Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4b7726b-f14c-3946-a3c1-abb1f03b6e64.roa
File: a4b7726b-f14c-3946-a3c1-abb1f03b6e64.roa (raw, json)
Hash identifier: GegTa02MjGjJ7dGZQ86+WWYM0SlcQ/gx5PQKdqTHRu8=
Subject key identifier: E2:68:1C:80:7A:9F:8A:FC:4A:DE:B1:37:69:FB:3E:8B:65:20:1B:DB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C128264423DBCCDC7FBCD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4b7726b-f14c-3946-a3c1-abb1f03b6e64.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.45.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:82:64:42:3d:bc:cd:c7:fb:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b831e71a-2e75-441f-b42e-5292dc7a24bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:c6:75:5f:75:98:86:93:5a:9a:24:5a:fe:
01:eb:bf:3a:d3:39:b1:3e:bd:5a:67:e9:f4:df:18:
46:c2:e6:e7:e1:88:8d:86:7d:fa:30:d8:64:14:d8:
80:1d:1d:0a:80:d6:90:85:6e:64:ac:7d:ea:a4:46:
2f:56:6d:56:d2:04:6a:a5:dd:f5:a9:b6:78:6c:26:
a1:8c:e2:4c:55:a4:7a:e0:7e:2e:17:9c:65:32:d6:
ea:00:ca:bf:24:7b:04:c3:db:6c:9d:48:6e:12:f5:
34:50:10:95:0e:60:7a:5f:ee:84:ad:12:67:04:0b:
b2:3b:1c:80:ef:74:40:27:98:9e:79:ef:a3:6b:7b:
f1:38:6a:ab:72:84:f0:7c:52:6f:85:fe:fe:44:ad:
bb:e6:d7:86:69:83:71:63:e1:5f:75:ec:c8:da:92:
9b:b6:90:75:1e:f1:de:42:f7:bf:e8:db:47:fc:be:
6c:52:e6:be:b9:67:88:19:63:d8:39:0c:ce:84:57:
9f:ba:3b:34:a5:a9:33:cc:b9:d8:ad:97:62:16:69:
00:3d:a1:f2:c1:77:98:b8:e8:8f:45:ce:20:c9:e6:
7b:14:60:c7:b4:ba:a9:8b:e0:9a:d9:31:7a:bc:97:
9b:dd:ad:dc:02:ae:40:51:98:4f:cd:38:f3:53:24:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:68:1C:80:7A:9F:8A:FC:4A:DE:B1:37:69:FB:3E:8B:65:20:1B:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4b7726b-f14c-3946-a3c1-abb1f03b6e64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.45.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:80:1d:61:c7:1d:48:14:36:ff:e7:79:ef:67:79:3e:1b:64:
f1:e2:6a:44:8f:e0:cf:d5:e2:3a:19:e1:03:b3:93:3e:b8:5d:
e8:6d:62:8a:37:e2:0d:d2:0b:a0:5b:2e:9a:55:58:66:d3:c8:
fe:f6:a9:2d:44:88:db:0e:1b:4a:12:7e:57:18:b5:0b:d4:14:
bc:04:72:f7:df:18:89:bf:02:4c:22:ed:d3:f7:58:37:4f:4f:
27:1b:87:b7:16:c9:59:a1:53:bd:e9:37:71:d4:21:21:c7:77:
94:b8:ae:28:57:37:d2:19:c0:81:79:26:7a:bf:e6:79:dd:ce:
96:45:d3:ce:86:41:12:1d:82:89:0a:40:5b:4e:da:a1:89:6e:
d4:0a:b7:77:77:fd:c9:a0:8b:8a:23:9c:84:6d:e2:21:f9:19:
a8:fc:d8:98:20:08:f6:36:23:ff:6c:8b:a1:ce:88:36:19:d1:
6e:2a:b1:cc:bc:aa:2a:39:c2:10:dd:d6:97:d6:12:d9:06:d1:
da:b2:2a:7b:17:3e:9d:b4:6a:72:3d:73:60:d8:49:8f:d2:32:
74:4a:1d:02:08:b0:62:20:b5:59:66:e9:a9:2b:f9:4b:cb:af:
40:7e:77:32:a3:3f:d6:cb:45:e8:ad:07:8c:6b:4e:dc:64:2b:
5e:a6:28:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEoJkQj28zcf7zYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YjgzMWU3MWEtMmU3NS00NDFmLWI0MmUtNTI5MmRjN2EyNGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX7GdV91mIaTWpokWv4B67860zmxPr1aZ+n0
3xhGwubn4YiNhn36MNhkFNiAHR0KgNaQhW5krH3qpEYvVm1W0gRqpd31qbZ4bCah
jOJMVaR64H4uF5xlMtbqAMq/JHsEw9tsnUhuEvU0UBCVDmB6X+6ErRJnBAuyOxyA
73RAJ5ieee+ja3vxOGqrcoTwfFJvhf7+RK275teGaYNxY+FfdezI2pKbtpB1HvHe
Qve/6NtH/L5sUua+uWeIGWPYOQzOhFefujs0pakzzLnYrZdiFmkAPaHywXeYuOiP
Rc4gyeZ7FGDHtLqpi+Ca2TF6vJeb3a3cAq5AUZhPzTjzUyRwywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJoHIB6n4r8St6xN2n7PotlIBvbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTRiNzcyNmItZjE0Yy0z
OTQ2LWEzYzEtYWJiMWYwM2I2ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC0qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANGAHWHHHUgUNv/nee9neT4bZPHiakSP4M/V4joZ4QOzkz64XehtYoo3
4g3SC6BbLppVWGbTyP72qS1EiNsOG0oSflcYtQvUFLwEcvffGIm/Akwi7dP3WDdP
Tycbh7cWyVmhU73pN3HUISHHd5S4rihXN9IZwIF5Jnq/5nndzpZF086GQRIdgokK
QFtO2qGJbtQKt3d3/cmgi4ojnIRt4iH5Gaj82JggCPY2I/9si6HOiDYZ0W4qscy8
qio5whDd1pfWEtkG0dqyKnsXPp20anI9c2DYSY/SMnRKHQIIsGIgtVlm6akr+UvL
r0B+dzKjP9bLReitB4xrTtxkK16mKKk=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:42:47 2025 by rpki-client