Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb908a4-a755-3417-8981-3a1606753206.roa
File: ceb908a4-a755-3417-8981-3a1606753206.roa (raw, json)
Hash identifier: guKzae7oE7mr9COrx0exFahGJ4isODeyZUHcVAtTayA=
Subject key identifier: 03:ED:1B:C5:E2:4B:71:55:CB:71:E6:1E:67:6D:C5:DF:B2:10:BC:2C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1096776E6FFF0C9A8D6938
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb908a4-a755-3417-8981-3a1606753206.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 68.83.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:96:77:6e:6f:ff:0c:9a:8d:69:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b87ee9f1-908d-401b-a89f-9c66ee5907b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:24:da:80:bc:e4:91:0a:89:5a:53:81:5d:
7a:0c:63:f2:71:89:74:89:04:d2:3f:24:94:27:0d:
61:00:30:7e:dc:f8:15:ef:0e:8e:04:2a:f2:20:3d:
f4:fc:0e:39:8a:5c:3b:53:7c:78:75:61:33:b9:f7:
f9:cc:a6:20:12:06:18:19:c1:18:30:81:a6:90:c7:
49:0a:bc:9d:70:75:32:f6:f5:f7:3e:64:bc:31:d0:
7a:f4:0d:83:8d:ac:fb:0c:ea:53:a3:a9:12:b2:45:
46:33:2f:d2:5f:ad:92:c4:ad:5f:30:44:49:00:8c:
d6:92:51:4a:89:31:9b:6e:b5:88:5d:65:ce:ff:5e:
25:1f:66:fd:9c:8f:34:78:65:91:1e:1f:58:bd:d8:
fc:58:93:5b:96:e4:27:ff:ad:ac:6d:b0:5d:3f:19:
42:2a:15:2c:56:13:17:cd:6e:0e:ff:94:df:f0:40:
3d:78:f0:41:89:50:fc:32:c9:4d:72:55:1c:a5:1a:
b0:00:28:af:ff:54:80:4d:65:88:a2:9a:74:25:3b:
9e:a9:16:ac:54:8d:33:80:27:5b:a9:1e:b0:80:d2:
85:7c:d9:ef:d7:1d:7d:55:2c:f5:86:f6:32:fe:32:
04:34:36:23:ee:a7:f6:d9:20:4e:72:b5:0e:91:14:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:ED:1B:C5:E2:4B:71:55:CB:71:E6:1E:67:6D:C5:DF:B2:10:BC:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb908a4-a755-3417-8981-3a1606753206.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:eb:1d:06:20:1f:89:b5:c5:7f:83:c5:b2:28:03:b5:25:a2:
17:f6:88:f3:90:0e:89:6e:6b:d8:99:ee:0d:ee:d6:6b:e0:10:
f0:71:cc:95:68:01:9c:97:77:f0:93:71:90:95:5b:e8:67:11:
b5:71:b1:cf:12:14:c6:a0:cd:df:12:de:1d:c5:f9:65:a2:0e:
82:d5:62:d6:48:f6:40:5d:56:c5:55:58:3b:2f:cc:10:39:7f:
ae:a9:20:e1:9b:5f:68:e0:8a:d7:58:5b:9a:0b:b9:2c:27:f2:
43:24:99:a3:61:43:1f:01:de:4c:df:5c:2d:09:cc:f9:0d:bd:
a1:29:39:f7:8c:29:d5:3a:b5:a3:c9:c7:86:01:8a:d4:5a:58:
5f:19:76:60:14:1b:89:bc:a5:1f:1b:0d:98:94:ff:7b:2d:9a:
85:35:fd:43:76:85:16:77:1c:97:a5:c2:20:88:b3:07:cb:d4:
30:67:65:96:d7:b3:79:30:6e:db:72:ba:54:a7:fb:4e:5c:bd:
31:77:29:1d:81:1b:ed:66:ac:46:c1:e9:94:05:0b:bb:b9:63:
91:c9:98:3a:6e:85:8b:e4:0a:4f:91:c7:01:ae:67:18:3b:67:
f9:9e:2f:ee:be:a3:b3:0c:6f:73:0d:12:1a:04:32:9a:95:9b:
74:df:09:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEJZ3bm//DJqNaTgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
Yjg3ZWU5ZjEtOTA4ZC00MDFiLWE4OWYtOWM2NmVlNTkwN2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutok2oC85JEKiVpTgV16DGPycYl0iQTSPySU
Jw1hADB+3PgV7w6OBCryID30/A45ilw7U3x4dWEzuff5zKYgEgYYGcEYMIGmkMdJ
CrydcHUy9vX3PmS8MdB69A2Djaz7DOpTo6kSskVGMy/SX62SxK1fMERJAIzWklFK
iTGbbrWIXWXO/14lH2b9nI80eGWRHh9Yvdj8WJNbluQn/62sbbBdPxlCKhUsVhMX
zW4O/5Tf8EA9ePBBiVD8MslNclUcpRqwACiv/1SATWWIopp0JTueqRasVI0zgCdb
qR6wgNKFfNnv1x19VSz1hvYy/jIENDYj7qf22SBOcrUOkRRuZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPtG8XiS3FVy3HmHmdtxd+yELwsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ViOTA4YTQtYTc1NS0z
NDE3LTg5ODEtM2ExNjA2NzUzMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFOIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7rHQYgH4m1xX+DxbIoA7Ulohf2iPOQDolua9iZ7g3u1mvgEPBxzJVo
AZyXd/CTcZCVW+hnEbVxsc8SFMagzd8S3h3F+WWiDoLVYtZI9kBdVsVVWDsvzBA5
f66pIOGbX2jgitdYW5oLuSwn8kMkmaNhQx8B3kzfXC0JzPkNvaEpOfeMKdU6taPJ
x4YBitRaWF8ZdmAUG4m8pR8bDZiU/3stmoU1/UN2hRZ3HJelwiCIswfL1DBnZZbX
s3kwbttyulSn+05cvTF3KR2BG+1mrEbB6ZQFC7u5Y5HJmDpuhYvkCk+RxwGuZxg7
Z/meL+6+o7MMb3MNEhoEMpqVm3TfCfA=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:51 2025 by rpki-client