Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a94a1fe-b109-3ff5-af00-dbdb1415c1bd.roa
File: 2a94a1fe-b109-3ff5-af00-dbdb1415c1bd.roa (raw, json)
Hash identifier: M4w7U3CyPIdriRNjog8AwWLA1rxV7pgt84RgdNm/1qc=
Subject key identifier: 68:EE:6E:F3:70:F0:58:95:68:75:A7:0D:7E:21:7C:2D:B8:3E:AE:F0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C105AB55DA7696DEA2B4F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a94a1fe-b109-3ff5-af00-dbdb1415c1bd.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 68.83.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:5a:b5:5d:a7:69:6d:ea:2b:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=821f3120-0d81-4ab3-aa68-ea6c3497953a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:75:0c:5c:35:b8:23:a4:25:4b:4c:6e:37:
93:15:91:b4:a6:c3:50:9c:13:ce:cd:c0:2f:be:0a:
08:6e:98:d4:14:ff:83:03:bf:f7:14:bf:ee:c0:ad:
1c:57:86:76:c1:e5:8e:d6:aa:c3:df:3a:4c:32:bd:
5d:fc:79:ba:02:98:aa:ad:8f:7c:c4:17:49:35:61:
f2:e9:01:2a:c2:71:8e:16:18:37:96:50:aa:4d:9a:
5f:ea:df:c3:85:2d:25:a4:c0:ec:88:4b:51:3b:b1:
c1:4c:60:23:12:4c:ca:5f:44:d6:4b:90:66:86:28:
6c:41:28:56:07:40:d7:b7:96:4d:43:99:95:0b:f5:
f4:09:e4:44:f7:da:d5:ed:ff:eb:01:4d:1d:2c:82:
36:af:18:ea:32:5f:d2:76:a0:3b:84:af:89:88:45:
f2:74:f5:5b:dc:15:c5:b2:51:9d:a2:86:b7:95:8e:
cd:12:81:c0:81:86:0e:90:d2:10:87:30:6c:42:22:
da:23:54:96:6e:94:4a:97:76:47:e8:e5:c7:c1:37:
c3:7e:c5:b8:c1:73:9c:c0:58:c7:f2:b9:4a:ee:e2:
20:5c:06:c5:6c:c8:9d:31:84:aa:9f:cf:d0:72:17:
5e:58:79:09:a9:f2:c1:92:9e:1d:0a:13:b5:8c:95:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EE:6E:F3:70:F0:58:95:68:75:A7:0D:7E:21:7C:2D:B8:3E:AE:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a94a1fe-b109-3ff5-af00-dbdb1415c1bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:6b:7c:ed:4a:f8:70:87:fd:53:39:61:a9:25:2e:7d:33:b7:
3f:2a:45:4b:f6:d5:b8:3c:7a:8c:57:f1:c5:0c:64:0e:ef:36:
dc:28:37:72:91:7c:fd:77:c0:85:40:12:bb:88:8f:28:ad:c2:
51:82:55:3b:67:89:46:8e:36:46:f2:39:e1:a9:a0:7c:ab:da:
75:f5:bd:e0:a7:be:91:8b:27:15:00:c5:ad:a9:d7:c8:05:7c:
37:a3:52:2c:a1:38:f8:01:37:a8:32:fa:1a:dd:bf:59:22:7f:
31:25:c4:98:99:89:d4:a8:2a:35:c6:00:0e:2a:83:fd:2a:ce:
78:19:d8:bc:6a:05:05:d0:81:f6:bc:c8:1d:98:9f:52:9a:4c:
2c:f0:87:7a:0a:84:8b:35:25:8b:8a:c1:3a:d5:9e:37:25:4c:
0d:42:d2:c2:6e:ac:c7:4f:02:f5:fb:2f:18:ce:ea:32:94:b3:
0c:20:82:be:57:03:3a:48:b7:8f:f6:e6:26:26:af:59:a0:79:
7a:ae:ab:48:be:6c:15:c9:79:47:c1:08:48:e5:77:7d:99:fb:
c4:f5:01:31:bb:78:c0:f7:3f:06:d1:d6:c4:14:41:df:3b:2b:
22:0c:78:34:53:ad:06:7b:24:c2:3e:57:43:9e:a8:22:a5:6f:
21:9e:74:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEFq1XadpbeorT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ODIxZjMxMjAtMGQ4MS00YWIzLWFhNjgtZWE2YzM0OTc5NTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo611DFw1uCOkJUtMbjeTFZG0psNQnBPOzcAv
vgoIbpjUFP+DA7/3FL/uwK0cV4Z2weWO1qrD3zpMMr1d/Hm6ApiqrY98xBdJNWHy
6QEqwnGOFhg3llCqTZpf6t/DhS0lpMDsiEtRO7HBTGAjEkzKX0TWS5BmhihsQShW
B0DXt5ZNQ5mVC/X0CeRE99rV7f/rAU0dLII2rxjqMl/SdqA7hK+JiEXydPVb3BXF
slGdooa3lY7NEoHAgYYOkNIQhzBsQiLaI1SWbpRKl3ZH6OXHwTfDfsW4wXOcwFjH
8rlK7uIgXAbFbMidMYSqn8/QchdeWHkJqfLBkp4dChO1jJVHswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjubvNw8FiVaHWnDX4hfC24Pq7wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmE5NGExZmUtYjEwOS0z
ZmY1LWFmMDAtZGJkYjE0MTVjMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFM8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALdrfO1K+HCH/VM5YaklLn0ztz8qRUv21bg8eoxX8cUMZA7vNtwoN3KR
fP13wIVAEruIjyitwlGCVTtniUaONkbyOeGpoHyr2nX1veCnvpGLJxUAxa2p18gF
fDejUiyhOPgBN6gy+hrdv1kifzElxJiZidSoKjXGAA4qg/0qzngZ2LxqBQXQgfa8
yB2Yn1KaTCzwh3oKhIs1JYuKwTrVnjclTA1C0sJurMdPAvX7LxjO6jKUswwggr5X
AzpIt4/25iYmr1mgeXquq0i+bBXJeUfBCEjld32Z+8T1ATG7eMD3PwbR1sQUQd87
KyIMeDRTrQZ7JMI+V0OeqCKlbyGedLA=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:08 2025 by rpki-client