Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b8c3e3-7deb-34ae-8c9b-2ebf87b30af7.roa
File: 69b8c3e3-7deb-34ae-8c9b-2ebf87b30af7.roa (raw, json)
Hash identifier: ln1pW+Yn5MTCW28yRzipYsoPB3FthJPu4JwLYP1I4J8=
Subject key identifier: 34:CC:35:81:37:B1:52:CE:F7:55:F1:EC:C5:C6:9A:D7:55:26:1F:01
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5FDAA881BAA7B559BD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b8c3e3-7deb-34ae-8c9b-2ebf87b30af7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.51.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:5f:da:a8:81:ba:a7:b5:59:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=659d999d-d2df-4f85-a7cc-f8494766f466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:d8:74:36:c8:b2:f7:48:c2:4e:ac:21:a7:
b0:a3:79:5a:b7:d9:71:a0:93:af:d0:c2:68:22:0a:
f3:88:0a:e4:bf:6c:a0:ed:2a:1b:cf:50:3e:b2:2d:
fe:88:da:5a:a0:1b:37:b9:b3:c6:7c:7b:5a:79:6a:
44:a8:53:88:8f:7c:62:25:e6:30:63:1b:7d:ae:64:
90:3d:cd:2f:3a:86:f1:94:53:f6:07:b5:0e:dc:ca:
51:68:99:03:0f:34:26:e1:8f:06:10:6f:61:81:3a:
c1:cb:72:14:84:7c:38:05:d3:8c:4b:c9:a4:11:1d:
9c:d2:37:b0:be:36:80:d9:fa:ea:ce:8d:86:e5:ea:
a2:66:40:52:f2:b9:19:72:52:04:19:94:9d:be:00:
23:c8:76:89:51:7a:79:5d:86:30:d6:c8:41:96:df:
cb:fd:cf:3b:62:87:41:0d:26:e3:e3:c6:cc:5a:36:
a5:fa:a3:84:57:ea:31:42:b0:7d:56:59:4b:7d:2d:
17:da:fe:e9:e1:be:e4:0f:42:98:08:16:5e:6a:fa:
2b:b4:e2:22:39:4c:49:d2:bf:d2:4c:81:1f:fc:04:
35:b9:4c:e3:04:ae:cd:de:e7:91:73:af:6f:1f:07:
89:5e:e2:65:8f:4d:00:4a:6c:24:7e:5f:56:40:49:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:35:81:37:B1:52:CE:F7:55:F1:EC:C5:C6:9A:D7:55:26:1F:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b8c3e3-7deb-34ae-8c9b-2ebf87b30af7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.51.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:9e:ce:83:b1:75:ab:70:79:d3:12:df:70:62:8a:91:8b:b0:
30:30:1a:47:05:53:f9:c5:30:8a:b2:88:0f:83:74:05:1b:9f:
e1:71:cc:6e:12:05:a9:98:bf:5c:d4:84:ae:12:bb:12:ed:7c:
1e:2c:dc:3a:40:8e:f2:dd:5a:e3:89:f1:ba:ff:1f:ca:61:c4:
6f:65:f5:57:88:11:9b:f5:25:a7:5c:5a:3e:b2:cc:f0:d8:91:
0a:b3:7f:d7:80:0b:1d:eb:af:1c:b7:88:4c:50:40:ce:8e:eb:
62:de:4e:38:05:fa:e7:48:2d:19:84:ba:9e:91:2a:d8:88:ed:
ef:d9:c1:be:e4:1b:0f:72:17:96:c0:5a:08:77:4e:6e:3c:77:
4e:02:39:0b:6a:a3:7d:3e:17:5c:e3:18:fd:48:b7:14:02:09:
e6:8a:b1:ac:88:a0:7e:bc:fa:b2:bf:84:37:cc:eb:16:4f:6d:
c6:59:bd:dd:17:4c:e6:e5:ed:d2:93:6b:52:08:7e:aa:f3:e6:
d7:82:bc:65:26:29:a0:51:9c:f3:be:ff:07:16:06:fb:2e:7e:
a2:26:76:94:87:af:cc:ba:c7:49:bd:bb:9e:e0:a8:97:a7:2d:
72:d5:3a:71:a2:04:59:ea:3e:2b:81:1e:5f:18:e6:f7:cb:7e:
b0:63:b3:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO1/aqIG6p7VZvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NjU5ZDk5OWQtZDJkZi00Zjg1LWE3Y2MtZjg0OTQ3NjZmNDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZzYdDbIsvdIwk6sIaewo3lat9lxoJOv0MJo
IgrziArkv2yg7Sobz1A+si3+iNpaoBs3ubPGfHtaeWpEqFOIj3xiJeYwYxt9rmSQ
Pc0vOobxlFP2B7UO3MpRaJkDDzQm4Y8GEG9hgTrBy3IUhHw4BdOMS8mkER2c0jew
vjaA2frqzo2G5eqiZkBS8rkZclIEGZSdvgAjyHaJUXp5XYYw1shBlt/L/c87YodB
DSbj48bMWjal+qOEV+oxQrB9VllLfS0X2v7p4b7kD0KYCBZeavortOIiOUxJ0r/S
TIEf/AQ1uUzjBK7N3ueRc69vHweJXuJlj00ASmwkfl9WQElEkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTMNYE3sVLO91Xx7MXGmtdVJh8BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjliOGMzZTMtN2RlYi0z
NGFlLThjOWItMmViZjg3YjMwYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDPGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMOezoOxdatwedMS33BiipGLsDAwGkcFU/nFMIqyiA+DdAUbn+FxzG4S
BamYv1zUhK4SuxLtfB4s3DpAjvLdWuOJ8br/H8phxG9l9VeIEZv1JadcWj6yzPDY
kQqzf9eACx3rrxy3iExQQM6O62LeTjgF+udILRmEup6RKtiI7e/Zwb7kGw9yF5bA
Wgh3Tm48d04COQtqo30+F1zjGP1ItxQCCeaKsayIoH68+rK/hDfM6xZPbcZZvd0X
TObl7dKTa1IIfqrz5teCvGUmKaBRnPO+/wcWBvsufqImdpSHr8y6x0m9u57gqJen
LXLVOnGiBFnqPiuBHl8Y5vfLfrBjs20=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:49 2025 by rpki-client