Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7671ca7-ce56-3416-a5b2-f581cee5445d.roa
File: f7671ca7-ce56-3416-a5b2-f581cee5445d.roa (raw, json)
Hash identifier: nbiXdEyt8wDPNXQ5tuq3TlVtloONCQWicicDlCwS6b4=
Subject key identifier: 62:15:F8:21:3D:53:FC:20:EE:6D:D7:32:A9:83:D8:F7:F2:CA:59:64
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B69DB84BAE43C23110830
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7671ca7-ce56-3416-a5b2-f581cee5445d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.61.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:69:db:84:ba:e4:3c:23:11:08:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8cbf29b3-df94-40cb-af34-e0472d93dd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:37:23:e1:1b:0a:e7:ea:0e:25:d2:1c:82:
17:b2:3d:94:d1:b8:54:97:18:31:d2:1b:28:d1:41:
c3:ef:5f:19:26:79:ec:04:c9:ac:fd:ec:71:de:44:
f5:c5:a2:1d:34:81:dd:67:dd:ce:ea:20:23:6c:7c:
1c:72:f9:b0:08:80:1c:59:fc:d7:7a:68:3e:74:e7:
55:a2:7e:80:34:d2:72:91:81:b3:f5:bc:bb:93:f5:
a7:94:89:d8:57:ce:6f:e4:ff:13:d7:61:cc:84:a1:
0a:48:1c:49:88:f4:bb:4e:b5:20:bc:d4:89:7e:89:
8b:ee:0d:6f:28:8b:06:ce:e3:0e:9c:e4:62:13:6a:
82:06:92:ef:69:98:37:e0:50:96:d9:88:3b:6d:45:
79:13:db:78:63:a4:a6:88:a5:fe:b0:1d:7e:99:bc:
27:66:0f:ec:5c:1f:88:d5:dc:52:ee:bf:79:54:c6:
6e:3f:cf:51:d5:cd:69:1e:54:de:22:42:c8:1f:17:
bf:e9:5d:1b:6d:ce:3b:e1:bc:eb:15:98:ac:70:cb:
3e:99:25:f0:81:c5:94:e1:9e:04:b2:0f:57:b7:fa:
67:dd:47:64:d4:ab:98:5b:83:fa:1b:25:ae:56:75:
bd:31:17:49:8e:84:f3:a8:57:1c:c4:a2:96:de:fd:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:15:F8:21:3D:53:FC:20:EE:6D:D7:32:A9:83:D8:F7:F2:CA:59:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7671ca7-ce56-3416-a5b2-f581cee5445d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:4b:44:87:79:e4:c2:a7:f1:84:d6:83:58:40:68:eb:9b:97:
56:8a:66:cb:af:33:30:ac:41:95:29:ce:a1:f2:03:de:2e:81:
3d:5d:a9:5f:62:05:62:3a:79:a9:fa:92:8f:3a:f5:c5:40:97:
1a:7d:b7:31:04:78:1c:e8:82:7b:7d:c4:dd:63:e4:d4:73:61:
12:24:39:d6:11:d3:2f:63:aa:f0:d8:38:56:27:3b:09:f2:ee:
04:91:e4:78:27:1c:37:1d:f6:12:42:a9:9a:b8:1b:83:ac:9f:
b3:b0:b1:e3:ea:90:8d:5b:34:9f:a9:a3:c5:d0:94:a0:66:76:
2b:96:b5:0d:af:24:4d:fe:60:21:cb:4c:11:a2:59:9c:6e:a3:
a5:a4:52:ca:b3:fa:c2:10:8e:7f:65:b8:66:d2:5c:4a:2a:58:
51:4f:44:b6:48:da:a4:96:33:cd:19:1f:7f:3c:99:f8:79:0d:
a0:92:80:4f:f3:b5:98:2e:44:16:5f:dc:7a:f1:9e:52:6c:96:
2a:60:a2:fb:6e:a6:55:7b:41:31:0e:d2:33:26:94:48:2e:6d:
63:b5:01:96:39:15:05:cb:3c:53:31:bb:49:7b:31:38:1d:cc:
e7:39:3f:ea:e5:53:28:4d:7d:3c:22:a5:28:3d:fc:45:e5:ad:
b9:7e:77:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO2nbhLrkPCMRCDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
OGNiZjI5YjMtZGY5NC00MGNiLWFmMzQtZTA0NzJkOTNkZDExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncY3I+EbCufqDiXSHIIXsj2U0bhUlxgx0hso
0UHD718ZJnnsBMms/exx3kT1xaIdNIHdZ93O6iAjbHwccvmwCIAcWfzXemg+dOdV
on6ANNJykYGz9by7k/WnlInYV85v5P8T12HMhKEKSBxJiPS7TrUgvNSJfomL7g1v
KIsGzuMOnORiE2qCBpLvaZg34FCW2Yg7bUV5E9t4Y6SmiKX+sB1+mbwnZg/sXB+I
1dxS7r95VMZuP89R1c1pHlTeIkLIHxe/6V0bbc474bzrFZiscMs+mSXwgcWU4Z4E
sg9Xt/pn3Udk1KuYW4P6GyWuVnW9MRdJjoTzqFccxKKW3v1I8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIV+CE9U/wg7m3XMqmD2PfyyllkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjc2NzFjYTctY2U1Ni0z
NDE2LWE1YjItZjU4MWNlZTU0NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRD1QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVLRId55MKn8YTWg1hAaOubl1aKZsuvMzCsQZUpzqHyA94ugT1dqV9i
BWI6ean6ko869cVAlxp9tzEEeBzognt9xN1j5NRzYRIkOdYR0y9jqvDYOFYnOwny
7gSR5HgnHDcd9hJCqZq4G4Osn7OwsePqkI1bNJ+po8XQlKBmdiuWtQ2vJE3+YCHL
TBGiWZxuo6WkUsqz+sIQjn9luGbSXEoqWFFPRLZI2qSWM80ZH388mfh5DaCSgE/z
tZguRBZf3HrxnlJslipgovtuplV7QTEO0jMmlEgubWO1AZY5FQXLPFMxu0l7MTgd
zOc5P+rlUyhNfTwipSg9/EXlrbl+d4k=
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:52:43 2025 by rpki-client