Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a75b0557-8523-3047-a148-c41f01132a6a.roa
File: a75b0557-8523-3047-a148-c41f01132a6a.roa (raw, json)
Hash identifier: vZ1pS310cCbnMn16/4FjyS93sbLDL0SSKhpdrJ1fbh0=
Subject key identifier: BD:10:29:A7:73:99:0C:6A:43:B5:78:39:49:0D:40:12:E6:FD:DA:89
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEFFEECDB68FE469649FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a75b0557-8523-3047-a148-c41f01132a6a.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 68.84.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:ff:ee:cd:b6:8f:e4:69:64:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=1b404aa3-d3fc-4cec-8d62-b551d12d5a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:4d:43:dc:08:ca:12:6c:17:be:da:84:f8:
bb:0c:8d:94:54:f7:c4:6d:66:0d:e1:7b:63:fb:ce:
93:d1:3a:b2:d5:64:eb:30:b0:00:1c:65:bf:5a:5d:
e6:b5:41:d3:d7:aa:52:fb:6c:81:7b:6f:5b:11:49:
d8:60:39:47:7a:1c:2b:c5:c9:c7:8d:61:28:6f:b6:
7f:e0:ec:1e:7c:df:e2:f6:87:57:e0:df:b8:f8:2a:
8c:fb:1b:04:96:00:91:9c:27:64:f3:65:62:65:46:
3f:e7:96:e9:01:5c:db:41:8b:77:fc:1a:58:1c:d8:
97:1b:80:2a:63:1c:6f:b6:a7:e3:a9:63:82:33:06:
71:f9:93:c5:85:89:0e:5d:6b:2a:ba:48:ff:96:38:
df:94:21:95:0e:76:71:94:ce:c7:fc:86:f1:f2:e8:
63:ff:f0:66:68:1b:0c:6c:19:54:c1:a6:1a:8f:18:
a5:e7:5e:e0:26:fe:ed:23:b4:a0:71:0b:b4:8d:90:
d4:ac:1e:9e:ae:a7:b0:d6:77:9e:63:f3:f9:0e:b1:
c7:a3:e3:63:12:27:ea:b4:61:99:26:b8:6b:3e:5d:
6a:e3:84:77:a3:80:a8:58:18:3b:70:da:f6:ea:a4:
00:cb:d9:e9:53:38:1c:40:61:f1:d1:3b:c3:45:9b:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:10:29:A7:73:99:0C:6A:43:B5:78:39:49:0D:40:12:E6:FD:DA:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a75b0557-8523-3047-a148-c41f01132a6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.84.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:f9:33:e0:06:e6:51:d4:19:7e:67:72:20:17:cf:7e:80:3e:
6d:d0:f1:36:6b:0d:39:30:5e:e8:4a:19:fc:27:69:fa:bc:f4:
45:84:85:40:29:22:d6:0d:c2:ba:65:cb:e9:1e:67:03:47:bf:
df:14:80:42:d9:4e:98:92:e6:ba:2a:88:53:81:16:48:ef:88:
cc:32:88:b2:17:ea:4c:b4:c3:92:4f:fb:3f:61:df:da:d0:0d:
c1:65:0d:a8:00:b9:c4:11:bb:48:ab:88:00:9f:93:c0:83:2c:
e1:25:a6:45:e0:d0:b1:c4:82:3b:9b:e5:fa:76:7c:b6:6c:e8:
2b:8f:58:36:10:d2:2e:c2:f5:1e:5a:48:ff:e3:d8:32:da:b6:
39:1c:b1:cc:d1:c2:f9:6d:46:40:46:1b:ac:0f:49:ca:ad:99:
e6:41:2d:b7:66:74:71:98:72:e1:37:e6:45:f6:2f:73:71:18:
20:c9:ca:c4:97:10:71:62:f7:21:56:2c:1f:4b:4c:92:2b:79:
6f:31:c2:41:b1:3f:31:88:5d:6f:68:19:76:6c:87:15:a7:45:
b1:ba:97:f4:2f:b3:55:4b:92:1c:ef:c6:17:1d:97:67:f9:5e:
f9:7d:b3:a5:8b:15:b2:37:e3:e6:ce:2a:20:a0:d4:c0:4e:ca:
14:d5:94:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrv/uzbaP5Glkn8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MWI0MDRhYTMtZDNmYy00Y2VjLThkNjItYjU1MWQxMmQ1YTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6RNQ9wIyhJsF77ahPi7DI2UVPfEbWYN4Xtj
+86T0Tqy1WTrMLAAHGW/Wl3mtUHT16pS+2yBe29bEUnYYDlHehwrxcnHjWEob7Z/
4OwefN/i9odX4N+4+CqM+xsElgCRnCdk82ViZUY/55bpAVzbQYt3/BpYHNiXG4Aq
YxxvtqfjqWOCMwZx+ZPFhYkOXWsqukj/ljjflCGVDnZxlM7H/Ibx8uhj//BmaBsM
bBlUwaYajxil517gJv7tI7SgcQu0jZDUrB6erqew1neeY/P5DrHHo+NjEifqtGGZ
JrhrPl1q44R3o4CoWBg7cNr26qQAy9npUzgcQGHx0TvDRZscTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0QKadzmQxqQ7V4OUkNQBLm/dqJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTc1YjA1NTctODUyMy0z
MDQ3LWExNDgtYzQxZjAxMTMyYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFR7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEX5M+AG5lHUGX5nciAXz36APm3Q8TZrDTkwXuhKGfwnafq89EWEhUAp
ItYNwrply+keZwNHv98UgELZTpiS5roqiFOBFkjviMwyiLIX6ky0w5JP+z9h39rQ
DcFlDagAucQRu0iriACfk8CDLOElpkXg0LHEgjub5fp2fLZs6CuPWDYQ0i7C9R5a
SP/j2DLatjkcsczRwvltRkBGG6wPScqtmeZBLbdmdHGYcuE35kX2L3NxGCDJysSX
EHFi9yFWLB9LTJIreW8xwkGxPzGIXW9oGXZshxWnRbG6l/Qvs1VLkhzvxhcdl2f5
Xvl9s6WLFbI34+bOKiCg1MBOyhTVlNs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:27 2025 by rpki-client