Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa
File: 8f83a025-4c20-3f17-8d78-fe614226ddcb.roa (raw, json)
Hash identifier: oeZFVpl0u/F7pFrTHoIJeaJ/CFs2c0p+KWSnnOONo4M=
Subject key identifier: 45:39:3B:13:61:80:47:7D:21:1D:21:E3:71:D9:A2:75:69:3F:C0:56
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858486C2B170FDAD91358BEE38440
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 394285
IP address blocks: 68.68.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:17:0f:da:d9:13:58:be:e3:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=a760b082-2229-49da-ba42-15c769a43b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:75:38:3f:2b:c8:8a:56:f6:f0:3a:93:9d:
6e:f8:00:90:4d:fe:01:dd:f3:e7:77:72:d6:c3:c3:
95:8a:a1:9e:9d:5a:f4:06:63:b4:88:4f:1f:c9:53:
08:d2:d2:eb:5f:21:b1:e2:de:5b:51:05:ee:af:13:
7d:35:e7:2b:52:3a:0c:46:66:9f:aa:07:d4:53:e1:
e6:6b:cf:50:c9:72:bc:4c:db:5d:ce:5a:4c:89:47:
03:e3:86:0b:f8:de:cd:01:19:bc:76:05:01:ae:3f:
86:41:28:e4:55:00:4d:0f:c7:5f:92:85:f0:4c:89:
07:30:64:48:95:6c:15:f5:d6:61:13:9e:ac:d1:a3:
44:4d:6b:9d:3e:6a:1f:24:47:d8:03:38:20:67:e1:
88:ea:7a:2c:14:f4:88:75:cf:0b:11:08:8a:0a:65:
99:21:c1:16:10:8c:43:99:61:72:c4:eb:c6:ec:30:
44:90:b2:75:d5:96:fb:29:a8:1d:e0:ab:9b:4f:d0:
b9:e8:c3:95:f1:8a:c7:a0:2d:83:50:a2:6f:97:14:
c0:28:8c:b2:a5:b5:f7:5b:c0:45:bf:80:25:36:0a:
52:8c:29:cd:b2:da:0e:96:7d:12:82:a3:92:b0:b0:
4f:3b:17:d9:d6:33:78:41:7c:05:e3:8e:f8:04:61:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:39:3B:13:61:80:47:7D:21:1D:21:E3:71:D9:A2:75:69:3F:C0:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:29:21:87:92:64:fa:d4:54:1c:e5:63:3d:10:98:55:8f:2e:
a4:43:72:38:bb:e0:13:44:c2:92:28:bc:e4:f8:df:dc:eb:0c:
dc:f1:b5:92:7a:2f:d9:30:ae:2c:d6:cf:bf:c2:fe:0e:14:00:
61:cb:2e:25:b2:bd:31:71:b3:2e:2a:0a:65:1e:8c:10:f5:15:
b6:af:9b:3f:05:5c:94:11:79:10:7d:3a:1f:46:8e:a5:92:b0:
71:c8:17:b0:f3:b0:01:df:4c:6e:34:a3:ae:68:53:bd:2d:b8:
55:d1:44:81:d6:1f:52:96:36:53:34:ec:a4:32:3a:de:02:a5:
f5:17:81:1d:04:32:13:40:60:95:a4:85:69:ff:67:75:ea:e5:
2a:c2:8c:fd:0a:fe:63:c3:82:cd:7b:eb:a0:1f:a1:10:d5:13:
db:f2:9b:2a:92:15:ba:c7:38:79:0b:f0:5a:da:34:3c:63:b8:
71:21:7d:c2:d7:6a:c2:a4:92:4d:b4:2b:3b:03:c3:f4:eb:d7:
3f:7b:8e:b8:0e:2e:66:bd:67:90:cf:7e:8f:90:3e:67:8e:6c:
84:cc:fa:fe:be:c0:2c:db:ce:f7:cc:22:77:d4:96:61:0c:79:
01:7a:d3:e7:e7:e1:48:d3:04:24:96:23:93:82:43:e6:43:57:
09:42:48:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKxcP2tkTWL7jhEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
YTc2MGIwODItMjIyOS00OWRhLWJhNDItMTVjNzY5YTQzYjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P91OD8ryIpW9vA6k51u+ACQTf4B3fPnd3LW
w8OViqGenVr0BmO0iE8fyVMI0tLrXyGx4t5bUQXurxN9NecrUjoMRmafqgfUU+Hm
a89QyXK8TNtdzlpMiUcD44YL+N7NARm8dgUBrj+GQSjkVQBND8dfkoXwTIkHMGRI
lWwV9dZhE56s0aNETWudPmofJEfYAzggZ+GI6nosFPSIdc8LEQiKCmWZIcEWEIxD
mWFyxOvG7DBEkLJ11Zb7Kagd4KubT9C56MOV8YrHoC2DUKJvlxTAKIyypbX3W8BF
v4AlNgpSjCnNstoOln0SgqOSsLBPOxfZ1jN4QXwF4474BGG8rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEU5OxNhgEd9IR0h43HZonVpP8BWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvOGY4M2EwMjUtNGMyMC0z
ZjE3LThkNzgtZmU2MTQyMjZkZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRESQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJwpIYeSZPrUVBzlYz0QmFWPLqRDcji74BNEwpIovOT439zrDNzxtZJ6
L9kwrizWz7/C/g4UAGHLLiWyvTFxsy4qCmUejBD1Fbavmz8FXJQReRB9Oh9GjqWS
sHHIF7DzsAHfTG40o65oU70tuFXRRIHWH1KWNlM07KQyOt4CpfUXgR0EMhNAYJWk
hWn/Z3Xq5SrCjP0K/mPDgs1766AfoRDVE9vymyqSFbrHOHkL8FraNDxjuHEhfcLX
asKkkk20KzsDw/Tr1z97jrgOLma9Z5DPfo+QPmeObITM+v6+wCzbzvfMInfUlmEM
eQF60+fn4UjTBCSWI5OCQ+ZDVwlCSNs=
-----END CERTIFICATE-----
Generated at Mon May 12 16:10:10 2025 by rpki-client