Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a06d75fc-35a2-3525-88bc-9e78dc3478c6.roa
File: a06d75fc-35a2-3525-88bc-9e78dc3478c6.roa (raw, json)
Hash identifier: c1pnEoFWKk4sSCL1ZiS7yCXN7D1Bb98i8k6nFtYGmEU=
Subject key identifier: 6A:AB:ED:39:EC:0B:0E:63:5A:34:67:47:01:4F:9C:11:61:FC:5D:1E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143A96FC91D02FEB59235F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a06d75fc-35a2-3525-88bc-9e78dc3478c6.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 67.189.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:96:fc:91:d0:2f:eb:59:23:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=03692900-c7cf-46b5-ab7b-d3851e0c05ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:74:f8:7b:5f:6f:5c:d6:1d:71:f2:37:ff:26:
de:05:a5:ba:ff:e7:97:8f:0b:5a:12:b3:01:65:54:
fc:04:69:6d:a0:3f:ba:6f:4d:d2:e6:05:0c:2e:01:
2f:26:6e:ee:b3:26:80:3a:5b:d0:53:d0:71:e3:9e:
c9:00:71:b4:6b:76:46:34:e5:42:1e:ef:87:47:06:
0a:8a:88:2a:db:0c:95:49:c3:74:bb:1d:3c:0e:bb:
f7:22:a9:f7:15:5f:cb:6b:ea:71:da:8d:aa:1a:42:
5a:fe:13:26:b3:28:8c:06:e6:7a:2e:94:cf:b0:6a:
8e:56:bc:cd:f2:8b:9e:4d:ca:22:fd:42:01:aa:66:
00:09:eb:1c:c4:5b:c2:a4:31:53:f3:6e:e9:b7:1c:
c7:6b:ca:29:09:d5:40:dc:69:9a:a3:5f:1a:4e:97:
f8:96:31:41:4a:7b:a9:1b:b1:99:56:12:3f:5a:1b:
8f:1d:4a:ce:80:4f:86:62:d0:8d:29:84:d3:b4:da:
58:55:f6:e0:b1:c5:b9:c8:08:95:68:64:b3:5c:36:
73:c5:c8:5c:92:76:a7:bc:a0:3b:da:bd:22:75:06:
44:e3:49:94:81:eb:0e:cd:19:7b:f7:67:70:f0:63:
ed:bc:e6:ad:07:c5:49:ed:e3:d1:83:a3:93:b1:72:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AB:ED:39:EC:0B:0E:63:5A:34:67:47:01:4F:9C:11:61:FC:5D:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a06d75fc-35a2-3525-88bc-9e78dc3478c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.189.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:38:2d:5f:83:0f:48:46:7d:ce:6d:99:12:98:71:e6:f7:ab:
72:2f:82:04:68:9d:24:54:6c:65:82:14:f5:48:5a:44:eb:62:
c9:26:d0:6e:0a:0a:5c:19:ad:0c:8e:d9:2f:12:7a:58:d8:0d:
a0:e8:af:20:a0:8b:8d:3f:e9:50:65:8d:8f:46:3f:c1:1e:c4:
3c:6e:f0:9b:02:c9:da:f6:94:d0:c8:f0:38:ca:21:1a:7c:ce:
b4:f4:94:93:d6:8b:cf:e3:87:f7:02:6a:c9:84:9e:b2:45:54:
3d:eb:30:64:1a:a1:c5:e5:ec:73:95:aa:1b:dc:65:44:e8:34:
a1:48:ef:36:df:53:dc:cf:d1:9c:dc:13:68:3b:41:ae:41:8a:
99:83:70:cf:57:74:6b:b7:82:79:17:bd:70:37:dd:3e:33:c9:
55:20:46:90:36:6c:b6:d1:02:f7:a4:8b:3e:e9:60:d7:b6:6f:
7f:fa:f4:cc:3c:12:02:d7:94:d7:9d:15:af:25:c5:52:9f:eb:
e7:7b:2b:24:3f:5e:67:ea:9b:43:cd:5f:d7:90:f0:b2:f7:6a:
2e:5e:09:30:79:00:ae:7e:b8:80:86:bd:a1:8e:36:5d:cf:18:
f7:69:90:08:d5:c8:00:34:1c:8a:f4:31:dd:d4:08:89:d5:3c:
95:77:d0:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOpb8kdAv61kjX0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MDM2OTI5MDAtYzdjZi00NmI1LWFiN2ItZDM4NTFlMGMwNWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXT4e19vXNYdcfI3/ybeBaW6/+eXjwtaErMB
ZVT8BGltoD+6b03S5gUMLgEvJm7usyaAOlvQU9Bx457JAHG0a3ZGNOVCHu+HRwYK
iogq2wyVScN0ux08Drv3Iqn3FV/La+px2o2qGkJa/hMmsyiMBuZ6LpTPsGqOVrzN
8oueTcoi/UIBqmYACescxFvCpDFT827ptxzHa8opCdVA3Gmao18aTpf4ljFBSnup
G7GZVhI/WhuPHUrOgE+GYtCNKYTTtNpYVfbgscW5yAiVaGSzXDZzxchcknanvKA7
2r0idQZE40mUgesOzRl792dw8GPtvOatB8VJ7ePRg6OTsXIvOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGqr7TnsCw5jWjRnRwFPnBFh/F0eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA2ZDc1ZmMtMzVhMi0z
NTI1LTg4YmMtOWU3OGRjMzQ3OGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ71EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN04LV+DD0hGfc5tmRKYceb3q3IvggRonSRUbGWCFPVIWkTrYskm0G4K
ClwZrQyO2S8SeljYDaDoryCgi40/6VBljY9GP8EexDxu8JsCydr2lNDI8DjKIRp8
zrT0lJPWi8/jh/cCasmEnrJFVD3rMGQaocXl7HOVqhvcZUToNKFI7zbfU9zP0Zzc
E2g7Qa5BipmDcM9XdGu3gnkXvXA33T4zyVUgRpA2bLbRAvekiz7pYNe2b3/69Mw8
EgLXlNedFa8lxVKf6+d7KyQ/Xmfqm0PNX9eQ8LL3ai5eCTB5AK5+uICGvaGONl3P
GPdpkAjVyAA0HIr0Md3UCInVPJV30NY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:39:07 2025 by rpki-client