Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/758aabee-a3d1-361f-8edc-79309d6efb36.roa
File: 758aabee-a3d1-361f-8edc-79309d6efb36.roa (raw, json)
Hash identifier: xkjbn8hvJyZnpndI6c8o1bwfu1NkqjE+NESHF8zj68c=
Subject key identifier: 2C:96:2D:9F:C7:D1:D7:C8:8E:BE:9D:B1:21:DE:9A:63:87:67:9B:0B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10E23078836D23D993FB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/758aabee-a3d1-361f-8edc-79309d6efb36.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.44.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:e2:30:78:83:6d:23:d9:93:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=263713c8-63f5-48c4-ae78-ad7ac54de3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:5f:d7:61:96:39:27:35:7d:ff:59:ac:81:
3d:1d:84:b8:76:0c:5d:43:da:b1:f7:a8:0b:96:1d:
c9:e2:f2:f2:88:36:5b:cf:c1:5b:67:2c:3f:2f:24:
6c:c2:3b:3f:6c:8f:4b:b3:71:0c:74:fb:a9:41:0d:
32:67:69:2a:a6:7f:50:fb:e1:19:48:d3:99:32:df:
2a:76:0f:a4:2b:25:08:51:41:99:54:8b:60:6b:b5:
59:05:04:19:eb:5e:e9:52:92:e8:83:c7:1b:db:5d:
32:74:96:f5:da:e2:25:5b:9f:b5:8f:2f:06:ae:28:
d6:09:ff:d4:8e:04:32:4d:3f:97:4d:9a:8e:c4:c1:
d3:00:4d:58:1b:a2:bf:96:9e:41:f0:d3:42:a3:e1:
bf:a9:57:4d:0b:2c:d6:fe:6b:6f:85:83:e3:68:44:
5c:af:45:e4:bb:d4:4b:8e:62:02:47:1a:4b:86:df:
f3:6e:2d:46:5f:d4:aa:12:39:bc:e1:6e:27:ec:a4:
0a:87:83:43:c1:11:5d:ac:9f:ab:c3:77:c3:f0:1c:
54:3c:6a:0a:9d:94:b3:24:0f:c6:cb:12:bd:71:af:
81:17:fd:5f:2b:93:ac:53:77:99:cb:85:15:03:5a:
c0:5a:7b:86:a6:32:2b:d1:6e:4f:6c:0e:53:3c:d6:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:96:2D:9F:C7:D1:D7:C8:8E:BE:9D:B1:21:DE:9A:63:87:67:9B:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/758aabee-a3d1-361f-8edc-79309d6efb36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:a6:3e:31:ac:11:08:cb:5b:00:18:7a:2e:4d:b0:27:98:6a:
2a:e0:fa:0c:c0:ac:12:c8:c0:27:5a:1a:45:64:62:fc:c3:c2:
85:6c:65:fa:14:c0:96:a3:78:c2:91:9f:30:44:46:46:47:1c:
a6:13:a7:61:27:52:a1:cd:f0:69:4b:a1:3d:b4:9d:50:24:f0:
9c:f9:98:7a:f5:48:cd:9a:5d:f0:c2:19:77:37:ca:99:f5:4a:
58:fa:c5:f1:58:e0:c3:e8:dd:26:7e:18:a9:32:d9:7d:e5:50:
2a:b8:3c:94:11:91:28:5e:ea:ab:5b:4a:8e:32:7e:dd:3a:96:
4b:b4:53:01:54:1b:8e:08:3f:36:1b:79:ed:67:cd:d2:f7:d9:
2f:1c:00:d1:bf:91:cc:95:a8:88:6e:8b:54:ae:dd:23:cf:b1:
0d:d1:2b:f7:7b:d3:90:f6:0a:4f:58:7f:32:9d:84:16:82:41:
40:2e:59:9f:f9:59:d3:17:3c:5b:db:35:12:8b:d3:c7:48:89:
a0:e4:dd:7a:b6:2c:08:37:9b:1f:9a:61:92:58:50:c4:d9:9a:
7d:2b:07:b1:4c:62:11:32:8a:43:80:73:ca:32:73:e0:5d:64:
41:f8:68:3d:d5:79:2a:6b:3d:67:03:78:87:85:10:f2:af:f5:
ef:6b:a3:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEOIweINtI9mT+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MjYzNzEzYzgtNjNmNS00OGM0LWFlNzgtYWQ3YWM1NGRlM2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6Ff12GWOSc1ff9ZrIE9HYS4dgxdQ9qx96gL
lh3J4vLyiDZbz8FbZyw/LyRswjs/bI9Ls3EMdPupQQ0yZ2kqpn9Q++EZSNOZMt8q
dg+kKyUIUUGZVItga7VZBQQZ617pUpLog8cb210ydJb12uIlW5+1jy8GrijWCf/U
jgQyTT+XTZqOxMHTAE1YG6K/lp5B8NNCo+G/qVdNCyzW/mtvhYPjaERcr0Xku9RL
jmICRxpLht/zbi1GX9SqEjm84W4n7KQKh4NDwRFdrJ+rw3fD8BxUPGoKnZSzJA/G
yxK9ca+BF/1fK5OsU3eZy4UVA1rAWnuGpjIr0W5PbA5TPNYJDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCyWLZ/H0dfIjr6dsSHemmOHZ5sLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzU4YWFiZWUtYTNkMS0z
NjFmLThlZGMtNzkzMDlkNmVmYjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+mPjGsEQjLWwAYei5NsCeYairg+gzArBLIwCdaGkVkYvzDwoVsZfoU
wJajeMKRnzBERkZHHKYTp2EnUqHN8GlLoT20nVAk8Jz5mHr1SM2aXfDCGXc3ypn1
Slj6xfFY4MPo3SZ+GKky2X3lUCq4PJQRkShe6qtbSo4yft06lku0UwFUG44IPzYb
ee1nzdL32S8cANG/kcyVqIhui1Su3SPPsQ3RK/d705D2Ck9YfzKdhBaCQUAuWZ/5
WdMXPFvbNRKL08dIiaDk3Xq2LAg3mx+aYZJYUMTZmn0rB7FMYhEyikOAc8oyc+Bd
ZEH4aD3VeSprPWcDeIeFEPKv9e9ro/E=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:35:09 2025 by rpki-client