Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfa59443-3b9f-31c6-8c69-1f4266aa3e47.roa
File: bfa59443-3b9f-31c6-8c69-1f4266aa3e47.roa (raw, json)
Hash identifier: meHSNxHlif2ANRbs9hmPJxaOcDjGHFSQ3QwBtQMozC8=
Subject key identifier: FD:B8:42:12:3F:0E:7B:39:4D:76:23:0D:87:41:73:93:7C:57:95:20
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B659FDF76A7BB152CE480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfa59443-3b9f-31c6-8c69-1f4266aa3e47.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.59.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:65:9f:df:76:a7:bb:15:2c:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=736e8ba7-1216-4319-9738-c33d1929e9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:06:4e:f0:32:02:39:b1:dc:9d:83:8e:d5:92:
13:95:7a:c7:85:5a:85:b5:92:4f:56:fd:2f:73:4a:
c1:18:cc:72:bb:11:c0:3d:6b:93:e2:18:43:c3:88:
26:c4:91:c0:a2:80:89:91:4a:5e:d5:af:84:bf:48:
29:9a:af:b5:dd:59:3d:90:4a:64:08:86:94:df:8f:
19:02:c1:5e:72:6b:1c:3c:a7:25:27:09:6f:14:1f:
46:2d:07:b2:8a:f5:c8:c4:d9:07:bd:b2:7f:f0:4b:
23:37:14:5e:b4:d2:91:fd:27:f8:8a:b4:5b:b2:b2:
c3:4f:50:71:1e:64:47:0b:a6:0e:f8:75:19:30:85:
8a:60:63:9e:cc:ac:c3:68:d1:40:77:9c:24:bb:45:
1c:6b:0e:9b:da:e0:e6:42:54:5e:e7:29:7e:6d:7e:
9a:11:03:c0:41:2a:b9:3a:84:38:52:cd:ac:c4:e0:
65:c7:e2:db:ef:a3:2e:d6:61:5c:6d:ab:56:ae:39:
21:66:94:f6:f6:6f:f4:d6:b3:24:19:20:ad:a9:4f:
9f:bc:ec:65:8e:9e:da:51:06:bc:78:79:48:86:1f:
04:be:40:2f:3c:34:31:87:0b:3c:a1:a0:fb:77:59:
da:09:e1:9b:3c:8c:8a:76:ac:75:25:c2:c1:b7:01:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B8:42:12:3F:0E:7B:39:4D:76:23:0D:87:41:73:93:7C:57:95:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfa59443-3b9f-31c6-8c69-1f4266aa3e47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.59.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:af:f2:75:4d:59:e6:eb:03:82:8b:f5:96:28:0a:01:19:43:
81:df:51:51:04:62:e9:72:3a:90:24:17:e6:de:35:a5:b1:dc:
bf:fe:a3:91:e3:6e:40:55:d3:e3:9d:a2:27:e4:84:8d:97:ce:
b6:b5:45:48:f1:f6:04:d4:88:62:55:15:cb:be:7d:53:7c:32:
4b:d7:47:d1:4c:c1:19:1d:2a:9b:56:06:c6:c2:2f:91:c0:9d:
78:5c:d6:78:02:be:7b:4d:b8:a3:6c:28:f3:26:4f:9d:2f:4c:
d3:24:83:ca:70:c3:29:1c:d5:6e:07:40:49:6e:ce:2b:f4:48:
97:27:89:6f:2d:40:66:a8:d3:0a:3b:8b:ab:16:d7:60:9a:91:
70:27:67:69:53:1b:a5:21:ee:3b:e4:0f:fa:d8:57:15:dc:23:
16:17:b3:3b:ed:c3:df:5a:17:f3:30:0e:7c:b3:f3:de:3b:a8:
ea:b0:15:1b:87:88:d4:7f:b1:f2:ff:4e:ae:f5:6f:1e:ab:10:
7f:25:2c:90:c9:51:92:ef:58:6d:b9:b5:88:69:92:00:53:2b:
af:ec:b8:11:d7:e1:21:b8:ba:bd:d0:52:22:a4:a9:34:e2:57:
07:ae:88:29:b9:c1:53:9f:6a:83:a8:e5:2a:5c:ab:f6:01:78:
48:e0:10:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO2Wf33anuxUs5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NzM2ZThiYTctMTIxNi00MzE5LTk3MzgtYzMzZDE5MjllOWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAZO8DICObHcnYOO1ZITlXrHhVqFtZJPVv0v
c0rBGMxyuxHAPWuT4hhDw4gmxJHAooCJkUpe1a+Ev0gpmq+13Vk9kEpkCIaU348Z
AsFecmscPKclJwlvFB9GLQeyivXIxNkHvbJ/8EsjNxRetNKR/Sf4irRbsrLDT1Bx
HmRHC6YO+HUZMIWKYGOezKzDaNFAd5wku0Ucaw6b2uDmQlRe5yl+bX6aEQPAQSq5
OoQ4Us2sxOBlx+Lb76Mu1mFcbatWrjkhZpT29m/01rMkGSCtqU+fvOxljp7aUQa8
eHlIhh8EvkAvPDQxhws8oaD7d1naCeGbPIyKdqx1JcLBtwECswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP24QhI/Dns5TXYjDYdBc5N8V5UgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZhNTk0NDMtM2I5Zi0z
MWM2LThjNjktMWY0MjY2YWEzZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDsCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyv8nVNWebrA4KL9ZYoCgEZQ4HfUVEEYulyOpAkF+beNaWx3L/+o5Hj
bkBV0+OdoifkhI2Xzra1RUjx9gTUiGJVFcu+fVN8MkvXR9FMwRkdKptWBsbCL5HA
nXhc1ngCvntNuKNsKPMmT50vTNMkg8pwwykc1W4HQEluziv0SJcniW8tQGao0wo7
i6sW12CakXAnZ2lTG6Uh7jvkD/rYVxXcIxYXszvtw99aF/MwDnyz8947qOqwFRuH
iNR/sfL/Tq71bx6rEH8lLJDJUZLvWG25tYhpkgBTK6/suBHX4SG4ur3QUiKkqTTi
VweuiCm5wVOfaoOo5Spcq/YBeEjgEE0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:34:04 2025 by rpki-client