Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e22e15-1b1f-31f7-912d-66ea88adc6e2.roa
File: 40e22e15-1b1f-31f7-912d-66ea88adc6e2.roa (raw, json)
Hash identifier: AfUJyyGilHV1LB3Li+OqlokvtFccD6+w5SMQ4Pbb7mo=
Subject key identifier: 35:41:AC:ED:79:B3:16:2A:6C:E2:D5:EE:BD:C5:FA:CD:52:2A:FC:29
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F144F07F36DDEC8A10A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e22e15-1b1f-31f7-912d-66ea88adc6e2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.32.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:14:4f:07:f3:6d:de:c8:a1:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=a1be4e61-d339-43ee-87c9-d79e52e2e2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:52:7c:91:44:9b:5e:29:97:84:01:7e:ac:
2a:08:81:86:35:af:e0:6a:64:1b:fb:0a:ef:f8:7a:
31:eb:aa:e8:73:33:39:50:97:b1:3d:6b:66:8e:b2:
8f:63:a8:8e:73:71:d3:2b:64:b8:5f:fe:63:9f:31:
ba:99:29:dc:be:8d:51:56:e4:4d:32:5e:31:1d:95:
db:8b:dd:da:d3:cf:a9:43:9a:b1:20:b7:41:8c:fe:
06:bb:dd:2c:fa:c1:6c:d4:7c:9f:b2:5d:d8:17:42:
a7:2a:2b:bd:1a:ef:01:98:32:be:c2:d6:11:16:cd:
eb:9c:04:bd:f5:31:37:88:f8:f4:9c:61:4d:7e:89:
40:9d:a4:30:3d:69:b4:99:9f:ec:ef:d7:4f:2c:17:
5c:a5:24:a2:8e:69:29:e6:c4:c3:af:c1:82:69:ae:
cb:de:3e:9b:b1:fb:81:2e:93:d1:88:91:e7:1b:27:
f4:3c:9a:5c:59:13:70:82:17:af:d3:aa:47:30:95:
40:5d:22:37:8e:67:32:28:a9:9f:94:b4:53:22:7e:
f4:8e:85:96:30:21:46:0f:65:25:32:39:a2:bb:94:
74:36:9a:30:02:37:97:77:88:df:62:ec:87:8b:0f:
54:f5:e0:65:91:ac:c8:ef:0b:9c:3c:03:ef:aa:4b:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:AC:ED:79:B3:16:2A:6C:E2:D5:EE:BD:C5:FA:CD:52:2A:FC:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e22e15-1b1f-31f7-912d-66ea88adc6e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:80:cf:5f:5b:b5:d7:a2:e3:13:20:89:bc:40:88:37:e2:de:
16:0c:fd:d9:93:ce:75:a8:5e:47:6b:2b:46:0e:c8:f4:81:9c:
f8:5f:5c:a0:17:9b:0d:28:8a:b4:4b:da:b4:36:a1:59:fc:8d:
24:87:7a:bd:44:6c:7c:d1:3c:f6:3a:59:6a:c4:c0:56:da:f9:
2d:aa:c5:12:7c:36:11:45:bb:a5:98:73:5b:e2:25:70:2e:9b:
99:6c:87:63:63:c8:44:17:83:31:4a:d0:e9:80:4c:85:06:ef:
fc:12:c3:7b:4e:1e:59:5e:1c:f3:eb:1b:16:9a:d0:84:19:79:
e8:50:61:6e:e9:64:b6:9f:54:ff:aa:7b:58:68:be:8d:8c:49:
fe:79:8f:b1:a5:86:2a:2f:35:48:d4:fd:e8:3a:76:a0:b4:cf:
64:aa:25:8e:c5:24:6f:f9:47:25:30:e6:de:bb:d9:ca:93:64:
1e:91:68:4e:14:66:de:85:41:c4:d3:b7:63:63:c7:78:1f:bc:
b1:e3:db:57:b5:95:a4:d3:00:9b:3f:11:5e:9c:5d:d9:99:79:
fa:f8:f5:84:18:2a:0a:99:70:be:b6:35:0d:66:a4:5c:10:05:
e0:07:c8:37:11:f8:7d:8a:2a:12:6c:50:d9:cf:b7:46:dc:ba:
9a:8e:21:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPxRPB/Nt3sihCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
YTFiZTRlNjEtZDMzOS00M2VlLTg3YzktZDc5ZTUyZTJlMmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb5SfJFEm14pl4QBfqwqCIGGNa/gamQb+wrv
+Hox66roczM5UJexPWtmjrKPY6iOc3HTK2S4X/5jnzG6mSncvo1RVuRNMl4xHZXb
i93a08+pQ5qxILdBjP4Gu90s+sFs1Hyfsl3YF0KnKiu9Gu8BmDK+wtYRFs3rnAS9
9TE3iPj0nGFNfolAnaQwPWm0mZ/s79dPLBdcpSSijmkp5sTDr8GCaa7L3j6bsfuB
LpPRiJHnGyf0PJpcWRNwghev06pHMJVAXSI3jmcyKKmflLRTIn70joWWMCFGD2Ul
Mjmiu5R0NpowAjeXd4jfYuyHiw9U9eBlkazI7wucPAPvqksGuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVBrO15sxYqbOLV7r3F+s1SKvwpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBlMjJlMTUtMWIxZi0z
MWY3LTkxMmQtNjZlYTg4YWRjNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCCwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADaAz19btdei4xMgibxAiDfi3hYM/dmTznWoXkdrK0YOyPSBnPhfXKAX
mw0oirRL2rQ2oVn8jSSHer1EbHzRPPY6WWrEwFba+S2qxRJ8NhFFu6WYc1viJXAu
m5lsh2NjyEQXgzFK0OmATIUG7/wSw3tOHlleHPPrGxaa0IQZeehQYW7pZLafVP+q
e1hovo2MSf55j7GlhiovNUjU/eg6dqC0z2SqJY7FJG/5RyUw5t672cqTZB6RaE4U
Zt6FQcTTt2Njx3gfvLHj21e1laTTAJs/EV6cXdmZefr49YQYKgqZcL62NQ1mpFwQ
BeAHyDcR+H2KKhJsUNnPt0bcupqOIQo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:21 2025 by rpki-client