Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffdcb7bd-437d-3ae0-a7e3-b0a984072c8c.roa
File: ffdcb7bd-437d-3ae0-a7e3-b0a984072c8c.roa (raw, json)
Hash identifier: AxhJg/o9GJMivKHO0CzFlkAEWNdEjq/lt3dCzXn0Xj0=
Subject key identifier: 5A:1E:14:8C:5F:42:4A:1C:3C:1A:30:85:35:63:D0:DE:ED:AC:32:DD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB13FFEE707989C4002C920
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffdcb7bd-437d-3ae0-a7e3-b0a984072c8c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 73.9.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:3f:fe:e7:07:98:9c:40:02:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=6a4bc6d9-ce26-46f6-8791-49d6d5709b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8d:1c:cf:bd:1a:f3:0b:b0:59:62:62:f7:fa:
98:7d:5a:6f:99:73:91:13:a7:b7:d1:15:fb:f6:6b:
c1:d8:a3:89:b5:fd:7e:4e:b1:8f:89:ae:d5:39:f4:
9d:2a:10:91:96:1d:e6:25:8e:f5:9c:ef:a8:bb:02:
41:de:3c:fc:39:f0:4c:3d:9d:6c:78:9c:25:bf:1a:
6c:c7:bc:b0:ab:26:ec:51:8c:be:b0:4c:df:09:85:
64:69:f8:11:0f:78:c5:10:34:03:ca:90:fc:d4:59:
60:8f:43:ef:af:67:ee:1c:32:b5:19:89:1a:41:fb:
98:cf:b1:30:03:52:d9:4b:40:0a:67:63:39:f3:00:
0a:26:d1:33:14:32:e5:9a:99:22:b1:73:31:1d:0a:
be:90:a4:b2:9b:27:c1:8e:38:75:15:ac:08:02:cf:
cc:ec:27:a1:be:96:e4:c1:81:00:53:3a:83:39:25:
56:39:66:e2:f1:0c:1c:dd:16:90:9c:2b:78:64:6f:
30:f2:85:4e:30:ba:a1:04:cd:7e:f2:01:77:a8:17:
db:e0:97:85:2e:05:c5:93:71:5a:dd:47:17:5a:4d:
b5:7d:bc:5f:b8:18:e7:63:6d:1e:50:c1:0b:12:16:
86:0b:7c:dc:0f:c5:d5:d0:34:4c:cd:de:ca:a8:92:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1E:14:8C:5F:42:4A:1C:3C:1A:30:85:35:63:D0:DE:ED:AC:32:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffdcb7bd-437d-3ae0-a7e3-b0a984072c8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.9.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d6:51:0b:ff:a5:0c:e3:fc:73:3a:ff:c9:0e:73:1f:de:45:
0a:7c:ba:52:91:4c:f0:c0:bc:7a:6d:b5:0e:27:fc:b3:09:5a:
74:cc:46:b4:57:e0:c5:cf:d1:68:a7:fc:25:be:c7:35:83:16:
4e:9a:e8:ee:0c:24:f5:7b:1d:0b:d2:58:16:b5:b6:cc:cb:f3:
2a:3f:ee:93:65:66:5c:3d:6f:60:66:c9:e1:d9:d1:75:db:47:
41:88:08:b2:58:59:c5:99:c0:0f:5c:d5:22:9c:f2:6e:dc:a9:
15:81:13:24:79:ea:9d:0e:eb:6b:27:23:2b:ee:bd:d1:19:05:
c7:9e:a0:af:6a:f0:0b:6e:13:6e:6b:d6:d0:f7:02:8d:cf:33:
6a:0e:ba:af:2f:91:06:eb:1d:ab:5e:b6:d1:95:0f:fd:6f:26:
ce:29:e9:5d:09:55:a0:ce:56:21:68:3e:b9:d9:c1:6c:53:15:
21:30:ad:c2:8c:de:f1:9a:8d:bc:67:b1:a1:eb:d6:9f:bc:6b:
d0:41:96:4a:ea:c6:6d:5a:41:be:ff:47:dc:95:0c:28:11:db:
0b:ee:a2:db:e0:d9:d9:3d:18:77:e2:68:7e:73:aa:c6:40:a7:
b5:e8:98:5a:34:cf:63:51:46:18:7e:4b:ca:d2:93:fc:a6:0f:
fe:11:ed:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssT/+5weYnEACySAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NmE0YmM2ZDktY2UyNi00NmY2LTg3OTEtNDlkNmQ1NzA5YjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo0cz70a8wuwWWJi9/qYfVpvmXORE6e30RX7
9mvB2KOJtf1+TrGPia7VOfSdKhCRlh3mJY71nO+ouwJB3jz8OfBMPZ1seJwlvxps
x7ywqybsUYy+sEzfCYVkafgRD3jFEDQDypD81Flgj0Pvr2fuHDK1GYkaQfuYz7Ew
A1LZS0AKZ2M58wAKJtEzFDLlmpkisXMxHQq+kKSymyfBjjh1FawIAs/M7Cehvpbk
wYEAUzqDOSVWOWbi8Qwc3RaQnCt4ZG8w8oVOMLqhBM1+8gF3qBfb4JeFLgXFk3Fa
3UcXWk21fbxfuBjnY20eUMELEhaGC3zcD8XV0DRMzd7KqJKU5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFoeFIxfQkocPBowhTVj0N7trDLdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmZkY2I3YmQtNDM3ZC0z
YWUwLWE3ZTMtYjBhOTg0MDcyYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASQkIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXWUQv/pQzj/HM6/8kOcx/eRQp8ulKRTPDAvHpttQ4n/LMJWnTMRrRX
4MXP0Win/CW+xzWDFk6a6O4MJPV7HQvSWBa1tszL8yo/7pNlZlw9b2BmyeHZ0XXb
R0GICLJYWcWZwA9c1SKc8m7cqRWBEyR56p0O62snIyvuvdEZBceeoK9q8AtuE25r
1tD3Ao3PM2oOuq8vkQbrHatettGVD/1vJs4p6V0JVaDOViFoPrnZwWxTFSEwrcKM
3vGajbxnsaHr1p+8a9BBlkrqxm1aQb7/R9yVDCgR2wvuotvg2dk9GHfiaH5zqsZA
p7XomFo0z2NRRhh+S8rSk/ymD/4R7WA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:53:47 2025 by rpki-client