Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/032a2cc9-f116-3222-b0f3-429fe66db802.roa
File: 032a2cc9-f116-3222-b0f3-429fe66db802.roa (raw, json)
Hash identifier: VnznZf3MfvMOODQnQKeDiZrNHEmgDRB2zbwdRGJK2KU=
Subject key identifier: D9:A9:84:CE:DB:A1:44:1F:D1:18:CB:8E:7A:E0:08:19:7D:3A:5F:E2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B62ED3ED780223D8640C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/032a2cc9-f116-3222-b0f3-429fe66db802.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.56.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:62:ed:3e:d7:80:22:3d:86:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b20e08a4-9e2e-40c2-b90f-35300e8759b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:69:e9:9e:76:11:65:ba:69:a5:fd:88:67:e3:
67:56:f4:f7:2b:5d:0c:e0:12:fa:8f:63:f4:30:3d:
6a:e2:32:79:38:d1:95:cb:5b:a4:0f:8f:50:68:86:
18:2f:08:bd:e8:ba:a6:7e:83:cf:ea:2c:93:3c:27:
e1:ba:c7:c4:37:2e:3f:24:46:39:e1:72:c8:8d:ee:
d9:f9:2a:23:35:45:19:14:cd:8a:1e:d7:13:f7:9e:
0e:21:e9:a6:51:d8:a7:67:7b:77:c1:c9:8b:98:58:
0d:48:48:b1:34:08:67:bf:e4:dd:ef:5f:51:b8:11:
4a:46:53:80:39:0d:a5:35:9c:9e:52:bc:b0:c0:51:
7d:8c:e5:30:1c:0a:f4:f4:96:c6:e8:bb:70:2e:46:
98:1e:90:e0:e9:36:f4:ec:46:c7:7a:08:2e:fd:42:
7a:a6:a8:76:c1:30:0a:12:b2:c0:58:17:09:a3:d0:
72:6a:a1:77:02:67:1c:5c:93:29:aa:37:95:b2:fb:
5a:11:1b:32:90:23:08:16:da:7b:c8:b3:7d:af:06:
7c:6c:2e:74:72:44:4d:48:f3:dd:36:d8:92:a0:31:
4f:69:34:3d:3e:dd:96:58:c7:10:32:99:04:a1:eb:
56:fc:fc:21:b2:4f:9f:8a:7a:3b:d5:1e:32:30:36:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A9:84:CE:DB:A1:44:1F:D1:18:CB:8E:7A:E0:08:19:7D:3A:5F:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/032a2cc9-f116-3222-b0f3-429fe66db802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
da:c3:aa:c7:cd:22:53:e8:a9:1f:54:74:26:03:8c:a4:60:90:
e4:88:c5:be:42:61:87:ca:05:d5:bb:56:80:1f:ab:2f:13:b8:
dc:97:02:40:3d:66:bf:a5:67:b2:d0:86:a3:b3:d1:6d:f6:fb:
28:37:f5:78:74:bb:b2:e6:66:29:8c:fb:f8:18:a3:0f:a9:28:
2e:a6:87:54:88:27:75:78:ab:d6:90:13:fd:7a:98:60:19:a0:
a1:3f:e4:7f:a1:97:c7:4a:4f:04:de:b5:5c:87:85:11:8d:b2:
f5:80:e1:42:28:6b:8c:5f:dc:bc:29:5f:7e:bf:59:6d:be:c2:
9a:75:65:6e:da:0b:89:ca:a3:60:ba:42:28:50:34:ee:f7:5e:
5e:41:77:f5:8c:53:06:3b:01:74:b4:db:eb:f0:bd:d4:86:a3:
99:f0:74:cc:29:32:45:f8:6e:86:37:6c:33:6e:73:4b:90:6f:
8e:45:77:e2:8f:fb:90:05:e0:17:f7:bd:8b:54:4e:13:47:0f:
a7:85:0c:20:ba:6f:00:db:5f:f6:3f:33:67:4d:c3:db:1f:07:
e3:5a:b7:cc:17:b1:70:54:c2:84:94:72:d0:08:54:9a:c8:cb:
c1:d2:08:9d:b4:18:c0:33:82:d2:32:45:14:c9:7f:a9:94:51:
61:a8:86:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO2LtPteAIj2GQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
YjIwZTA4YTQtOWUyZS00MGMyLWI5MGYtMzUzMDBlODc1OWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmnpnnYRZbpppf2IZ+NnVvT3K10M4BL6j2P0
MD1q4jJ5ONGVy1ukD49QaIYYLwi96LqmfoPP6iyTPCfhusfENy4/JEY54XLIje7Z
+SojNUUZFM2KHtcT954OIemmUdinZ3t3wcmLmFgNSEixNAhnv+Td719RuBFKRlOA
OQ2lNZyeUrywwFF9jOUwHAr09JbG6LtwLkaYHpDg6Tb07EbHeggu/UJ6pqh2wTAK
ErLAWBcJo9ByaqF3AmccXJMpqjeVsvtaERsykCMIFtp7yLN9rwZ8bC50ckRNSPPd
NtiSoDFPaTQ9Pt2WWMcQMpkEoetW/Pwhsk+fino71R4yMDabvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNmphM7boUQf0RjLjnrgCBl9Ol/iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDMyYTJjYzktZjExNi0z
MjIyLWIwZjMtNDI5ZmU2NmRiODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDiIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANrDqsfNIlPoqR9UdCYDjKRgkOSIxb5CYYfKBdW7VoAfqy8TuNyXAkA9
Zr+lZ7LQhqOz0W32+yg39Xh0u7LmZimM+/gYow+pKC6mh1SIJ3V4q9aQE/16mGAZ
oKE/5H+hl8dKTwTetVyHhRGNsvWA4UIoa4xf3LwpX36/WW2+wpp1ZW7aC4nKo2C6
QihQNO73Xl5Bd/WMUwY7AXS02+vwvdSGo5nwdMwpMkX4boY3bDNuc0uQb45Fd+KP
+5AF4Bf3vYtUThNHD6eFDCC6bwDbX/Y/M2dNw9sfB+Nat8wXsXBUwoSUctAIVJrI
y8HSCJ20GMAzgtIyRRTJf6mUUWGohqA=
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:03:07 2025 by rpki-client