Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4285d90d-b1a2-37a0-b28c-b76b5ad2622c.roa
File: 4285d90d-b1a2-37a0-b28c-b76b5ad2622c.roa (raw, json)
Hash identifier: w2IIlwKyyQPKSdWglXVj0SndIhxugmTBiXB+Z99Lgjw=
Subject key identifier: F9:CB:28:81:8E:31:04:A1:7D:E0:B0:DB:AD:8A:02:02:6A:9D:7A:F4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10942554C5CC5FAB548100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4285d90d-b1a2-37a0-b28c-b76b5ad2622c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 68.81.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:94:25:54:c5:cc:5f:ab:54:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=38cb285d-ad4b-4a88-9b0e-a5ad4b2d8a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7f:26:55:35:c7:6a:ba:64:8c:e3:81:8b:9d:
72:ba:76:fc:98:a0:be:0d:80:fb:3f:e8:c0:82:79:
6b:62:31:ec:eb:bd:66:0b:83:78:b5:84:43:6f:10:
73:f8:32:2e:c1:56:51:e5:11:9e:d9:fa:24:df:2a:
5e:1c:d0:a1:17:cd:14:27:45:e2:60:f7:ec:91:c6:
64:93:cd:97:94:7b:b0:c1:a3:8f:8d:9e:3c:87:a5:
57:77:30:fe:ef:8f:96:82:92:79:9e:4f:70:27:8c:
be:eb:94:a0:79:f3:63:e3:08:e2:36:6c:5c:3c:17:
f1:86:82:d3:bb:4e:d2:0c:41:3e:db:cf:40:e3:2e:
ce:df:ee:ca:d0:e7:6c:ab:92:21:b7:fb:35:8b:eb:
b2:06:55:8e:6b:6e:2c:45:33:a7:e4:4a:52:a6:91:
28:67:49:df:3a:e6:a6:1d:29:71:d4:ad:38:fd:ce:
e6:30:0f:29:92:8d:7b:77:0e:78:ba:d4:9c:d7:f2:
b0:1d:38:6f:a7:42:89:0c:ac:00:23:64:a9:72:3b:
59:96:5d:82:35:a2:ff:96:fc:35:77:c7:40:a2:8b:
22:02:75:4f:61:c1:34:4b:f5:c6:3c:3a:99:2e:26:
f5:63:b1:fa:84:6e:e3:7e:40:c9:a8:3b:ba:8e:ef:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CB:28:81:8E:31:04:A1:7D:E0:B0:DB:AD:8A:02:02:6A:9D:7A:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4285d90d-b1a2-37a0-b28c-b76b5ad2622c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.81.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:1d:f6:a6:bb:91:6d:dd:38:f2:30:f5:3b:6d:42:19:9a:d8:
9b:a4:6a:ae:31:a1:1e:90:5d:64:94:3e:b3:bb:69:4f:a8:eb:
4c:79:ec:ee:c2:54:1c:40:f5:70:a4:a2:45:4c:14:f1:b1:55:
5d:6d:34:d8:b2:02:18:3a:da:a4:0e:4c:de:f9:b9:98:64:05:
34:a7:9a:62:5b:83:b1:a9:a4:0a:0d:d8:cb:30:a3:1d:c0:d5:
6b:bf:d3:50:66:57:ec:7c:9b:8e:05:05:b3:df:be:36:a5:74:
12:51:c5:1f:d4:a6:47:db:02:e7:43:4c:ee:6b:67:f1:94:ac:
71:9f:b6:7e:a7:26:55:21:d1:4f:38:3d:29:fc:02:6c:de:49:
8e:23:b0:1c:c8:af:44:df:6b:75:fd:b9:3d:2d:a8:f8:1d:f2:
73:e8:7c:4d:93:0f:d1:88:34:65:9f:cc:66:3a:d7:7f:b2:9a:
bd:5f:17:ce:f2:39:b3:22:90:27:28:c1:60:df:93:bf:8b:91:
66:68:ae:48:5d:23:d3:61:1b:75:e3:11:9b:fd:7a:bf:b8:50:
e0:4a:dc:d0:fd:45:59:a7:b2:45:1c:f8:bf:e1:5c:16:f9:f6:
92:6e:1f:a8:37:67:56:42:b4:b0:51:aa:36:da:d7:0a:b9:6e:
d5:2d:65:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEJQlVMXMX6tUgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MzhjYjI4NWQtYWQ0Yi00YTg4LTliMGUtYTVhZDRiMmQ4YTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX8mVTXHarpkjOOBi51yunb8mKC+DYD7P+jA
gnlrYjHs671mC4N4tYRDbxBz+DIuwVZR5RGe2fok3ypeHNChF80UJ0XiYPfskcZk
k82XlHuwwaOPjZ48h6VXdzD+74+WgpJ5nk9wJ4y+65SgefNj4wjiNmxcPBfxhoLT
u07SDEE+289A4y7O3+7K0Odsq5Iht/s1i+uyBlWOa24sRTOn5EpSppEoZ0nfOuam
HSlx1K04/c7mMA8pko17dw54utSc1/KwHThvp0KJDKwAI2SpcjtZll2CNaL/lvw1
d8dAoosiAnVPYcE0S/XGPDqZLib1Y7H6hG7jfkDJqDu6ju+fdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnLKIGOMQShfeCw262KAgJqnXr0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDI4NWQ5MGQtYjFhMi0z
N2EwLWIyOGMtYjc2YjVhZDI2MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFGUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJod9qa7kW3dOPIw9TttQhma2Jukaq4xoR6QXWSUPrO7aU+o60x57O7C
VBxA9XCkokVMFPGxVV1tNNiyAhg62qQOTN75uZhkBTSnmmJbg7GppAoN2Mswox3A
1Wu/01BmV+x8m44FBbPfvjaldBJRxR/UpkfbAudDTO5rZ/GUrHGftn6nJlUh0U84
PSn8AmzeSY4jsBzIr0Tfa3X9uT0tqPgd8nPofE2TD9GINGWfzGY613+ymr1fF87y
ObMikCcowWDfk7+LkWZorkhdI9NhG3XjEZv9er+4UOBK3ND9RVmnskUc+L/hXBb5
9pJuH6g3Z1ZCtLBRqjba1wq5btUtZSg=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:36 2025 by rpki-client