Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/663b08a1-e91e-3885-92a7-ce79ceb26477.roa
File: 663b08a1-e91e-3885-92a7-ce79ceb26477.roa (raw, json)
Hash identifier: kbASfjvPX8wRdk+XDvow79k3kQeXhxchPzSS3x8VXdc=
Subject key identifier: 2C:13:BD:42:A7:D7:23:56:8E:0C:18:58:29:83:05:D9:28:96:DF:72
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF470BAD61DD74EF224500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/663b08a1-e91e-3885-92a7-ce79ceb26477.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 68.44.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:47:0b:ad:61:dd:74:ef:22:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=42fb8de5-7311-4bec-9895-dbfcc41d77ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f1:96:c9:72:8a:87:7f:c4:7b:0f:0b:88:f0:
c4:63:11:4b:61:dd:53:79:c9:f1:2d:29:ca:90:ff:
21:a6:29:98:20:3b:eb:b7:29:e9:c1:b1:41:de:a8:
53:bc:61:02:d5:01:42:66:89:3e:63:23:64:c6:4d:
27:fa:2f:9d:af:c1:8e:02:a5:68:cb:bb:7c:ee:87:
77:1e:8d:2c:69:c9:71:79:cf:e7:99:9e:71:37:fc:
13:2b:e8:86:70:1c:5e:b4:fd:10:d5:41:5d:8d:3a:
4f:f5:f9:54:de:b1:cc:65:d3:d7:ce:1b:5c:fd:f7:
08:70:25:b7:69:8e:8c:87:c8:01:fa:8c:e8:5e:fb:
4a:4f:cc:04:c9:97:b4:71:c3:0c:9d:b8:21:46:c2:
9d:56:c5:8f:ab:75:37:4f:e6:2c:15:33:49:fa:e8:
ef:ae:db:e9:45:77:66:20:73:8a:a0:3b:fe:c4:4f:
72:51:f0:2a:e2:16:3a:43:2d:93:d9:6a:1e:00:58:
11:3a:c0:0c:b7:72:b0:67:65:4d:59:e7:45:5d:2e:
79:c6:c3:3b:8c:de:93:e0:72:91:1a:de:aa:75:e0:
5f:ef:40:42:7f:41:c2:c0:50:64:2c:59:0f:05:40:
a4:fc:7a:fd:9e:ec:13:d4:71:c8:22:c9:e3:dd:4c:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:BD:42:A7:D7:23:56:8E:0C:18:58:29:83:05:D9:28:96:DF:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/663b08a1-e91e-3885-92a7-ce79ceb26477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:84:f0:2a:7e:d5:0b:1b:d3:35:1a:c9:fe:9e:31:4e:16:a6:
9e:ea:f7:d3:60:ac:7a:c9:ba:9b:74:91:e8:bb:ad:b6:73:47:
0b:99:50:b5:88:f3:52:cd:d4:60:ba:86:46:e1:d6:84:47:81:
57:c5:99:8f:5e:e1:87:c0:84:fa:05:1c:1c:8f:a6:5f:e2:6d:
c3:3b:dc:55:7a:aa:e7:1d:37:55:4b:61:08:98:ba:1e:5b:b9:
b8:c1:62:9e:15:1b:20:8c:a6:a7:22:f2:a8:cc:16:85:a0:8f:
d3:ea:86:74:62:f9:e7:17:99:05:22:07:52:62:e3:8e:88:52:
10:9f:cc:f7:a3:bb:26:24:28:0d:78:9e:7c:48:1e:2c:66:5f:
29:3a:57:36:1b:d1:3d:ca:6f:76:91:82:14:41:e4:3c:f2:c0:
ca:0b:ae:68:57:0f:3c:39:8f:ea:82:39:d1:7e:66:f6:78:2d:
e0:d6:3e:e9:9f:d5:bd:79:d0:a2:39:9e:2f:7e:64:30:2d:b7:
1c:f5:f6:4a:38:2a:ae:74:6b:be:96:20:5e:5d:04:4f:92:ca:
67:95:82:e2:a7:77:74:a3:a8:56:e0:a4:56:88:21:8a:6f:52:
15:45:b9:70:fd:7e:7d:a6:f7:f9:44:a8:b7:15:1e:98:e4:c3:
e0:3d:c5:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr0cLrWHddO8iRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDJmYjhkZTUtNzMxMS00YmVjLTk4OTUtZGJmY2M0MWQ3N2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PGWyXKKh3/Eew8LiPDEYxFLYd1TecnxLSnK
kP8hpimYIDvrtynpwbFB3qhTvGEC1QFCZok+YyNkxk0n+i+dr8GOAqVoy7t87od3
Ho0saclxec/nmZ5xN/wTK+iGcBxetP0Q1UFdjTpP9flU3rHMZdPXzhtc/fcIcCW3
aY6Mh8gB+ozoXvtKT8wEyZe0ccMMnbghRsKdVsWPq3U3T+YsFTNJ+ujvrtvpRXdm
IHOKoDv+xE9yUfAq4hY6Qy2T2WoeAFgROsAMt3KwZ2VNWedFXS55xsM7jN6T4HKR
Gt6qdeBf70BCf0HCwFBkLFkPBUCk/Hr9nuwT1HHIIsnj3UxJewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwTvUKn1yNWjgwYWCmDBdkolt9yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjYzYjA4YTEtZTkxZS0z
ODg1LTkyYTctY2U3OWNlYjI2NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCy+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADiE8Cp+1Qsb0zUayf6eMU4Wpp7q99NgrHrJupt0kei7rbZzRwuZULWI
81LN1GC6hkbh1oRHgVfFmY9e4YfAhPoFHByPpl/ibcM73FV6qucdN1VLYQiYuh5b
ubjBYp4VGyCMpqci8qjMFoWgj9PqhnRi+ecXmQUiB1Ji446IUhCfzPejuyYkKA14
nnxIHixmXyk6VzYb0T3Kb3aRghRB5DzywMoLrmhXDzw5j+qCOdF+ZvZ4LeDWPumf
1b150KI5ni9+ZDAttxz19ko4Kq50a76WIF5dBE+SymeVguKnd3SjqFbgpFaIIYpv
UhVFuXD9fn2m9/lEqLcVHpjkw+A9xR8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:18:11 2025 by rpki-client