Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/212bc09b-3aa4-3bfd-9f6d-803d5de230de.roa
File: 212bc09b-3aa4-3bfd-9f6d-803d5de230de.roa (raw, json)
Hash identifier: sU+gq53lqYsJbeI7ur84t2Ay0/75M2Cxc6mEyTqM3PA=
Subject key identifier: E1:8B:A5:66:9C:F4:BA:95:71:76:11:64:D2:E1:13:18:52:FF:FB:3B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F77CD51C344EDD8DE35280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/212bc09b-3aa4-3bfd-9f6d-803d5de230de.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.32.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:7c:d5:1c:34:4e:dd:8d:e3:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=1d6aa169-c95f-4a8c-b67c-4b56d34ebf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:74:5e:1c:48:6d:28:51:12:ef:ea:cf:35:
37:13:62:c7:e0:ff:39:0e:65:a9:6e:6b:0e:60:bf:
f8:00:d0:92:34:ab:98:c7:db:4b:9e:88:31:c9:27:
43:6d:14:e7:1b:67:40:72:64:cf:1c:5d:e9:cb:b2:
69:0d:2c:0c:06:09:8c:73:a4:58:eb:b1:24:60:a1:
f6:01:ea:b3:15:c7:e7:5f:07:1f:43:ab:24:d1:06:
df:89:50:56:7d:fd:40:c9:b5:75:fb:f9:73:35:92:
1c:01:09:59:26:07:60:9a:50:88:40:2d:e0:cb:85:
57:56:da:d6:e8:fe:68:be:e3:b1:9a:ad:ec:95:30:
05:e6:a4:eb:d8:60:e9:ca:47:08:76:3d:aa:99:2a:
75:91:ff:6d:10:a6:a5:14:ef:b9:ea:73:bf:6c:30:
2c:f2:51:68:df:a8:19:04:44:13:f5:79:78:bf:19:
00:87:4f:99:d4:50:b9:db:d4:48:7c:cd:44:76:c1:
9a:58:56:bf:e7:68:7d:ec:8c:de:40:f9:81:5a:67:
11:83:f5:36:66:22:83:31:97:c0:a3:d6:6e:d1:10:
0f:b6:ec:b5:e9:e3:15:60:8c:ec:2f:bc:40:92:1e:
22:6a:c7:ac:5a:d8:82:6a:24:9b:7b:02:e2:fa:bd:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8B:A5:66:9C:F4:BA:95:71:76:11:64:D2:E1:13:18:52:FF:FB:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/212bc09b-3aa4-3bfd-9f6d-803d5de230de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:ec:9b:20:54:1a:3f:e8:4b:5d:c0:ae:3a:5f:25:7a:4f:42:
9d:b9:02:29:0a:dd:56:15:fd:6f:40:7d:aa:16:4f:8e:fb:32:
91:30:9e:a6:6e:b6:da:58:29:bd:c5:1f:4f:b8:be:51:ed:a3:
7b:ce:77:70:42:dd:04:d5:00:2a:0f:c7:e2:2e:39:08:b9:30:
3b:cf:0a:6f:a9:ff:75:ff:40:48:82:41:0f:ef:7d:9d:29:30:
40:b7:8d:a4:5e:6d:e9:bf:46:fc:ad:4b:ea:bc:7a:96:82:27:
9a:0a:b6:47:58:af:e8:d5:55:8c:c3:a8:fd:ba:18:d4:9c:9c:
7a:b4:f3:7b:0a:d3:d6:0d:5f:8f:f5:f6:83:d1:00:55:4a:0f:
94:54:c1:d5:8a:10:58:d5:6c:01:fe:e9:d4:d3:e5:05:10:18:
e9:9f:4c:a6:68:f6:75:cd:90:5e:ed:5f:35:ce:46:c2:f9:51:
a7:7c:30:35:e5:bc:8d:8b:2a:fa:53:9b:f8:da:c7:4c:8c:05:
78:92:f2:91:a5:7e:1f:f6:6a:25:e0:4c:b0:66:c0:cb:a3:93:
be:57:25:b7:77:9f:63:de:b5:8d:f9:29:40:44:30:7e:68:57:
83:8b:dd:0d:49:66:66:69:ed:00:b4:06:bb:bb:0c:7f:d2:7a:
90:06:fc:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj093zVHDRO3Y3jUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MWQ2YWExNjktYzk1Zi00YThjLWI2N2MtNGI1NmQzNGViZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcF0XhxIbShREu/qzzU3E2LH4P85DmWpbmsO
YL/4ANCSNKuYx9tLnogxySdDbRTnG2dAcmTPHF3py7JpDSwMBgmMc6RY67EkYKH2
AeqzFcfnXwcfQ6sk0QbfiVBWff1AybV1+/lzNZIcAQlZJgdgmlCIQC3gy4VXVtrW
6P5ovuOxmq3slTAF5qTr2GDpykcIdj2qmSp1kf9tEKalFO+56nO/bDAs8lFo36gZ
BEQT9Xl4vxkAh0+Z1FC529RIfM1EdsGaWFa/52h97IzeQPmBWmcRg/U2ZiKDMZfA
o9Zu0RAPtuy16eMVYIzsL7xAkh4iasesWtiCaiSbewLi+r1XlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGLpWac9LqVcXYRZNLhExhS//s7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjEyYmMwOWItM2FhNC0z
YmZkLTlmNmQtODAzZDVkZTIzMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCDPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjsmyBUGj/oS13ArjpfJXpPQp25AikK3VYV/W9AfaoWT477MpEwnqZu
ttpYKb3FH0+4vlHto3vOd3BC3QTVACoPx+IuOQi5MDvPCm+p/3X/QEiCQQ/vfZ0p
MEC3jaRebem/RvytS+q8epaCJ5oKtkdYr+jVVYzDqP26GNScnHq083sK09YNX4/1
9oPRAFVKD5RUwdWKEFjVbAH+6dTT5QUQGOmfTKZo9nXNkF7tXzXORsL5Uad8MDXl
vI2LKvpTm/jax0yMBXiS8pGlfh/2aiXgTLBmwMujk75XJbd3n2PetY35KUBEMH5o
V4OL3Q1JZmZp7QC0Bru7DH/SepAG/LA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:31:35 2025 by rpki-client