Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac288508-a548-39a2-991e-fe2f69102195.roa
File: ac288508-a548-39a2-991e-fe2f69102195.roa (raw, json)
Hash identifier: u7Oxh+UgzLSEzd8YAhi4TcG+LgBikQNpwD3dWs+K42g=
Subject key identifier: 6F:90:57:A4:26:01:C7:31:6D:17:45:7A:7B:EA:9C:0B:7C:03:80:BF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F3C77F7750924523E9B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac288508-a548-39a2-991e-fe2f69102195.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.43.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:3c:77:f7:75:09:24:52:3e:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=5d2109a5-3675-40be-9890-1ae65c12083e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8f:3e:0e:f0:15:ef:5a:b7:ba:e6:00:40:87:
36:58:1c:de:0f:5f:5f:a2:14:19:d9:72:1f:ab:43:
89:c9:a8:3e:48:3c:16:dc:0f:ae:ea:9f:2d:c2:36:
d1:f7:23:f0:af:13:11:7d:d9:b0:52:0f:e6:ce:16:
5e:1c:7a:28:c6:f4:53:e8:80:87:90:3f:bd:60:a7:
c1:82:22:3a:79:99:1c:ac:2b:30:ec:4f:fd:75:b7:
40:da:04:38:bd:c3:9c:ae:24:29:6f:8f:91:62:9c:
28:c6:4a:26:b9:2f:d4:a6:66:da:d5:22:f5:f3:8c:
fb:53:a4:17:1a:92:30:67:44:15:be:5f:f4:18:e8:
22:9b:42:be:40:30:6e:22:7b:c3:35:fc:c8:93:62:
a0:e4:9b:f8:71:1f:1f:a2:ab:a2:8f:e9:60:09:1d:
6b:ef:1b:2e:70:70:dd:78:ab:69:66:ff:8e:be:2b:
93:37:26:72:e9:82:d6:e0:37:4d:9f:25:c3:ab:94:
4a:12:d1:17:9f:ca:cc:39:c3:6a:f5:d2:4d:12:bf:
24:ac:1e:3d:3c:97:cb:0b:bf:d1:b0:7d:2a:45:30:
91:3e:b0:ec:ea:7f:1e:50:ff:0b:4a:3c:d1:60:e2:
23:82:4b:61:87:ec:7e:78:c0:3e:47:21:d3:2c:3a:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:90:57:A4:26:01:C7:31:6D:17:45:7A:7B:EA:9C:0B:7C:03:80:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac288508-a548-39a2-991e-fe2f69102195.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:70:19:b4:50:56:83:86:0a:fc:2a:38:6f:1b:84:19:eb:38:
35:60:52:5f:ab:de:45:ce:1d:ce:af:98:0c:28:e2:f5:5f:ea:
9f:ed:24:fb:b8:c8:72:77:be:22:2d:b9:6e:2a:48:08:be:d1:
76:80:b0:22:ee:85:8c:35:eb:fe:52:b6:dc:e0:cd:16:47:5c:
aa:87:70:2e:d8:29:24:61:7e:af:f5:d5:e8:b9:68:25:98:d5:
0b:73:21:0c:84:03:f7:8d:c3:fb:00:99:bc:c0:ba:55:4f:72:
5b:12:91:1a:5d:63:b0:65:28:7e:95:0a:34:85:5b:1c:d1:86:
ed:43:f1:fc:67:e4:a2:f3:82:a8:ff:62:49:4c:bd:16:d5:fd:
b2:29:8c:9d:59:66:de:c7:81:29:dd:88:03:dc:9f:34:72:dc:
5d:f4:ba:fa:b7:f5:20:c7:b8:09:22:f1:7c:9c:a9:66:b6:1c:
a8:4e:6c:93:fe:2c:13:0c:4c:5e:87:5e:9f:bc:4a:65:18:04:
79:2e:29:02:f2:a4:8c:a6:af:4b:44:91:b4:4e:f5:07:e2:83:
95:dd:09:2f:d4:0d:36:11:66:ec:7d:dd:4a:2a:90:af:09:00:
fc:01:10:c8:2f:3e:b9:e8:4d:d0:96:22:31:38:36:87:c0:59:
98:f4:f7:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPzx393UJJFI+m0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NWQyMTA5YTUtMzY3NS00MGJlLTk4OTAtMWFlNjVjMTIwODNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI8+DvAV71q3uuYAQIc2WBzeD19fohQZ2XIf
q0OJyag+SDwW3A+u6p8twjbR9yPwrxMRfdmwUg/mzhZeHHooxvRT6ICHkD+9YKfB
giI6eZkcrCsw7E/9dbdA2gQ4vcOcriQpb4+RYpwoxkomuS/Upmba1SL184z7U6QX
GpIwZ0QVvl/0GOgim0K+QDBuInvDNfzIk2Kg5Jv4cR8foquij+lgCR1r7xsucHDd
eKtpZv+OviuTNyZy6YLW4DdNnyXDq5RKEtEXn8rMOcNq9dJNEr8krB49PJfLC7/R
sH0qRTCRPrDs6n8eUP8LSjzRYOIjgkthh+x+eMA+RyHTLDofeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG+QV6QmAccxbRdFenvqnAt8A4C/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWMyODg1MDgtYTU0OC0z
OWEyLTk5MWUtZmUyZjY5MTAyMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCv4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1wGbRQVoOGCvwqOG8bhBnrODVgUl+r3kXOHc6vmAwo4vVf6p/tJPu4
yHJ3viItuW4qSAi+0XaAsCLuhYw16/5SttzgzRZHXKqHcC7YKSRhfq/11ei5aCWY
1QtzIQyEA/eNw/sAmbzAulVPclsSkRpdY7BlKH6VCjSFWxzRhu1D8fxn5KLzgqj/
YklMvRbV/bIpjJ1ZZt7HgSndiAPcnzRy3F30uvq39SDHuAki8XycqWa2HKhObJP+
LBMMTF6HXp+8SmUYBHkuKQLypIymr0tEkbRO9Qfig5XdCS/UDTYRZux93UoqkK8J
APwBEMgvPrnoTdCWIjE4NofAWZj096g=
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:32:34 2025 by rpki-client