Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa
File: 2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa (raw, json)
Hash identifier: cNj2XcpD9xZvYDLvgxnI8zOFv3yWMcbB4ynxfqNeVXA=
Subject key identifier: 1C:6C:A8:7D:77:00:89:A5:13:12:E0:D1:DD:06:FF:38:09:FE:D1:0B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F293C15ACC1A52E0F3680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.40.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:29:3c:15:ac:c1:a5:2e:0f:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=694d4672-1747-4ffe-83e0-f440a442a86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:f3:5f:7c:e7:f8:f1:68:37:ca:bd:a8:e6:
3c:94:99:9d:79:64:a4:95:a8:27:d4:3d:e6:c9:82:
44:b1:d3:74:47:77:0a:16:58:37:01:ca:f5:cc:a4:
c4:56:22:ae:2c:e7:66:b3:c9:f2:27:77:fd:48:ba:
74:f3:ab:ba:04:15:1a:10:2e:ca:c6:af:09:93:f1:
30:de:98:a3:b5:44:e4:81:b2:40:31:1a:e1:65:e1:
a4:c0:ec:fb:a5:98:79:58:ca:34:dd:ae:f5:33:40:
08:6c:61:a1:85:c1:4e:a5:cb:37:83:5f:6d:26:c2:
03:b4:1d:c9:eb:4e:78:79:1a:0b:a5:74:b0:3a:9b:
0f:43:06:3d:ed:ba:d1:1c:b3:2f:3f:99:c9:ed:40:
00:80:e3:ea:c7:7d:32:a7:36:ab:b3:18:e0:d6:4a:
e2:c2:13:c6:c5:7c:d3:fc:f0:f7:84:a4:eb:d1:98:
ce:61:af:a9:aa:ae:b8:25:8d:ca:7b:37:f4:da:cf:
36:b8:39:16:5d:8a:4b:6d:a7:1f:8b:51:eb:6b:2d:
fc:e1:ca:89:e1:e0:93:b1:15:41:3c:b0:5a:7a:53:
c6:c2:0d:6c:e3:9b:6f:70:c2:cc:2e:f7:95:88:52:
40:ed:6e:89:2e:e2:95:37:51:b7:41:e5:34:5d:a4:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6C:A8:7D:77:00:89:A5:13:12:E0:D1:DD:06:FF:38:09:FE:D1:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:8d:69:d7:d8:30:5a:b5:dd:4e:25:0e:48:55:11:06:2c:3d:
7d:a4:64:e5:f4:74:33:22:3d:a2:a7:a2:e2:b3:af:4c:fc:a2:
5f:60:4d:20:be:56:27:c8:e9:0d:bd:46:f6:d7:06:90:d0:1b:
50:61:c5:ff:96:72:12:fc:36:46:19:e2:5c:d3:5b:d3:b0:52:
f9:3a:68:b1:e0:26:24:7e:a6:69:8a:e6:85:3c:64:36:0f:64:
1c:df:ee:2c:36:ff:04:e0:6b:7f:12:b0:f2:6a:97:96:bc:fb:
64:37:d4:ef:62:02:f2:9c:73:e4:f2:ed:d6:91:ca:1b:40:bb:
c9:8c:12:31:20:58:43:3d:a6:66:ba:9c:87:51:5d:33:6a:f8:
a3:59:02:ec:4d:ac:fc:3a:d4:53:29:fd:52:1f:d2:da:c9:db:
b5:45:82:8d:d4:d1:ad:ba:5b:2f:e2:bd:23:82:89:cd:ef:63:
7f:ec:b8:56:a8:ef:8f:50:6f:c3:7c:48:66:57:54:65:ba:a8:
6e:c9:5f:c2:a5:7e:3c:f2:1f:27:70:63:bd:22:86:6b:84:d2:
24:1d:a8:95:9b:0c:b9:95:c2:c5:73:a9:8e:2f:d3:31:b4:bd:
f8:c9:f2:04:f8:e5:dd:94:b1:fb:d7:8f:0b:6c:8c:58:92:e6:
5b:68:08:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPyk8FazBpS4PNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
Njk0ZDQ2NzItMTc0Ny00ZmZlLTgzZTAtZjQ0MGE0NDJhODZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFbzX3zn+PFoN8q9qOY8lJmdeWSklagn1D3m
yYJEsdN0R3cKFlg3Acr1zKTEViKuLOdms8nyJ3f9SLp086u6BBUaEC7Kxq8Jk/Ew
3pijtUTkgbJAMRrhZeGkwOz7pZh5WMo03a71M0AIbGGhhcFOpcs3g19tJsIDtB3J
6054eRoLpXSwOpsPQwY97brRHLMvP5nJ7UAAgOPqx30ypzarsxjg1kriwhPGxXzT
/PD3hKTr0ZjOYa+pqq64JY3Kezf02s82uDkWXYpLbacfi1Hray384cqJ4eCTsRVB
PLBaelPGwg1s45tvcMLMLveViFJA7W6JLuKVN1G3QeU0XaSkmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBxsqH13AImlExLg0d0G/zgJ/tELMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQ4Nzc3YzYtYzIwNy0z
ZjRmLWJjZTQtMTNhMzRkOWJmNGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCh1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiNadfYMFq13U4lDkhVEQYsPX2kZOX0dDMiPaKnouKzr0z8ol9gTSC+
VifI6Q29RvbXBpDQG1Bhxf+WchL8NkYZ4lzTW9OwUvk6aLHgJiR+pmmK5oU8ZDYP
ZBzf7iw2/wTga38SsPJql5a8+2Q31O9iAvKcc+Ty7daRyhtAu8mMEjEgWEM9pma6
nIdRXTNq+KNZAuxNrPw61FMp/VIf0trJ27VFgo3U0a26Wy/ivSOCic3vY3/suFao
749Qb8N8SGZXVGW6qG7JX8KlfjzyHydwY70ihmuE0iQdqJWbDLmVwsVzqY4v0zG0
vfjJ8gT45d2UsfvXjwtsjFiS5ltoCAg=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:31:45 2025 by rpki-client