Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/15df6323-166d-36ee-90e1-6f182912f6ef.roa
File: 15df6323-166d-36ee-90e1-6f182912f6ef.roa (raw, json)
Hash identifier: YMYcQ5BOmG6Fp43QloBCH6vPQ0h1xzQ7qYy451eYCdQ=
Subject key identifier: C0:F0:52:12:11:6C:0C:9E:49:CA:41:78:22:18:AE:16:C1:CC:BC:19
Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial: 010D0C9F432858483E1AA4115854EF8A7CC7D280
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/15df6323-166d-36ee-90e1-6f182912f6ef.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 19107
IP address blocks: 68.235.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:a4:11:58:54:ef:8a:7c:c7:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=a3d4a9af-6fde-4909-badb-a40c84332ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:d9:80:6a:29:75:01:dc:b9:2c:fa:be:91:
42:15:23:67:9a:f8:52:6b:0c:72:55:48:1e:af:37:
60:0c:76:69:79:04:97:07:8a:05:62:b3:dd:0e:f1:
60:f8:d1:2e:37:3e:18:91:59:a2:3f:ac:4b:73:f2:
c8:d1:b4:7b:d5:84:0d:5b:53:ce:1d:fc:e0:5b:5f:
59:ce:b6:21:65:f3:34:3c:a0:0f:b2:72:cb:77:f0:
13:9e:76:34:ff:f6:34:b6:af:81:49:a8:15:f2:18:
68:3c:e1:32:19:b2:ee:96:84:64:22:14:19:cf:5d:
c7:01:45:07:9a:61:dd:b4:67:e3:ce:ac:f2:8d:e8:
93:78:eb:e3:b1:83:d5:7a:dc:b2:76:53:3d:a8:fe:
01:46:d5:90:16:9d:c8:bd:1f:8d:29:a2:85:8f:ac:
9b:8b:eb:22:59:9a:5a:24:c0:a1:4b:ce:87:34:2d:
4b:a8:87:a0:82:2f:e8:7e:8f:a3:08:5f:c5:cc:15:
65:c4:f0:c7:e9:6d:6e:25:86:eb:79:23:7e:70:98:
47:52:b4:b5:77:85:7a:1b:87:57:8d:79:ec:59:39:
11:4a:30:98:db:2d:44:db:fc:88:60:ab:07:20:59:
d7:90:11:56:6b:8b:2f:73:3a:20:b3:dc:9d:a0:24:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F0:52:12:11:6C:0C:9E:49:CA:41:78:22:18:AE:16:C1:CC:BC:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/15df6323-166d-36ee-90e1-6f182912f6ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
X509v3 Authority Key Identifier:
keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
sbgp-ipAddrBlock: critical
IPv4:
68.235.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:05:15:aa:45:82:4a:c8:42:84:93:e1:fd:14:b8:d9:b7:de:
02:27:fb:22:95:a4:e7:36:9e:56:57:88:86:c1:38:20:f5:43:
8e:1f:79:03:e5:4e:f0:a9:1b:f5:b2:bc:5f:62:b1:a0:f3:0b:
3d:f3:31:91:3b:cf:12:da:6f:3f:64:35:7d:88:41:72:66:7a:
34:82:5f:1c:0c:18:85:65:15:bf:57:4a:48:8c:41:d9:88:66:
cb:d5:28:25:73:5e:4c:70:0f:6a:40:ba:24:2e:9f:25:11:98:
80:49:09:cb:70:65:6b:a1:8f:a3:f9:c5:a8:56:1f:69:5a:88:
08:21:75:bb:8c:20:b7:19:65:92:61:13:f7:54:89:25:05:b9:
cf:a7:35:eb:03:44:d3:d2:9d:d2:a5:6d:ec:66:31:c2:4e:51:
4f:83:e3:8b:b0:98:2a:75:e0:b5:3f:51:6e:f9:64:6b:a3:1e:
7a:6b:53:94:50:29:b8:e6:ad:b1:8d:12:c9:bc:31:ba:76:55:
5e:8b:2a:10:7e:d2:4c:a9:18:ed:a3:fd:7a:b6:ab:57:48:fd:
b7:b4:c0:56:a4:06:12:c1:bd:e3:fc:54:8a:db:fb:e7:ff:0b:
fb:f4:3e:0e:88:d6:df:cd:85:05:aa:64:d4:ea:f2:db:40:30:
39:1a:54:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqQRWFTvinzH0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
YTNkNGE5YWYtNmZkZS00OTA5LWJhZGItYTQwYzg0MzMyYWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoULZgGopdQHcuSz6vpFCFSNnmvhSawxyVUge
rzdgDHZpeQSXB4oFYrPdDvFg+NEuNz4YkVmiP6xLc/LI0bR71YQNW1POHfzgW19Z
zrYhZfM0PKAPsnLLd/ATnnY0//Y0tq+BSagV8hhoPOEyGbLuloRkIhQZz13HAUUH
mmHdtGfjzqzyjeiTeOvjsYPVetyydlM9qP4BRtWQFp3IvR+NKaKFj6ybi+siWZpa
JMChS86HNC1LqIeggi/ofo+jCF/FzBVlxPDH6W1uJYbreSN+cJhHUrS1d4V6G4dX
jXnsWTkRSjCY2y1E2/yIYKsHIFnXkBFWa4svczogs9ydoCSEjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMDwUhIRbAyeScpBeCIYrhbBzLwZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMTVkZjYzMjMtMTY2ZC0z
NmVlLTkwZTEtNmYxODI5MTJmNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkFFapFgkrIQoST4f0UuNm33gIn+yKVpOc2nlZXiIbBOCD1Q44feQPl
TvCpG/WyvF9isaDzCz3zMZE7zxLabz9kNX2IQXJmejSCXxwMGIVlFb9XSkiMQdmI
ZsvVKCVzXkxwD2pAuiQunyURmIBJCctwZWuhj6P5xahWH2laiAghdbuMILcZZZJh
E/dUiSUFuc+nNesDRNPSndKlbexmMcJOUU+D44uwmCp14LU/UW75ZGujHnprU5RQ
KbjmrbGNEsm8Mbp2VV6LKhB+0kypGO2j/Xq2q1dI/be0wFakBhLBveP8VIrb++f/
C/v0Pg6I1t/NhQWqZNTq8ttAMDkaVKw=
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:42:38 2025 by rpki-client