Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ba07bca-6191-3ccf-ad9f-5028b2e547cd.roa
File: 5ba07bca-6191-3ccf-ad9f-5028b2e547cd.roa (raw, json)
Hash identifier: /HHu1gKV4+BnwrJv4gg2/3P8+1tx3DWswi+TNtdWmGM=
Subject key identifier: 28:53:43:D9:B9:CC:CA:77:2E:12:88:C1:E0:9A:90:4D:83:79:FD:7E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C122F00DDA37B70B3D4E180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ba07bca-6191-3ccf-ad9f-5028b2e547cd.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 68.82.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:2f:00:dd:a3:7b:70:b3:d4:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4baf9af8-1738-4b3d-aa59-176de4a68b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:09:57:a3:c2:71:bb:9f:f7:38:1f:7d:8c:
22:4f:cd:63:d3:99:39:e2:3f:08:e9:8a:7a:7a:aa:
a9:a6:49:3c:f3:0a:e6:e0:51:d8:db:7d:c0:e7:15:
2f:f2:3a:23:bb:c3:d6:ed:4a:3f:98:85:a1:c4:66:
b1:9d:d7:24:30:1d:ae:88:bc:7f:63:a7:32:43:f6:
04:9b:3f:54:52:af:98:00:1f:8e:52:0e:c6:46:95:
7a:4f:12:26:80:10:22:21:a0:a1:2e:ca:4e:6b:71:
c8:84:f7:6f:d9:a7:c4:68:72:8d:51:24:78:93:0b:
3d:25:54:79:45:7b:b2:5d:72:d4:15:89:b9:af:6a:
69:63:83:c3:44:46:ee:db:62:52:5b:fc:cf:90:67:
84:d3:22:fd:44:7b:ad:85:22:dd:93:bd:09:ff:72:
60:61:b3:7b:20:fa:df:ae:75:b2:0a:a1:82:6f:5f:
ae:c6:6a:cf:c3:d4:00:20:d3:14:7c:40:51:3f:4c:
21:e7:d0:2d:57:3e:3d:9e:d8:86:fd:a5:46:0d:f4:
6c:98:24:b2:08:55:b2:f0:c1:ee:79:ac:7a:c2:aa:
7c:2a:47:20:b0:9a:ca:63:7b:da:b7:f3:df:68:dc:
79:53:9e:9c:85:cd:01:b3:58:f8:86:f5:7c:46:53:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:53:43:D9:B9:CC:CA:77:2E:12:88:C1:E0:9A:90:4D:83:79:FD:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ba07bca-6191-3ccf-ad9f-5028b2e547cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.82.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:c7:a7:40:08:be:16:ab:bf:bc:a1:a9:5b:cf:a2:7e:3e:56:
7c:ae:80:36:db:2c:97:73:16:e9:5e:28:85:0e:6f:80:92:9f:
be:8f:ff:89:27:e6:be:4c:06:1b:93:7b:ee:34:e9:f7:f1:e5:
8e:e7:dd:f4:75:92:26:5c:94:4a:0a:8f:07:8c:18:4a:46:be:
bb:eb:7e:ab:09:1b:79:6c:27:b3:1e:ae:0a:41:8a:f0:0e:9e:
35:1b:f4:21:c7:0d:c7:dd:59:2f:f2:c6:af:b0:07:65:cf:3a:
6d:10:37:d7:14:1c:df:26:51:41:bc:0e:79:96:bf:bb:ea:0b:
70:24:40:3e:0c:e7:b2:97:51:f3:78:ed:52:e1:42:e2:2d:59:
76:d1:81:cc:42:21:37:81:50:77:b5:d4:a8:60:1f:42:e5:fa:
1c:75:45:5e:21:41:fc:e5:9b:93:67:5e:c5:3e:6c:2a:b8:9a:
42:7d:15:a6:df:62:7b:f2:03:97:a6:f0:00:8f:51:f1:88:27:
ea:8b:cd:21:f9:ea:05:c4:cc:45:ad:07:c0:20:39:99:f7:12:
66:ed:1f:7f:5d:28:f4:97:82:b6:8f:c9:d4:5a:b4:05:7d:4f:
b5:9a:c2:dc:3d:d3:1c:64:96:e3:ef:5f:fa:62:05:1d:69:9c:
4e:a8:ae:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEi8A3aN7cLPU4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NGJhZjlhZjgtMTczOC00YjNkLWFhNTktMTc2ZGU0YTY4YjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iUJV6PCcbuf9zgffYwiT81j05k54j8I6Yp6
eqqppkk88wrm4FHY233A5xUv8joju8PW7Uo/mIWhxGaxndckMB2uiLx/Y6cyQ/YE
mz9UUq+YAB+OUg7GRpV6TxImgBAiIaChLspOa3HIhPdv2afEaHKNUSR4kws9JVR5
RXuyXXLUFYm5r2ppY4PDREbu22JSW/zPkGeE0yL9RHuthSLdk70J/3JgYbN7IPrf
rnWyCqGCb1+uxmrPw9QAINMUfEBRP0wh59AtVz49ntiG/aVGDfRsmCSyCFWy8MHu
eax6wqp8KkcgsJrKY3vat/PfaNx5U56chc0Bs1j4hvV8RlNT+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFChTQ9m5zMp3LhKIweCakE2Def1+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJhMDdiY2EtNjE5MS0z
Y2NmLWFkOWYtNTAyOGIyZTU0N2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFJkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrHp0AIvharv7yhqVvPon4+VnyugDbbLJdzFuleKIUOb4CSn76P/4kn
5r5MBhuTe+406ffx5Y7n3fR1kiZclEoKjweMGEpGvrvrfqsJG3lsJ7MergpBivAO
njUb9CHHDcfdWS/yxq+wB2XPOm0QN9cUHN8mUUG8DnmWv7vqC3AkQD4M57KXUfN4
7VLhQuItWXbRgcxCITeBUHe11KhgH0Ll+hx1RV4hQfzlm5NnXsU+bCq4mkJ9Fabf
YnvyA5em8ACPUfGIJ+qLzSH56gXEzEWtB8AgOZn3EmbtH39dKPSXgraPydRatAV9
T7Wawtw90xxkluPvX/piBR1pnE6oruI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:17 2025 by rpki-client