Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa
File: 580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa (raw, json)
Hash identifier: TkM9WlxbvcPJP///xrlREXm4skpbaGWmNdmyGjazAwA=
Subject key identifier: 01:B1:72:97:65:E3:DB:1C:74:F3:5B:59:03:1C:EC:22:70:3D:4D:1B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10E2B28C29798B0EF8B140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.45.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:e2:b2:8c:29:79:8b:0e:f8:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=061b427a-2a88-45cb-bfe9-b27202f44a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:56:fb:ba:db:78:1b:6c:f9:81:94:79:ac:
15:c9:c5:0d:31:5d:7b:45:b2:b9:84:08:0b:97:03:
6b:1d:61:5f:f1:b1:53:32:80:29:91:9a:d8:d9:24:
c5:96:3c:85:f3:b6:17:56:c0:aa:05:19:42:7b:dd:
d8:55:6f:6f:c1:4c:be:82:1c:81:9a:12:6d:0c:74:
8c:1b:8b:39:3f:db:09:0f:7d:a9:18:ec:bd:69:7f:
c7:ac:6c:f4:b8:65:65:3a:08:81:4d:a4:f4:26:23:
77:d6:c0:90:9a:07:87:e3:04:60:ec:c4:9d:c1:70:
0d:b4:df:c1:f6:a4:4d:64:ef:92:95:19:70:d8:38:
0e:98:bd:12:fc:b2:8a:02:ae:80:7e:12:29:94:eb:
fe:e8:53:07:e9:2c:97:df:9a:03:31:73:2c:53:e4:
86:4e:9e:f7:1f:ca:90:96:26:af:8a:cc:b9:45:5e:
08:b2:ee:e2:02:27:dd:d4:e8:a0:35:dc:87:0a:bc:
42:a3:eb:6a:c5:14:e4:25:d7:ae:fc:a0:ce:29:4f:
7f:92:fc:40:7a:71:fb:50:f0:2d:e6:4c:1b:b9:ee:
d8:f2:31:4c:06:53:3f:3a:6f:11:44:91:97:cd:5a:
9b:90:0d:70:71:eb:e6:1b:43:6f:6c:64:ac:09:89:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B1:72:97:65:E3:DB:1C:74:F3:5B:59:03:1C:EC:22:70:3D:4D:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.45.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:17:9e:f9:35:c2:b3:7c:de:fd:1a:ec:57:43:18:a3:cf:a7:
9e:d4:02:58:99:e6:c5:d3:73:da:54:c9:d1:64:5b:8c:36:01:
91:b1:16:a7:86:a9:fd:0f:d3:18:7a:a1:fa:e6:b4:d3:b4:b4:
14:55:78:e3:c3:92:62:f2:2f:5f:92:82:bd:22:e4:9a:c6:c2:
af:a0:58:1a:de:90:03:7e:93:5b:38:1f:e5:a3:d1:5e:18:42:
be:ae:60:19:da:29:40:32:3e:26:43:fe:0f:b6:3c:61:01:94:
a0:fc:94:d1:3d:53:ca:09:c4:b1:8c:06:d5:12:29:d7:1b:98:
13:7c:06:5b:72:5a:e9:26:73:90:b2:bc:1f:7d:90:f5:79:5a:
69:a9:b3:c2:7e:3e:9c:3e:96:47:a1:f6:7b:8d:dc:d1:ad:0a:
1e:d0:b0:ce:58:06:40:48:d7:b1:f9:2a:3d:d4:56:04:71:95:
88:2a:74:de:b9:0a:46:19:30:73:0c:11:0b:27:24:68:80:95:
87:53:c8:0b:d0:9e:ca:cd:6b:5b:e8:59:44:48:20:45:00:f3:
27:23:fa:ac:b2:df:ba:7f:68:05:b0:2a:14:21:12:ac:8a:9a:
83:c1:66:b7:0e:c9:c5:52:8b:33:2c:81:d8:4b:ac:99:68:81:
aa:15:d1:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEOKyjCl5iw74sUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MDYxYjQyN2EtMmE4OC00NWNiLWJmZTktYjI3MjAyZjQ0YTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv9W+7rbeBts+YGUeawVycUNMV17RbK5hAgL
lwNrHWFf8bFTMoApkZrY2STFljyF87YXVsCqBRlCe93YVW9vwUy+ghyBmhJtDHSM
G4s5P9sJD32pGOy9aX/HrGz0uGVlOgiBTaT0JiN31sCQmgeH4wRg7MSdwXANtN/B
9qRNZO+SlRlw2DgOmL0S/LKKAq6AfhIplOv+6FMH6SyX35oDMXMsU+SGTp73H8qQ
liavisy5RV4Isu7iAifd1OigNdyHCrxCo+tqxRTkJdeu/KDOKU9/kvxAenH7UPAt
5kwbue7Y8jFMBlM/Om8RRJGXzVqbkA1wcevmG0NvbGSsCYlFWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGxcpdl49scdPNbWQMc7CJwPU0bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTgwZDM5MzUtM2MyNS0z
OTgyLTllNmYtZTM0NjVmMWFjOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRC2QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsXnvk1wrN83v0a7FdDGKPPp57UAliZ5sXTc9pUydFkW4w2AZGxFqeG
qf0P0xh6ofrmtNO0tBRVeOPDkmLyL1+Sgr0i5JrGwq+gWBrekAN+k1s4H+Wj0V4Y
Qr6uYBnaKUAyPiZD/g+2PGEBlKD8lNE9U8oJxLGMBtUSKdcbmBN8BltyWukmc5Cy
vB99kPV5Wmmps8J+Ppw+lkeh9nuN3NGtCh7QsM5YBkBI17H5Kj3UVgRxlYgqdN65
CkYZMHMMEQsnJGiAlYdTyAvQnsrNa1voWURIIEUA8ycj+qyy37p/aAWwKhQhEqyK
moPBZrcOycVSizMsgdhLrJlogaoV0f4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:55:47 2025 by rpki-client