Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3d6d9fa-6287-343a-a9fc-de7b4835c4d1.roa
File: c3d6d9fa-6287-343a-a9fc-de7b4835c4d1.roa (raw, json)
Hash identifier: fPVBRb8kAVYUkJtth+L8TSF+WVMg49A7Q7aMFS3/Km8=
Subject key identifier: B0:BA:BC:A8:8E:60:8A:1E:13:D7:70:E7:85:35:83:E1:F4:49:78:08
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F576ABCCFB509CE48B480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3d6d9fa-6287-343a-a9fc-de7b4835c4d1.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.56.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:57:6a:bc:cf:b5:09:ce:48:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b842443a-5676-4af3-9c55-9504f6ed3a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f2:20:47:95:66:bf:48:44:25:32:8c:50:65:
6a:3d:32:8f:e7:2f:d4:58:31:6f:85:12:e4:1c:89:
14:be:3b:03:93:68:d0:96:da:7e:74:70:38:70:43:
5e:46:52:ce:6c:24:b2:dd:c4:9d:c0:61:05:5c:c2:
fa:48:5d:cf:dc:77:8d:bc:f1:64:44:ba:1f:db:6b:
34:5b:d9:90:2c:e4:64:58:e6:d8:12:57:e0:4a:ba:
fc:42:0e:d4:32:bf:f0:2a:f1:f2:2c:54:ba:37:5e:
85:3b:e6:08:55:ea:03:07:50:96:17:d4:9c:47:48:
5d:19:82:54:8a:d1:2f:df:73:59:ac:27:87:aa:84:
5a:a2:0a:9c:71:d8:28:c2:1a:fb:f2:bf:6d:42:2a:
f0:64:8e:06:52:91:84:bf:5b:8e:ee:14:6f:55:0f:
88:f1:9c:e0:d6:eb:59:ba:93:b3:b6:b0:5e:65:1c:
af:30:88:72:94:00:ad:29:33:2f:d6:3f:a1:21:2f:
8c:6a:0a:00:50:ba:60:9a:ef:24:6f:c7:42:b9:f9:
ba:ef:cf:6c:a5:f0:48:fc:db:d5:c2:4d:ba:7a:fe:
1a:d0:72:09:f8:bb:7c:be:97:62:c3:a6:5b:e5:85:
0a:91:75:b0:09:df:72:82:79:9d:d6:a2:b8:98:e6:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BA:BC:A8:8E:60:8A:1E:13:D7:70:E7:85:35:83:E1:F4:49:78:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3d6d9fa-6287-343a-a9fc-de7b4835c4d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:83:79:b5:58:48:6d:41:e0:2d:c7:dd:70:06:d7:7f:2a:5a:
13:57:d3:dc:ed:5c:ce:02:b4:ef:99:4f:ef:ea:19:a5:bb:5f:
43:7c:f9:e0:25:73:7f:36:e1:03:ce:d2:a2:64:ca:fb:97:5f:
f8:28:9b:fb:a7:ef:e0:c4:0f:92:b9:a9:ca:a9:97:ae:d5:79:
d9:99:21:70:52:84:6c:62:bd:10:a9:36:a8:9f:ca:e6:b8:7a:
5f:47:78:36:75:8b:52:a7:6d:71:5c:31:1f:7d:d3:3e:88:ae:
0f:bd:ec:88:80:4e:36:45:b4:7d:c8:8d:4d:3a:ec:64:6c:28:
98:b7:a6:80:d6:8d:b9:c2:6f:0f:76:3b:86:f8:35:43:61:d2:
35:ee:60:fb:bd:66:92:bd:67:84:1b:03:55:94:e0:03:69:8e:
2a:72:9f:c6:5a:9f:f6:74:cf:b0:a6:a0:1b:eb:1b:a6:6e:3d:
5b:9f:18:fc:d7:b2:de:88:6c:26:69:4c:e5:19:43:27:cb:09:
fe:08:5c:07:a8:02:2d:4e:3c:34:9e:2b:9e:b6:bb:40:fd:e9:
7d:a9:04:81:36:46:50:14:2e:d3:5a:4c:41:e0:70:c0:70:f2:
86:92:4e:e1:83:0f:fd:05:3e:74:9e:8f:47:28:63:6d:30:f2:
c0:c7:3a:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUP1dqvM+1Cc5ItIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
Yjg0MjQ0M2EtNTY3Ni00YWYzLTljNTUtOTUwNGY2ZWQzYThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PIgR5Vmv0hEJTKMUGVqPTKP5y/UWDFvhRLk
HIkUvjsDk2jQltp+dHA4cENeRlLObCSy3cSdwGEFXML6SF3P3HeNvPFkRLof22s0
W9mQLORkWObYElfgSrr8Qg7UMr/wKvHyLFS6N16FO+YIVeoDB1CWF9ScR0hdGYJU
itEv33NZrCeHqoRaogqccdgowhr78r9tQirwZI4GUpGEv1uO7hRvVQ+I8Zzg1utZ
upOztrBeZRyvMIhylACtKTMv1j+hIS+MagoAULpgmu8kb8dCufm6789spfBI/NvV
wk26ev4a0HIJ+Lt8vpdiw6Zb5YUKkXWwCd9ygnmd1qK4mOa+NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLC6vKiOYIoeE9dw54U1g+H0SXgIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzNkNmQ5ZmEtNjI4Ny0z
NDNhLWE5ZmMtZGU3YjQ4MzVjNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDjkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+DebVYSG1B4C3H3XAG138qWhNX09ztXM4CtO+ZT+/qGaW7X0N8+eAl
c3824QPO0qJkyvuXX/gom/un7+DED5K5qcqpl67VedmZIXBShGxivRCpNqifyua4
el9HeDZ1i1KnbXFcMR990z6Irg+97IiATjZFtH3IjU067GRsKJi3poDWjbnCbw92
O4b4NUNh0jXuYPu9ZpK9Z4QbA1WU4ANpjipyn8Zan/Z0z7CmoBvrG6ZuPVufGPzX
st6IbCZpTOUZQyfLCf4IXAeoAi1OPDSeK562u0D96X2pBIE2RlAULtNaTEHgcMBw
8oaSTuGDD/0FPnSej0coY20w8sDHOr8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:40:40 2025 by rpki-client