Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfb18b63-867f-35be-b71b-658713804f50.roa
File: dfb18b63-867f-35be-b71b-658713804f50.roa (raw, json)
Hash identifier: MinlHgzn0MB825OOIJq04NdXo0WyEvEwIm7WX1N04Sg=
Subject key identifier: 95:73:8E:CA:89:38:C7:BB:7A:7C:13:F8:B6:9C:60:4D:10:C6:93:6D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B69C550AB6CC725FF6D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfb18b63-867f-35be-b71b-658713804f50.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.61.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:69:c5:50:ab:6c:c7:25:ff:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=84a9517b-5ddf-4168-ae7e-10110bd89805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:ef:d3:81:7d:1f:6f:05:0f:62:bb:1c:1a:
1a:c0:d4:91:44:6b:2b:0b:d7:43:de:05:50:4a:11:
29:3f:1e:8b:09:1c:c7:a7:c7:3b:70:bf:b9:b2:8d:
29:3a:e2:99:66:b1:bb:57:23:64:cd:8c:90:82:de:
c3:27:fb:d8:04:a6:5c:88:7d:48:ca:1d:16:c5:c6:
ed:d8:ac:7f:1a:fa:ee:ea:a3:7e:9d:17:d6:13:66:
26:80:f8:4f:29:11:5e:ad:3c:75:ea:92:61:83:04:
07:2d:a7:a7:02:2a:fa:94:18:3b:ea:fb:05:8c:42:
04:d1:53:24:1e:4a:7b:c0:66:e5:ef:7f:96:c8:e3:
e5:dd:c5:2e:46:5f:f6:cf:8e:6f:f1:1c:56:b9:c4:
d8:5c:73:a4:62:44:81:71:cf:11:9f:1b:84:3a:21:
cf:0f:e5:b9:13:3d:b6:1f:b2:42:76:bc:7e:2b:30:
e5:68:82:e2:18:e6:00:f1:7c:75:db:de:46:51:ea:
48:8c:46:f6:17:3d:a4:7d:b8:6d:38:4b:6e:9e:4d:
51:31:84:c1:dd:c3:2a:43:90:49:19:51:db:ac:3b:
cf:0b:87:48:96:bf:e0:34:fd:db:6f:bf:c4:4b:3f:
af:81:74:c3:a9:4c:eb:a3:45:f8:cf:84:24:b7:0c:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:73:8E:CA:89:38:C7:BB:7A:7C:13:F8:B6:9C:60:4D:10:C6:93:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfb18b63-867f-35be-b71b-658713804f50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:b3:d5:5b:51:cf:6c:5c:9b:35:d0:a5:af:fb:68:0b:11:4e:
e6:de:ba:53:4e:bd:88:2b:e9:54:72:cb:8e:46:55:33:a6:01:
7b:47:bb:5d:8f:8a:eb:b1:ef:75:df:cd:60:42:53:ae:72:90:
23:69:8b:ca:d3:01:c0:66:44:97:90:e9:8a:01:f7:52:da:f2:
30:c5:6e:23:30:4f:65:91:eb:06:5b:ec:4f:76:bd:57:f6:41:
57:d9:1f:4a:25:ab:df:cf:c9:6d:01:64:e7:9f:f9:3a:c7:a2:
4c:22:23:ba:d3:4e:a0:7b:36:80:bf:b4:f2:96:d8:fd:d5:48:
36:70:e7:f4:d8:1e:db:c7:19:3f:c7:db:2a:6f:dd:08:51:1e:
53:64:18:9c:ea:30:ff:a0:0f:37:ca:a2:09:e9:b7:6a:67:6b:
b5:6d:c3:2f:8a:ab:28:7d:f8:47:04:2e:54:59:a7:6a:ca:ef:
be:09:27:84:c3:5b:69:31:3e:01:c3:29:60:07:34:c8:57:78:
04:7a:54:04:04:84:6c:53:a0:88:39:64:04:4a:ff:04:7f:4f:
3e:9f:65:40:27:1f:1e:3e:d0:f4:5e:a8:f7:b9:d7:b1:9c:94:
73:a5:6c:9c:4a:a2:f7:9e:34:97:d9:a3:c9:a7:c3:6f:2b:6f:
d5:4e:84:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO2nFUKtsxyX/bQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ODRhOTUxN2ItNWRkZi00MTY4LWFlN2UtMTAxMTBiZDg5ODA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUHv04F9H28FD2K7HBoawNSRRGsrC9dD3gVQ
ShEpPx6LCRzHp8c7cL+5so0pOuKZZrG7VyNkzYyQgt7DJ/vYBKZciH1Iyh0Wxcbt
2Kx/Gvru6qN+nRfWE2YmgPhPKRFerTx16pJhgwQHLaenAir6lBg76vsFjEIE0VMk
Hkp7wGbl73+WyOPl3cUuRl/2z45v8RxWucTYXHOkYkSBcc8RnxuEOiHPD+W5Ez22
H7JCdrx+KzDlaILiGOYA8Xx1295GUepIjEb2Fz2kfbhtOEtunk1RMYTB3cMqQ5BJ
GVHbrDvPC4dIlr/gNP3bb7/ESz+vgXTDqUzro0X4z4Qktwy2dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVzjsqJOMe7enwT+LacYE0QxpNtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZiMThiNjMtODY3Zi0z
NWJlLWI3MWItNjU4NzEzODA0ZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRD1MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHOz1VtRz2xcmzXQpa/7aAsRTubeulNOvYgr6VRyy45GVTOmAXtHu12P
iuux73XfzWBCU65ykCNpi8rTAcBmRJeQ6YoB91La8jDFbiMwT2WR6wZb7E92vVf2
QVfZH0olq9/PyW0BZOef+TrHokwiI7rTTqB7NoC/tPKW2P3VSDZw5/TYHtvHGT/H
2ypv3QhRHlNkGJzqMP+gDzfKognpt2pna7Vtwy+Kqyh9+EcELlRZp2rK774JJ4TD
W2kxPgHDKWAHNMhXeAR6VAQEhGxToIg5ZARK/wR/Tz6fZUAnHx4+0PReqPe517Gc
lHOlbJxKoveeNJfZo8mnw28rb9VOhAM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:45 2025 by rpki-client