Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9aafc9-6516-3aa2-9c4c-e022c5b4493c.roa
File: 0c9aafc9-6516-3aa2-9c4c-e022c5b4493c.roa (raw, json)
Hash identifier: iecAPQZKAM0JrPuoUsYPynuV3HYG5SI7a6qIYGrfCus=
Subject key identifier: 6D:75:75:8B:F4:5A:10:FA:09:52:5B:08:37:71:3E:70:66:24:B0:BD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11F05109E3FFFD58009600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9aafc9-6516-3aa2-9c4c-e022c5b4493c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 68.83.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:f0:51:09:e3:ff:fd:58:00:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=661dde8c-e462-4120-89c1-79875350fb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:2f:4e:eb:22:21:7f:04:d6:cf:37:e0:45:
23:f9:29:91:2c:a4:e2:bb:13:cb:68:d0:f6:14:b0:
0f:a5:5c:4f:13:4d:84:12:2c:e7:84:84:57:55:e2:
ee:38:16:8c:e9:74:3f:ef:da:ef:99:af:94:58:d1:
f5:26:f8:80:2d:cd:2a:9b:f1:95:fd:bb:62:09:6d:
aa:e4:37:86:5e:a0:94:6c:47:4d:cd:83:4d:d7:cb:
38:9b:5b:b6:2d:22:e8:e8:74:87:23:e7:d7:43:c4:
88:7d:41:d6:83:71:56:fb:bb:a4:85:84:11:2c:6e:
7b:18:cc:27:72:72:f8:d7:a9:37:67:db:9a:30:df:
3e:fd:b8:24:bf:84:b1:46:0b:88:60:56:fb:21:df:
c4:b9:86:72:f2:24:ae:e0:32:a5:21:87:99:0a:e6:
b9:88:3e:01:47:04:3e:94:40:af:f7:32:f3:76:20:
3a:07:12:e4:37:cd:69:ff:5d:da:d9:64:58:09:73:
7b:ba:c0:3e:c7:02:05:2a:fa:6e:60:ce:fd:63:83:
35:5b:77:2a:6b:77:74:f8:dd:64:d2:8e:bc:9b:b0:
61:3b:be:b7:4e:cf:61:c3:21:e7:25:98:c9:75:1f:
ba:a5:f1:b8:7b:e4:b9:f8:c7:70:fd:a7:f4:67:65:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:75:75:8B:F4:5A:10:FA:09:52:5B:08:37:71:3E:70:66:24:B0:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9aafc9-6516-3aa2-9c4c-e022c5b4493c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:d2:d4:58:e8:d1:04:dd:49:61:a2:91:a0:08:fb:31:d2:db:
ec:1e:9f:98:62:91:5a:6f:2f:35:37:15:c1:91:32:c2:0d:35:
bf:8f:51:45:60:c5:81:86:74:4f:68:c7:22:ea:0f:fb:57:dd:
4d:01:a2:03:2e:fd:09:ed:87:81:7d:e1:96:23:c8:3b:40:7a:
e1:0a:26:c2:07:42:c3:9b:83:f6:94:72:93:f9:a4:a4:32:e0:
32:bc:41:70:af:07:d8:cc:28:5c:e8:91:26:41:4b:63:22:78:
de:84:9c:47:92:7e:3d:cb:67:75:4d:db:ff:81:b8:8a:bf:9a:
e9:00:cb:ac:dc:d6:a5:38:5f:9f:56:9e:c2:7c:b6:67:c7:73:
37:22:47:3c:5f:09:36:6a:ed:98:c2:09:6d:75:65:a3:4e:25:
2b:38:35:fc:d8:01:2b:4e:08:df:af:66:3f:d9:47:4e:73:6e:
3f:2b:68:d9:ff:eb:9d:d0:ec:57:1d:dc:22:16:77:05:ab:c0:
8b:1b:9a:8c:e5:d0:df:6f:0b:25:11:9f:8e:7d:63:08:68:cc:
5f:ce:bc:ae:22:f9:78:ae:d4:d1:23:c6:f7:0e:6e:75:60:02:
8f:da:81:e9:df:b9:cb:58:ba:ac:d4:12:34:e0:88:3d:bd:26:
83:32:8a:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEfBRCeP//VgAlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NjYxZGRlOGMtZTQ2Mi00MTIwLTg5YzEtNzk4NzUzNTBmYjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhygvTusiIX8E1s834EUj+SmRLKTiuxPLaND2
FLAPpVxPE02EEiznhIRXVeLuOBaM6XQ/79rvma+UWNH1JviALc0qm/GV/btiCW2q
5DeGXqCUbEdNzYNN18s4m1u2LSLo6HSHI+fXQ8SIfUHWg3FW+7ukhYQRLG57GMwn
cnL416k3Z9uaMN8+/bgkv4SxRguIYFb7Id/EuYZy8iSu4DKlIYeZCua5iD4BRwQ+
lECv9zLzdiA6BxLkN81p/13a2WRYCXN7usA+xwIFKvpuYM79Y4M1W3cqa3d0+N1k
0o68m7BhO763Ts9hwyHnJZjJdR+6pfG4e+S5+Mdw/af0Z2Wt9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG11dYv0WhD6CVJbCDdxPnBmJLC9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGM5YWFmYzktNjUxNi0z
YWEyLTljNGMtZTAyMmM1YjQ0OTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7S1Fjo0QTdSWGikaAI+zHS2+wen5hikVpvLzU3FcGRMsINNb+PUUVg
xYGGdE9oxyLqD/tX3U0BogMu/Qnth4F94ZYjyDtAeuEKJsIHQsObg/aUcpP5pKQy
4DK8QXCvB9jMKFzokSZBS2MieN6EnEeSfj3LZ3VN2/+BuIq/mukAy6zc1qU4X59W
nsJ8tmfHczciRzxfCTZq7ZjCCW11ZaNOJSs4NfzYAStOCN+vZj/ZR05zbj8raNn/
653Q7Fcd3CIWdwWrwIsbmozl0N9vCyURn459YwhozF/OvK4i+Xiu1NEjxvcObnVg
Ao/agenfuctYuqzUEjTgiD29JoMyims=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:09 2025 by rpki-client