Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38af3611-c3af-3b8b-adcf-6ce71580a04e.roa
File: 38af3611-c3af-3b8b-adcf-6ce71580a04e.roa (raw, json)
Hash identifier: DGd2rhy2e5UcGPFk9LpMbHrxITw+yDW8eUN+0tkEjJE=
Subject key identifier: DD:11:1B:3F:54:A9:EC:44:1E:BC:AA:5D:6C:D3:26:C3:03:8D:15:69
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F25CAA2474EF48BF97980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38af3611-c3af-3b8b-adcf-6ce71580a04e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.37.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:25:ca:a2:47:4e:f4:8b:f9:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=fc1c1b25-e412-43c2-bdd5-59c8e58581da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:b2:03:44:60:ce:e0:b4:fc:8c:cb:58:13:
d2:2a:5c:4f:26:0a:f1:b4:67:34:f9:75:09:69:b4:
69:94:02:cd:ce:ff:4c:2c:06:1a:13:6a:d6:d9:aa:
81:f6:5b:4c:85:7e:7a:7f:6b:8d:b0:a7:ae:f3:55:
be:7b:1d:96:9c:a8:c9:b8:b9:3e:ea:d6:36:5d:31:
a4:24:16:51:c3:e4:88:98:c0:f5:ed:1a:e6:4b:04:
35:b0:c1:31:af:64:85:87:8c:fa:0e:f8:64:9b:82:
a0:5f:dc:93:39:62:5e:09:8f:fa:22:ae:76:77:78:
d7:53:16:07:02:a1:68:d3:a5:c3:d5:77:a9:4e:2a:
c5:fb:b3:56:07:2b:f9:de:fa:fc:51:f6:f7:75:b6:
e9:7f:9b:d1:3c:a8:d6:50:d5:c4:85:c9:38:d2:82:
38:47:30:c4:99:1c:67:eb:c7:d5:e1:2c:e7:ae:1d:
d0:52:a6:a3:82:9a:d3:aa:49:82:49:ab:55:44:5e:
11:e5:1c:91:b3:30:d7:6b:0a:05:25:8a:18:d9:21:
ef:aa:4d:77:cc:aa:62:d5:ac:ac:e2:e3:23:c0:b9:
c9:5a:17:57:43:43:ef:a4:a4:21:cf:16:79:9e:87:
5a:40:a2:98:f5:d8:35:08:bc:2c:56:da:bc:d3:ef:
84:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:11:1B:3F:54:A9:EC:44:1E:BC:AA:5D:6C:D3:26:C3:03:8D:15:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38af3611-c3af-3b8b-adcf-6ce71580a04e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.37.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:bb:a8:2a:6a:f2:a0:2b:6f:06:05:ba:63:02:69:99:fc:87:
d2:45:3e:cb:c6:a1:6b:f8:1e:f7:cd:61:fe:d5:30:55:19:2f:
7d:40:ed:1f:82:d1:91:10:48:07:49:e9:68:04:c5:bf:1b:95:
9c:18:55:fe:9f:1e:60:b7:5b:66:97:30:e2:55:b1:7b:b5:60:
04:4a:3b:95:e8:ee:71:fa:bb:0c:6e:10:b1:ff:29:41:2e:46:
46:ea:2d:2f:92:f7:dd:a2:5d:d7:48:d3:b7:a4:f8:fe:e7:92:
75:98:f4:f3:4e:5d:62:d8:7f:0e:13:b2:82:d3:17:ae:1f:93:
af:af:02:3d:b9:49:55:44:14:f9:10:f6:d4:74:94:1d:94:42:
0a:01:c8:53:4d:34:e2:45:eb:a9:40:1d:b5:09:81:8b:b0:95:
88:42:70:f9:f2:56:b4:53:93:19:f1:a5:7c:71:9e:2d:3f:c3:
4d:b1:c0:c4:1b:8f:3f:8a:3c:80:34:ad:b2:1f:14:a0:59:f9:
1c:2f:db:c1:fa:c3:04:ff:79:7e:8b:2b:ef:0b:fa:87:ac:b3:
cb:03:de:3f:9d:b7:87:d9:cf:3e:97:c3:df:09:46:9f:fd:8a:
13:5a:ac:66:ce:b0:e1:a1:0f:91:85:d7:09:58:c7:09:ad:bc:
0b:29:07:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPyXKokdO9Iv5eYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZmMxYzFiMjUtZTQxMi00M2MyLWJkZDUtNTljOGU1ODU4MWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6+yA0RgzuC0/IzLWBPSKlxPJgrxtGc0+XUJ
abRplALNzv9MLAYaE2rW2aqB9ltMhX56f2uNsKeu81W+ex2WnKjJuLk+6tY2XTGk
JBZRw+SImMD17RrmSwQ1sMExr2SFh4z6Dvhkm4KgX9yTOWJeCY/6Iq52d3jXUxYH
AqFo06XD1XepTirF+7NWByv53vr8Ufb3dbbpf5vRPKjWUNXEhck40oI4RzDEmRxn
68fV4Sznrh3QUqajgprTqkmCSatVRF4R5RyRszDXawoFJYoY2SHvqk13zKpi1ays
4uMjwLnJWhdXQ0PvpKQhzxZ5nodaQKKY9dg1CLwsVtq80++E0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0RGz9UqexEHryqXWzTJsMDjRVpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhhZjM2MTEtYzNhZi0z
YjhiLWFkY2YtNmNlNzE1ODBhMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCXuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJu7qCpq8qArbwYFumMCaZn8h9JFPsvGoWv4HvfNYf7VMFUZL31A7R+C
0ZEQSAdJ6WgExb8blZwYVf6fHmC3W2aXMOJVsXu1YARKO5Xo7nH6uwxuELH/KUEu
RkbqLS+S992iXddI07ek+P7nknWY9PNOXWLYfw4TsoLTF64fk6+vAj25SVVEFPkQ
9tR0lB2UQgoByFNNNOJF66lAHbUJgYuwlYhCcPnyVrRTkxnxpXxxni0/w02xwMQb
jz+KPIA0rbIfFKBZ+Rwv28H6wwT/eX6LK+8L+oess8sD3j+dt4fZzz6Xw98JRp/9
ihNarGbOsOGhD5GF1wlYxwmtvAspB9o=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:32 2025 by rpki-client