0:D8:37:19:70:D7:73:8C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8B7B192434FE6E4BA8780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f161bf-9dbd-3119-a24c-d15429750813.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.89.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:b7:b1:92:43:4f:e6:e4:ba:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=511a953b-af66-4569-973d-8006f7aefc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:32:0e:b1:37:19:82:d3:9c:27:df:36:11:
e7:79:a9:d8:72:3a:4d:84:1f:c5:f2:53:82:3e:7d:
2a:aa:ed:0b:57:2e:ff:ef:52:0f:a3:a5:15:de:c3:
e3:ec:bb:09:7b:69:a2:9d:8d:a8:8b:4c:7b:95:21:
8b:2a:07:d0:17:23:45:38:ee:a4:b9:97:6c:cb:49:
62:16:7e:9e:0f:58:c4:57:44:80:2c:93:7d:87:02:
65:b7:bd:2f:5b:20:66:a3:d1:62:38:ff:e9:e6:61:
bd:10:2e:1d:cf:5a:b6:49:8f:c7:96:96:43:57:60:
f1:05:b4:a5:8e:65:00:65:89:f9:6b:c0:59:25:6c:
62:12:cf:68:7d:42:04:8e:c6:8e:24:d5:48:c3:24:
d6:0a:5c:46:fd:37:6c:74:13:1e:e7:f0:22:a5:7f:
00:45:64:db:94:b3:5e:30:0a:08:81:5c:6b:3a:70:
77:9c:9b:54:6e:07:95:96:8c:c2:8e:29:48:0f:b7:
4a:71:21:eb:d3:bf:a1:5f:2b:b3:99:96:c8:94:e1:
4e:a7:a0:9e:cf:60:e1:83:59:88:fc:04:4b:57:cb:
e1:ad:a1:b8:0e:54:d2:29:ad:a4:34:72:ab:93:b5:
ea:36:f7:88:63:34:d9:2c:c4:4a:a4:6e:8d:62:5f:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:41:5A:C6:22:24:F1:C8:E1:B3:3C:EC:E0:D8:37:19:70:D7:73:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f161bf-9dbd-3119-a24c-d15429750813.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.89.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:e7:a1:1c:cc:aa:82:8b:2b:05:cf:e9:32:91:f6:aa:05:f7:
c7:97:6c:77:79:c6:91:be:67:ab:f9:b6:a4:d3:62:0f:1f:cc:
bd:0a:e3:c8:4f:6e:5b:ce:c9:6c:55:70:9d:0b:cf:08:ae:f9:
ad:50:c1:d3:f6:d0:4d:95:32:38:0f:c9:64:1e:6c:d9:12:54:
f0:2f:a8:43:87:d4:6c:86:ff:92:c0:0a:4b:db:8e:ef:e6:85:
66:9c:4e:a8:6b:64:03:d5:f5:fc:83:1d:b4:92:1c:5d:e2:16:
22:58:4a:fc:9c:a3:c7:7b:4e:6e:04:7f:2f:ca:11:03:7b:74:
8f:2e:b5:21:3e:8d:4a:22:52:c8:40:38:15:75:6b:6c:e5:16:
79:66:26:27:5f:00:36:cd:64:88:bc:6c:05:b3:9c:2e:b7:c2:
fa:94:46:81:86:9b:06:79:f2:a0:a8:ea:a8:6f:19:be:27:5c:
e1:04:05:06:a2:d5:99:91:93:f3:7d:72:48:e4:c3:80:9e:7d:
85:d0:17:0d:bb:8b:0f:80:2f:3f:3f:bc:76:19:87:54:68:1f:
18:bb:6c:98:0f:31:f0:24:20:e5:a0:24:d5:f0:15:8a:74:8f:
63:eb:c7:9b:56:8e:53:36:1e:a4:1b:a1:10:2d:f0:0f:6e:70:
28:a1:5c:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+LexkkNP5uS6h4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NTExYTk1M2ItYWY2Ni00NTY5LTk3M2QtODAwNmY3YWVmYzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtgyDrE3GYLTnCffNhHneanYcjpNhB/F8lOC
Pn0qqu0LVy7/71IPo6UV3sPj7LsJe2minY2oi0x7lSGLKgfQFyNFOO6kuZdsy0li
Fn6eD1jEV0SALJN9hwJlt70vWyBmo9FiOP/p5mG9EC4dz1q2SY/HlpZDV2DxBbSl
jmUAZYn5a8BZJWxiEs9ofUIEjsaOJNVIwyTWClxG/TdsdBMe5/AipX8ARWTblLNe
MAoIgVxrOnB3nJtUbgeVlozCjilID7dKcSHr07+hXyuzmZbIlOFOp6Cez2Dhg1mI
/ARLV8vhraG4DlTSKa2kNHKrk7XqNveIYzTZLMRKpG6NYl+QBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLtBWsYiJPHI4bM87ODYNxlw13OMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjhmMTYxYmYtOWRiZC0z
MTE5LWEyNGMtZDE1NDI5NzUwODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSVlUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPnoRzMqoKLKwXP6TKR9qoF98eXbHd5xpG+Z6v5tqTTYg8fzL0K48hP
blvOyWxVcJ0Lzwiu+a1QwdP20E2VMjgPyWQebNkSVPAvqEOH1GyG/5LACkvbju/m
hWacTqhrZAPV9fyDHbSSHF3iFiJYSvyco8d7Tm4Efy/KEQN7dI8utSE+jUoiUshA
OBV1a2zlFnlmJidfADbNZIi8bAWznC63wvqURoGGmwZ58qCo6qhvGb4nXOEEBQai
1ZmRk/N9ckjkw4CefYXQFw27iw+ALz8/vHYZh1RoHxi7bJgPMfAkIOWgJNXwFYp0
j2Prx5tWjlM2HqQboRAt8A9ucCihXBc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:44 2025 by rpki-client