Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbbf3972-ccf1-3248-ba29-030633a6a77e.roa
File: fbbf3972-ccf1-3248-ba29-030633a6a77e.roa (raw, json)
Hash identifier: KtMBxUv66u2ap4oiA/5toGuLJcj+6ghsCrqfqzmPipM=
Subject key identifier: B1:55:D9:6F:45:16:71:8F:E1:EE:A2:A1:2D:AA:8D:ED:1C:8B:D6:13
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB057600C4120A12CD50C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbbf3972-ccf1-3248-ba29-030633a6a77e.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 73.29.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:57:60:0c:41:20:a1:2c:d5:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=1e938caf-fdba-4db8-afc6-b49d066d6de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:65:eb:64:d5:fe:0a:50:bd:29:ca:79:9b:
f3:bb:59:25:cd:35:57:7f:41:ff:1e:3a:2e:62:48:
02:c2:dd:b6:4d:fe:1a:18:78:2a:33:fd:ab:a8:f7:
af:5b:f7:8d:98:a2:00:82:3d:c6:c2:91:1a:ef:36:
9b:14:5c:8e:cb:11:7d:73:35:ed:de:a4:8b:4b:f5:
2d:b8:58:89:f0:71:cd:05:3d:79:20:58:a5:e7:9a:
f7:76:ee:01:ef:b1:e3:be:d9:61:01:c0:55:5b:08:
11:9a:23:93:47:9b:49:0d:27:c6:8e:64:64:d4:95:
65:45:00:82:09:07:7b:5b:94:29:bb:eb:6e:0e:3d:
bb:16:ed:ca:9a:1e:53:1b:d8:7a:71:9e:b7:2e:ae:
5e:4b:b3:4d:d2:c8:8e:09:b5:fc:4f:23:ef:fa:cb:
1a:12:60:ef:5d:e1:2d:4e:58:3c:ac:d9:4d:dc:f7:
ca:4c:11:22:f9:5c:e2:7f:56:b6:ce:03:c1:00:86:
61:f2:74:82:e1:1e:45:06:9b:72:b9:a1:49:28:90:
b8:3b:b4:13:da:b9:af:c0:a7:42:69:a5:e9:b0:34:
df:08:95:67:18:ba:b1:57:51:09:d0:0a:77:e6:ce:
10:c9:b0:a7:8d:ee:e2:44:d2:ab:9a:6c:22:bf:42:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:55:D9:6F:45:16:71:8F:E1:EE:A2:A1:2D:AA:8D:ED:1C:8B:D6:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbbf3972-ccf1-3248-ba29-030633a6a77e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.29.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:6b:a4:c0:a9:84:80:25:9e:c9:c6:39:a2:d4:d6:52:bc:41:
49:87:f8:b9:86:19:81:bc:7a:32:5d:b0:d5:38:eb:4a:3d:6d:
bd:35:fc:d4:27:ed:99:c1:ce:a7:46:14:2b:5b:0a:e1:ee:2a:
b6:d7:01:8c:aa:a1:26:00:8f:fe:89:fc:3a:bc:57:11:d3:97:
39:a7:20:f7:cb:27:4d:4f:84:e9:45:0e:ba:a8:66:be:6d:9d:
b8:c7:d7:35:cd:3f:dd:04:da:f8:8f:e7:aa:b6:7f:3a:38:3c:
ca:66:07:b3:03:ed:83:15:38:b4:ad:f9:dc:a8:af:45:8d:fc:
18:7e:97:82:20:81:8e:3a:78:9e:17:57:92:43:f8:c9:d9:3d:
9d:0c:34:65:91:4a:72:b1:f8:ab:61:de:c6:af:5b:d5:d6:d7:
29:b7:16:33:bb:c1:5e:34:a7:e4:47:03:70:7c:ae:31:41:07:
e9:f3:31:f2:3b:df:71:5b:47:9f:2b:1e:00:9f:23:1a:c8:1b:
99:76:ec:89:bb:6a:f5:7c:6e:16:06:22:7c:ae:ee:73:ce:ca:
f2:75:16:4d:55:7b:2d:4a:14:a2:1b:77:17:d8:40:f8:fd:5b:
3b:d2:10:3a:00:13:6a:2b:7e:2c:5e:ae:26:c1:9b:83:6e:85:
79:ca:47:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssFdgDEEgoSzVDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MWU5MzhjYWYtZmRiYS00ZGI4LWFmYzYtYjQ5ZDA2NmQ2ZGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHZl62TV/gpQvSnKeZvzu1klzTVXf0H/Hjou
YkgCwt22Tf4aGHgqM/2rqPevW/eNmKIAgj3GwpEa7zabFFyOyxF9czXt3qSLS/Ut
uFiJ8HHNBT15IFil55r3du4B77HjvtlhAcBVWwgRmiOTR5tJDSfGjmRk1JVlRQCC
CQd7W5Qpu+tuDj27Fu3Kmh5TG9h6cZ63Lq5eS7NN0siOCbX8TyPv+ssaEmDvXeEt
Tlg8rNlN3PfKTBEi+Vzif1a2zgPBAIZh8nSC4R5FBptyuaFJKJC4O7QT2rmvwKdC
aaXpsDTfCJVnGLqxV1EJ0Ap35s4QybCnje7iRNKrmmwiv0LetwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFV2W9FFnGP4e6ioS2qje0ci9YTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmJiZjM5NzItY2NmMS0z
MjQ4LWJhMjktMDMwNjMzYTZhNzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASR2/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANRrpMCphIAlnsnGOaLU1lK8QUmH+LmGGYG8ejJdsNU460o9bb01/NQn
7ZnBzqdGFCtbCuHuKrbXAYyqoSYAj/6J/Dq8VxHTlzmnIPfLJ01PhOlFDrqoZr5t
nbjH1zXNP90E2viP56q2fzo4PMpmB7MD7YMVOLSt+dyor0WN/Bh+l4IggY46eJ4X
V5JD+MnZPZ0MNGWRSnKx+Kth3savW9XW1ym3FjO7wV40p+RHA3B8rjFBB+nzMfI7
33FbR58rHgCfIxrIG5l27Im7avV8bhYGInyu7nPOyvJ1Fk1Vey1KFKIbdxfYQPj9
WzvSEDoAE2orfixeribBm4NuhXnKR2E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:56 2025 by rpki-client