Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85778d9b-6adc-304f-9de7-d3a292ee562f.roa
File: 85778d9b-6adc-304f-9de7-d3a292ee562f.roa (raw, json)
Hash identifier: iST3M1kp5XhlESi/e9wx/myF66S31e9XsI/o1bJRBYY=
Subject key identifier: E4:B0:82:6A:B9:73:E6:69:28:31:78:3C:24:F6:94:DC:19:08:D2:03
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B7E9E95B4D0A36C9E7000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85778d9b-6adc-304f-9de7-d3a292ee562f.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.52.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:7e:9e:95:b4:d0:a3:6c:9e:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=c5fc7a5c-03f5-4437-9831-b6726cc77c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:85:e2:df:fc:58:22:92:22:3d:8e:54:e0:
fb:41:27:70:fe:ed:c0:08:00:ba:47:c4:be:d8:81:
95:ab:69:01:e5:ba:bb:2a:6d:69:1e:3c:9a:69:8a:
fd:8d:54:61:7c:3a:1c:55:d0:38:9e:c6:ad:8f:29:
b8:25:7b:e2:1f:03:db:1c:eb:a6:99:69:94:f6:57:
c7:90:65:df:b5:8d:62:f6:45:6b:90:db:fd:35:17:
a7:67:78:09:db:6f:ea:98:16:ab:d4:67:ec:d1:59:
e9:c7:0d:61:c8:51:04:13:74:13:fb:50:50:86:a7:
5b:7d:82:59:a3:b3:0d:75:30:19:c8:83:ff:79:c6:
f8:8b:87:3a:a8:21:ae:f3:a2:d4:65:33:31:8c:8f:
ce:04:1a:1c:65:c8:6c:a5:8a:f1:0d:32:d0:74:f7:
60:96:e7:d2:87:b0:fc:5b:88:ae:84:cf:ec:d9:63:
80:3c:9e:b3:66:5f:77:ee:1c:88:60:3e:f4:f1:34:
33:ae:db:72:0d:11:ac:a5:36:9f:8a:67:3b:46:24:
6f:17:21:8e:9a:08:91:32:0f:e3:02:30:5b:5a:c8:
7c:02:15:ba:97:3b:fa:b3:16:8b:46:ce:75:9e:32:
83:6e:d8:16:24:95:0c:08:d3:40:59:a4:18:fe:5c:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B0:82:6A:B9:73:E6:69:28:31:78:3C:24:F6:94:DC:19:08:D2:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85778d9b-6adc-304f-9de7-d3a292ee562f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.52.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:0d:b8:74:bb:e9:e7:b0:a0:7c:39:53:00:ca:f9:d1:fb:27:
fa:1e:53:5d:82:38:82:eb:5f:05:64:56:fa:c5:77:8f:f3:0b:
07:ff:47:68:4f:80:de:21:c6:c2:a7:23:10:85:2c:3c:9b:28:
a9:1c:38:57:12:90:44:3f:ce:1f:47:69:3f:09:66:48:6f:64:
24:4d:d4:a0:c6:88:a6:2b:69:c4:e1:4d:df:ff:ff:d4:57:7a:
8a:60:d0:93:66:14:4c:0a:36:00:b6:9c:61:d8:80:cc:db:76:
50:9d:03:39:ff:88:1a:17:03:77:93:37:2b:67:0e:ad:9e:f0:
6a:ea:40:e2:92:a4:be:08:86:d3:92:a0:b8:19:51:0b:b2:d6:
a6:5f:c0:d2:39:42:e3:ff:53:2e:58:7e:b5:0c:e1:85:ac:6a:
53:57:db:30:bb:63:96:3d:92:db:e7:99:50:3b:4b:54:8f:4c:
fb:3f:22:ff:8c:05:3f:83:4a:8a:16:93:91:6c:36:54:a1:6f:
d2:30:35:dc:85:2f:70:7e:63:39:1b:62:0c:ad:eb:51:c6:47:
1b:fd:5e:ab:57:2c:55:84:fe:f3:61:a9:2a:c1:d8:cb:48:ec:
3e:4c:1e:92:d8:7d:7c:1a:30:16:6e:08:d7:df:29:70:a1:c1:
48:93:30:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea36elbTQo2yecAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
YzVmYzdhNWMtMDNmNS00NDM3LTk4MzEtYjY3MjZjYzc3YzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uSF4t/8WCKSIj2OVOD7QSdw/u3ACAC6R8S+
2IGVq2kB5bq7Km1pHjyaaYr9jVRhfDocVdA4nsatjym4JXviHwPbHOummWmU9lfH
kGXftY1i9kVrkNv9NRenZ3gJ22/qmBar1Gfs0Vnpxw1hyFEEE3QT+1BQhqdbfYJZ
o7MNdTAZyIP/ecb4i4c6qCGu86LUZTMxjI/OBBocZchspYrxDTLQdPdglufSh7D8
W4iuhM/s2WOAPJ6zZl937hyIYD708TQzrttyDRGspTafimc7RiRvFyGOmgiRMg/j
AjBbWsh8AhW6lzv6sxaLRs51njKDbtgWJJUMCNNAWaQY/lzf0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSwgmq5c+ZpKDF4PCT2lNwZCNIDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU3NzhkOWItNmFkYy0z
MDRmLTlkZTctZDNhMjkyZWU1NjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDTYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMANuHS76eewoHw5UwDK+dH7J/oeU12COILrXwVkVvrFd4/zCwf/R2hP
gN4hxsKnIxCFLDybKKkcOFcSkEQ/zh9HaT8JZkhvZCRN1KDGiKYracThTd///9RX
eopg0JNmFEwKNgC2nGHYgMzbdlCdAzn/iBoXA3eTNytnDq2e8GrqQOKSpL4IhtOS
oLgZUQuy1qZfwNI5QuP/Uy5YfrUM4YWsalNX2zC7Y5Y9ktvnmVA7S1SPTPs/Iv+M
BT+DSooWk5FsNlShb9IwNdyFL3B+YzkbYgyt61HGRxv9XqtXLFWE/vNhqSrB2MtI
7D5MHpLYfXwaMBZuCNffKXChwUiTMGc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:06:18 2025 by rpki-client