Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943d9ff5-e2f0-3f66-8077-b980e0b3eb26.roa
File: 943d9ff5-e2f0-3f66-8077-b980e0b3eb26.roa (raw, json)
Hash identifier: 3x98QPapvCoosaeveo77OgpWzEBuAlceU6uoAC/kwc8=
Subject key identifier: 2D:9D:B4:A9:7A:BE:52:7E:63:1F:61:C7:1A:2B:C8:69:2F:A9:49:F0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C123080197E2CABFC2990E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943d9ff5-e2f0-3f66-8077-b980e0b3eb26.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 68.82.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:30:80:19:7e:2c:ab:fc:29:90:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ce74f84c-b925-453e-850c-c415a82f071b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:85:75:4c:d0:26:52:4a:6d:43:91:5a:7f:
97:a7:2a:ad:04:54:fb:0b:5d:f7:d8:87:d0:94:d1:
9e:ac:e2:c5:a6:75:e2:0d:2e:69:2e:2d:ef:ac:24:
9b:c0:ab:11:86:28:ca:04:4c:30:df:2f:ed:00:18:
ff:ea:bf:3c:8d:77:43:cc:09:2d:2d:9c:5b:35:48:
f6:7a:64:e2:d2:f7:bf:7e:73:25:f8:48:cb:32:1f:
13:87:14:e2:28:77:d9:d2:fd:ed:94:7f:d2:b4:2c:
87:9b:1b:22:3a:52:9d:3f:ab:af:58:b0:ac:b7:f0:
f5:1e:1f:dc:e4:5a:6b:54:a9:c4:e7:bb:54:42:e6:
62:47:3f:d8:3f:44:a1:78:18:84:a4:7a:59:49:25:
72:72:15:9a:5b:09:6b:32:98:64:95:8c:8a:82:3a:
7e:ec:98:4f:ce:b8:bd:f2:f8:88:c9:02:a4:a0:62:
be:a7:5b:21:64:ff:8a:dd:1c:59:06:82:44:19:b5:
39:f4:c4:9f:7e:45:a6:8b:2e:32:20:77:43:ee:f8:
32:b9:04:e8:ff:33:83:9e:da:f1:78:ef:2d:8e:23:
7c:76:1b:13:5f:50:83:6a:ae:4b:1b:13:1a:f4:98:
1c:56:0f:57:af:52:d3:4a:33:53:22:99:1c:0c:93:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9D:B4:A9:7A:BE:52:7E:63:1F:61:C7:1A:2B:C8:69:2F:A9:49:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943d9ff5-e2f0-3f66-8077-b980e0b3eb26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.82.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:71:73:ad:2e:e9:d8:a0:92:8c:99:b1:86:f3:1a:8f:0e:c3:
1b:46:c0:f7:d6:1c:04:dc:28:17:44:21:ef:f2:ab:87:8b:87:
ab:02:9c:c8:f7:51:10:32:ce:ba:4d:53:68:9e:b9:de:70:9f:
02:cd:b6:c5:76:b4:0f:13:eb:43:53:68:31:eb:25:2c:bc:9d:
b9:49:fd:12:5b:32:e2:ed:12:72:64:d7:29:f3:1a:ca:16:93:
19:3e:ff:c1:15:af:fa:87:c5:65:74:80:4c:8e:82:1b:e0:a3:
9d:40:a3:a6:f7:96:fa:7c:1c:ac:3c:06:f5:f9:87:01:b6:c0:
71:28:16:19:b5:db:58:fd:9b:0b:a1:1d:b3:bf:a6:57:9d:0e:
25:03:da:e2:69:d7:94:95:51:48:e7:23:24:33:67:37:12:aa:
01:e1:78:61:eb:5b:91:e9:8b:ad:3b:7d:df:3f:64:f8:36:c2:
0a:59:a1:7e:96:e9:e4:0a:86:63:d0:d7:58:3b:dc:36:ae:5e:
71:1a:42:f6:7c:11:d8:9c:35:72:21:38:d7:bf:f7:36:c0:c3:
c9:74:a1:0b:5f:a5:07:fb:c5:76:f6:2d:36:d1:b3:03:86:3a:
8a:ad:76:9a:8f:20:4d:5a:3f:a7:ba:7a:57:6d:df:6d:ea:ae:
78:6e:35:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEjCAGX4sq/wpkOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
Y2U3NGY4NGMtYjkyNS00NTNlLTg1MGMtYzQxNWE4MmYwNzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17uFdUzQJlJKbUORWn+XpyqtBFT7C1332IfQ
lNGerOLFpnXiDS5pLi3vrCSbwKsRhijKBEww3y/tABj/6r88jXdDzAktLZxbNUj2
emTi0ve/fnMl+EjLMh8ThxTiKHfZ0v3tlH/StCyHmxsiOlKdP6uvWLCst/D1Hh/c
5FprVKnE57tUQuZiRz/YP0SheBiEpHpZSSVychWaWwlrMphklYyKgjp+7JhPzri9
8viIyQKkoGK+p1shZP+K3RxZBoJEGbU59MSffkWmiy4yIHdD7vgyuQTo/zODntrx
eO8tjiN8dhsTX1CDaq5LGxMa9JgcVg9Xr1LTSjNTIpkcDJON6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC2dtKl6vlJ+Yx9hxxoryGkvqUnwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTQzZDlmZjUtZTJmMC0z
ZjY2LTgwNzctYjk4MGUwYjNlYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFLWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMhxc60u6digkoyZsYbzGo8OwxtGwPfWHATcKBdEIe/yq4eLh6sCnMj3
URAyzrpNU2ieud5wnwLNtsV2tA8T60NTaDHrJSy8nblJ/RJbMuLtEnJk1ynzGsoW
kxk+/8EVr/qHxWV0gEyOghvgo51Ao6b3lvp8HKw8BvX5hwG2wHEoFhm121j9mwuh
HbO/pledDiUD2uJp15SVUUjnIyQzZzcSqgHheGHrW5Hpi607fd8/ZPg2wgpZoX6W
6eQKhmPQ11g73DauXnEaQvZ8EdicNXIhONe/9zbAw8l0oQtfpQf7xXb2LTbRswOG
OoqtdpqPIE1aP6e6eldt323qrnhuNW0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:15:08 2025 by rpki-client