Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e10118-f167-39a5-be49-c421a97335b3.roa
File: c6e10118-f167-39a5-be49-c421a97335b3.roa (raw, json)
Hash identifier: DHfyNC2HnsFHsuZz4cQE/ZJTUK9v2tnajjQGv2foxC8=
Subject key identifier: 9D:C2:22:70:42:A0:98:AA:5D:DB:7D:78:28:2A:C9:A0:04:23:7A:3F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5899F11BF3F34B548960
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e10118-f167-39a5-be49-c421a97335b3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.42.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:58:99:f1:1b:f3:f3:4b:54:89:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ed825e65-e1ed-44db-a93f-323db1ab6703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:74:b4:89:c3:63:ce:81:ba:94:40:37:0e:01:
4d:4e:67:79:0d:79:cb:ec:d3:21:bd:bf:29:a8:7a:
9f:97:bb:83:09:1a:95:23:c6:31:1f:61:be:48:b5:
2e:87:c1:d6:fa:94:11:91:c6:1b:cd:fa:92:9f:9e:
cb:81:43:e5:fe:c5:a1:7e:e9:56:a5:76:7c:1e:27:
6a:09:d9:78:57:6a:00:9b:00:b0:9d:f2:73:2c:cc:
f1:6a:b2:65:b9:ec:4c:bb:50:35:00:c0:ce:bf:51:
2f:01:ff:c8:6f:97:27:e8:73:d3:2d:0a:0e:cf:6b:
94:24:dc:2d:3f:5d:05:e6:e3:d1:73:be:ae:bb:33:
98:99:13:a9:e1:b5:6c:10:2c:f7:3b:8d:ee:92:09:
3a:9e:2e:b2:42:24:21:13:fc:30:7e:12:45:09:19:
e9:7f:40:07:31:05:8c:cb:81:18:12:f9:c7:b0:28:
92:2b:82:37:ec:e3:ff:84:79:2f:11:9f:75:f3:fb:
7d:fc:a5:a8:c2:b7:df:d8:76:6d:55:0f:1b:20:a1:
a2:36:91:19:91:67:3b:e2:d5:5f:1f:24:de:81:b1:
08:fa:f1:b6:5d:c4:2f:4c:27:39:23:b4:96:55:89:
ef:33:a4:1e:0a:0f:e8:1c:b8:3e:6d:8e:56:12:f9:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C2:22:70:42:A0:98:AA:5D:DB:7D:78:28:2A:C9:A0:04:23:7A:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e10118-f167-39a5-be49-c421a97335b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:a8:8e:35:54:97:f0:a2:30:f8:80:47:64:fe:fc:d7:cf:dc:
95:64:6b:58:55:d3:2a:3d:c0:5f:34:97:ed:d0:46:f2:3f:88:
67:94:4b:78:1e:11:48:0f:52:ca:18:d9:28:4d:0f:a1:36:99:
e8:6c:59:1e:a9:b0:2d:16:fc:53:9f:65:9d:8e:f9:08:24:6f:
6e:f5:3f:74:61:a0:01:a2:88:fe:9f:e8:25:51:cb:67:48:96:
f8:a0:ee:60:6d:1b:8d:fa:2d:31:28:6d:fc:99:0a:d3:84:3b:
a9:ac:39:1a:29:82:60:3d:81:98:46:93:f8:40:ff:56:5b:82:
12:b8:c8:19:ce:76:6b:fc:68:e9:de:c7:85:28:44:b7:ca:61:
75:88:a3:0e:ee:53:9c:77:e4:ea:41:6a:a3:ee:9f:48:ed:7b:
09:81:95:7b:29:65:2e:04:94:35:eb:65:de:11:58:86:34:66:
ca:48:c3:67:60:b9:32:bb:0e:a0:67:c4:bc:8a:47:58:b1:cd:
c7:74:e2:1d:6e:b3:49:9d:2e:f3:e2:aa:41:6e:d7:4b:82:9c:
fa:25:b3:68:98:0b:e5:52:98:6b:36:44:e1:d9:ad:28:cc:75:
87:42:7d:4e:f5:43:ee:07:eb:2a:78:24:53:39:3d:de:f6:c4:
a1:86:fe:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO1iZ8Rvz80tUiWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZWQ4MjVlNjUtZTFlZC00NGRiLWE5M2YtMzIzZGIxYWI2NzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXS0icNjzoG6lEA3DgFNTmd5DXnL7NMhvb8p
qHqfl7uDCRqVI8YxH2G+SLUuh8HW+pQRkcYbzfqSn57LgUPl/sWhfulWpXZ8Hidq
Cdl4V2oAmwCwnfJzLMzxarJluexMu1A1AMDOv1EvAf/Ib5cn6HPTLQoOz2uUJNwt
P10F5uPRc76uuzOYmROp4bVsECz3O43ukgk6ni6yQiQhE/wwfhJFCRnpf0AHMQWM
y4EYEvnHsCiSK4I37OP/hHkvEZ918/t9/KWowrff2HZtVQ8bIKGiNpEZkWc74tVf
HyTegbEI+vG2XcQvTCc5I7SWVYnvM6QeCg/oHLg+bY5WEvn8mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3CInBCoJiqXdt9eCgqyaAEI3o/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzZlMTAxMTgtZjE2Ny0z
OWE1LWJlNDktYzQyMWE5NzMzNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCpYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN2ojjVUl/CiMPiAR2T+/NfP3JVka1hV0yo9wF80l+3QRvI/iGeUS3ge
EUgPUsoY2ShND6E2mehsWR6psC0W/FOfZZ2O+Qgkb271P3RhoAGiiP6f6CVRy2dI
lvig7mBtG436LTEobfyZCtOEO6msORopgmA9gZhGk/hA/1ZbghK4yBnOdmv8aOne
x4UoRLfKYXWIow7uU5x35OpBaqPun0jtewmBlXspZS4ElDXrZd4RWIY0ZspIw2dg
uTK7DqBnxLyKR1ixzcd04h1us0mdLvPiqkFu10uCnPols2iYC+VSmGs2ROHZrSjM
dYdCfU71Q+4H6yp4JFM5Pd72xKGG/lk=
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:47:33 2025 by rpki-client