Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d422f0da-3695-36a7-818e-730e64837d6a.roa
File: d422f0da-3695-36a7-818e-730e64837d6a.roa (raw, json)
Hash identifier: AL+cMGf/et4qPwosQdO1P1NJzfRvlitnMYNWGmd2CvQ=
Subject key identifier: 62:65:9A:87:20:09:76:8B:B9:A8:FC:37:F1:95:B2:AB:4D:6C:7A:0C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B694C693DBB28A9BDB6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d422f0da-3695-36a7-818e-730e64837d6a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.61.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:69:4c:69:3d:bb:28:a9:bd:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=25f99bd2-2a2e-4bab-95f6-8f2295da4278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:d5:16:86:5d:3e:17:da:ce:28:72:e6:93:
bf:3a:48:2e:a9:9b:e1:c5:75:59:a4:87:25:bd:ea:
0f:17:f0:27:bb:5b:15:1b:e7:46:be:c3:6b:31:27:
5b:25:4f:63:3e:aa:b7:28:2a:40:d9:36:5a:37:f2:
9e:59:6e:84:f8:e9:9d:fd:7a:0e:7f:41:b5:42:75:
92:ea:34:28:d4:f4:2d:e5:dc:22:21:40:5c:81:ec:
c0:e0:8e:63:16:d4:c0:e7:1d:bc:6f:de:46:86:ef:
0a:e3:bf:73:32:98:0c:41:9f:28:5a:79:49:ba:f7:
55:13:5e:7e:d9:07:3f:66:5f:d6:dd:b5:f2:7c:65:
ea:ca:71:7b:4b:b8:fc:1c:ec:a6:bb:0d:e9:5e:6c:
e4:7f:b9:b8:44:e3:0f:73:31:c8:c0:ec:34:d8:37:
c9:a7:a1:f9:06:1e:ec:67:b6:51:13:8a:27:ee:1c:
f2:0b:4b:39:89:38:e0:24:2e:a7:42:f6:ec:4a:43:
0c:be:15:4c:c3:26:41:9b:7f:fa:38:4b:52:ed:c1:
4d:c1:99:29:4a:8d:f4:5b:6b:4c:e8:ee:97:f0:e7:
1a:49:1d:88:71:52:41:35:aa:c4:ab:68:a2:01:96:
88:36:d2:c7:2b:c4:e3:d7:ec:ef:c7:0d:b7:67:eb:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:65:9A:87:20:09:76:8B:B9:A8:FC:37:F1:95:B2:AB:4D:6C:7A:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d422f0da-3695-36a7-818e-730e64837d6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:9b:90:b0:2f:0b:58:49:64:2d:1d:ff:30:74:f2:4a:e5:dc:
26:c5:05:a5:06:26:2b:74:46:c3:51:dd:3a:b7:b4:6a:88:62:
e6:63:55:55:82:fe:cf:56:a1:3e:a4:10:26:cd:27:01:08:78:
c2:24:8f:0c:25:1f:cc:26:27:d0:b0:7b:e2:f8:83:ae:fe:1f:
0e:83:02:0a:23:8a:6c:12:ca:84:dd:59:cd:56:a9:f0:7c:15:
c9:4e:04:ca:09:7c:80:10:20:0a:ec:2b:44:f2:b9:af:81:75:
29:98:ae:6a:2d:69:c6:96:e4:65:f7:c5:dc:11:52:64:78:13:
64:45:35:16:7c:24:96:b1:ec:ea:33:2c:90:ba:39:3e:03:c2:
c7:20:96:8c:15:88:30:60:e3:ee:c9:ea:de:20:5b:24:8e:36:
47:c0:e3:19:34:b9:7c:43:b5:4a:d8:68:0c:38:53:c6:5e:84:
1a:e7:29:61:a5:23:4a:52:ff:fd:08:cc:86:ad:7e:f3:1a:41:
81:7c:3e:38:9b:27:9a:d5:19:b1:48:88:8a:70:2c:4c:98:f6:
d0:cd:cb:9e:b8:84:6c:2f:7e:77:13:0a:75:de:01:6f:cc:a6:
e2:3d:01:49:75:4f:b0:42:7c:d9:6a:50:45:8b:4f:5e:0d:12:
f1:5e:06:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO2lMaT27KKm9tsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MjVmOTliZDItMmEyZS00YmFiLTk1ZjYtOGYyMjk1ZGE0Mjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAbVFoZdPhfazihy5pO/OkguqZvhxXVZpIcl
veoPF/Anu1sVG+dGvsNrMSdbJU9jPqq3KCpA2TZaN/KeWW6E+Omd/XoOf0G1QnWS
6jQo1PQt5dwiIUBcgezA4I5jFtTA5x28b95Ghu8K479zMpgMQZ8oWnlJuvdVE15+
2Qc/Zl/W3bXyfGXqynF7S7j8HOymuw3pXmzkf7m4ROMPczHIwOw02DfJp6H5Bh7s
Z7ZRE4on7hzyC0s5iTjgJC6nQvbsSkMMvhVMwyZBm3/6OEtS7cFNwZkpSo30W2tM
6O6X8OcaSR2IcVJBNarEq2iiAZaINtLHK8Tj1+zvxw23Z+vsuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGJlmocgCXaLuaj8N/GVsqtNbHoMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQyMmYwZGEtMzY5NS0z
NmE3LTgxOGUtNzMwZTY0ODM3ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARD0FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACibkLAvC1hJZC0d/zB08krl3CbFBaUGJit0RsNR3Tq3tGqIYuZjVVWC
/s9WoT6kECbNJwEIeMIkjwwlH8wmJ9Cwe+L4g67+Hw6DAgojimwSyoTdWc1WqfB8
FclOBMoJfIAQIArsK0Tyua+BdSmYrmotacaW5GX3xdwRUmR4E2RFNRZ8JJax7Ooz
LJC6OT4DwscglowViDBg4+7J6t4gWySONkfA4xk0uXxDtUrYaAw4U8ZehBrnKWGl
I0pS//0IzIatfvMaQYF8PjibJ5rVGbFIiIpwLEyY9tDNy564hGwvfncTCnXeAW/M
puI9AUl1T7BCfNlqUEWLT14NEvFeBvM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:17:40 2025 by rpki-client