Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f98a1db4-40a7-3600-9225-54d646616fad.roa
File: f98a1db4-40a7-3600-9225-54d646616fad.roa (raw, json)
Hash identifier: bSxNok251ymEqbVSsYG44V8bfZBXwyB2b7K5IlVS530=
Subject key identifier: 15:93:9B:0F:5F:86:BE:F3:56:A0:87:B9:6B:79:DF:F3:44:6B:9E:80
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5A474A1E4AEF342B6580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f98a1db4-40a7-3600-9225-54d646616fad.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.43.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:5a:47:4a:1e:4a:ef:34:2b:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=dd5404a5-c51e-46c5-8005-93bcee8791d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:7a:89:56:79:41:e3:c9:7d:73:d9:d7:af:
90:3e:7f:79:9d:c1:02:7b:f4:9f:c1:6f:90:6e:03:
bd:51:d2:06:7e:c3:d5:98:c1:33:77:7b:9c:fd:f3:
86:a0:5c:8f:ff:af:fc:11:30:fc:2d:1d:27:3d:70:
ad:9e:de:ab:7b:ed:e5:e3:35:e3:1c:dc:1f:f1:31:
4f:9f:66:cd:32:d5:48:53:20:07:b7:68:c6:29:00:
92:c1:ac:87:5d:5a:13:f8:fb:4b:69:3f:9f:de:49:
89:d5:2c:47:77:c4:ff:6c:35:c0:b9:6e:8c:9e:8c:
d5:15:ab:f2:18:87:7d:2c:7c:18:fd:89:f9:5c:6c:
f9:0c:bc:96:80:2c:4b:65:ec:0d:32:88:fa:13:ea:
74:cf:f6:41:dc:e1:1b:df:48:d2:25:5a:11:f8:7e:
d0:b8:ce:41:5d:44:b5:ac:07:03:d0:33:c8:db:ea:
ee:80:4a:1f:66:3b:b1:50:fd:e7:a6:64:de:7a:92:
f1:fa:81:c2:71:38:3e:3d:6b:7d:e0:6a:6f:db:c4:
98:94:75:25:5f:a5:73:14:1a:c2:15:14:0a:99:3c:
e0:0c:fd:22:52:b6:e9:96:3b:1c:c8:d5:b7:9f:1e:
d0:40:98:6d:43:0c:6b:6c:6f:42:4d:d9:f0:80:0b:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:9B:0F:5F:86:BE:F3:56:A0:87:B9:6B:79:DF:F3:44:6B:9E:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f98a1db4-40a7-3600-9225-54d646616fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:d0:30:e5:55:73:51:a4:59:a3:ec:fa:f2:1a:74:98:fb:45:
01:f4:dd:01:c1:52:0e:43:fb:59:2f:d2:22:b2:57:d4:f1:87:
b4:9f:97:fd:68:af:d6:73:e7:31:fe:fe:9a:56:f9:79:c4:f4:
0c:57:5b:e0:ff:fb:a8:72:45:5c:d4:87:a5:3f:ea:e7:63:63:
e3:92:8c:23:40:e2:eb:a7:5d:57:73:52:fa:4c:84:e8:b6:4b:
69:8e:30:20:70:ae:d8:ac:4f:eb:da:df:60:5b:c7:3d:a2:af:
86:f5:05:41:36:10:14:29:9d:27:2c:7e:0f:a9:c9:12:06:4d:
bc:2d:86:62:09:2c:09:3d:00:b5:9f:ed:96:f5:f8:67:68:7f:
96:29:4c:5a:08:37:29:28:b1:56:94:ac:5f:57:50:15:d6:e4:
f2:c2:f8:d7:dc:a5:3f:1f:29:a8:9a:6f:e3:db:6a:6f:24:c4:
2a:a8:d1:11:ed:73:b2:37:05:00:08:b5:1c:2f:18:46:43:4d:
1b:88:87:5c:be:ba:49:9c:b4:a9:5c:1c:1e:b9:13:c2:d6:80:
87:cb:5a:a7:27:60:4d:46:d7:aa:56:2c:3a:e9:54:7e:18:2f:
42:ec:e5:68:40:99:54:19:00:c1:b2:7b:61:bf:68:c6:8e:82:
24:6d:4e:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUO1pHSh5K7zQrZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZGQ1NDA0YTUtYzUxZS00NmM1LTgwMDUtOTNiY2VlODc5MWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovd6iVZ5QePJfXPZ16+QPn95ncECe/SfwW+Q
bgO9UdIGfsPVmMEzd3uc/fOGoFyP/6/8ETD8LR0nPXCtnt6re+3l4zXjHNwf8TFP
n2bNMtVIUyAHt2jGKQCSwayHXVoT+PtLaT+f3kmJ1SxHd8T/bDXAuW6MnozVFavy
GId9LHwY/Yn5XGz5DLyWgCxLZewNMoj6E+p0z/ZB3OEb30jSJVoR+H7QuM5BXUS1
rAcD0DPI2+rugEofZjuxUP3npmTeepLx+oHCcTg+PWt94Gpv28SYlHUlX6VzFBrC
FRQKmTzgDP0iUrbpljscyNW3nx7QQJhtQwxrbG9CTdnwgAtZCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWTmw9fhr7zVqCHuWt53/NEa56AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjk4YTFkYjQtNDBhNy0z
NjAwLTkyMjUtNTRkNjQ2NjE2ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCv0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEbQMOVVc1GkWaPs+vIadJj7RQH03QHBUg5D+1kv0iKyV9Txh7Sfl/1o
r9Zz5zH+/ppW+XnE9AxXW+D/+6hyRVzUh6U/6udjY+OSjCNA4uunXVdzUvpMhOi2
S2mOMCBwrtisT+va32Bbxz2ir4b1BUE2EBQpnScsfg+pyRIGTbwthmIJLAk9ALWf
7Zb1+Gdof5YpTFoINykosVaUrF9XUBXW5PLC+NfcpT8fKaiab+Pbam8kxCqo0RHt
c7I3BQAItRwvGEZDTRuIh1y+ukmctKlcHB65E8LWgIfLWqcnYE1G16pWLDrpVH4Y
L0Ls5WhAmVQZAMGye2G/aMaOgiRtTuw=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:46 2025 by rpki-client