Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb5c92e-b934-3564-b2da-b32bd8d5055e.roa
File: cfb5c92e-b934-3564-b2da-b32bd8d5055e.roa (raw, json)
Hash identifier: VQ9feqkKBu8Grz/1gK4WeXHnLFp1q8gtyCAjaN1AsKw=
Subject key identifier: CC:5D:E6:20:0D:C6:D9:85:8D:F0:18:D9:A2:8A:3D:22:6B:EF:EE:F8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F78B0525D29F26A9CB3060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb5c92e-b934-3564-b2da-b32bd8d5055e.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.41.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:8b:05:25:d2:9f:26:a9:cb:30:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=4edab5c5-204d-42ba-ab54-a56ab8d17992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:72:6b:05:71:5b:ed:5c:7e:09:ed:ee:01:
f5:62:c2:c5:67:6c:ab:31:a9:42:d5:89:c6:da:1e:
e3:65:93:69:d2:ba:2e:9a:ba:da:cf:2d:da:c0:97:
8a:4f:33:2f:5f:2c:7e:a5:16:52:7a:b8:5a:81:21:
ae:e5:d6:e9:90:e1:b6:e8:16:9d:1b:e8:ba:36:b3:
bd:8f:8b:66:5f:53:d5:71:02:2e:f5:fd:4f:d5:d6:
cc:6d:bb:ed:32:e5:5d:8b:44:fa:9d:21:04:91:f6:
9c:b6:eb:9a:1f:a2:b6:b9:5d:a9:ec:91:27:f7:0c:
ee:bb:7f:e3:94:1c:54:e1:e5:26:dd:b0:ae:d8:0d:
22:f5:3c:68:0a:83:0a:9d:1f:2f:5e:4d:be:3d:1e:
e1:12:12:9f:66:84:c6:0b:ce:5f:a3:22:e4:cd:12:
a0:61:36:40:b7:1f:89:ee:a5:0f:63:de:2f:42:08:
b5:37:f9:80:ca:6c:2a:9c:64:9d:ba:50:b7:68:b0:
d5:40:47:2e:8b:5e:c1:ec:5f:66:15:da:f5:49:41:
de:29:ac:71:78:1e:92:7d:31:be:34:38:08:c2:44:
f2:27:3b:86:74:ba:33:58:f0:68:46:f0:69:45:0a:
c0:0e:07:8b:be:76:03:c9:27:3a:14:bd:47:9b:6b:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5D:E6:20:0D:C6:D9:85:8D:F0:18:D9:A2:8A:3D:22:6B:EF:EE:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb5c92e-b934-3564-b2da-b32bd8d5055e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.41.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:57:26:a2:70:26:91:eb:d4:8a:2b:de:54:ff:eb:a8:46:a9:
88:60:54:97:40:18:74:89:94:a4:42:7f:17:57:2a:50:f5:f9:
7a:e3:d7:63:62:4b:a2:2c:5c:22:4e:3e:22:e1:f7:f4:ba:12:
a9:59:d4:02:74:ff:53:c8:f6:cf:f0:a6:9e:1a:fd:7f:76:ba:
18:a1:ed:7a:a9:10:f5:8f:ae:63:b1:d6:cc:90:0b:74:b0:d4:
28:b2:e5:49:55:76:22:87:f8:c7:23:bd:81:0c:9b:8a:07:a9:
e3:c0:bc:54:d8:6d:9b:0a:b4:4f:14:86:91:1c:6f:48:47:9a:
3d:24:59:bb:c2:9f:53:c4:0f:a2:7c:6a:e3:c8:04:e5:d2:4f:
9f:df:18:ea:1b:b2:e6:f2:77:5a:95:3f:aa:f2:ff:ea:44:8a:
76:04:8b:5b:0a:ee:09:dc:d5:d9:d2:c9:8d:73:5e:37:ff:76:
64:4a:9b:c2:88:04:f4:3d:4d:d4:7b:ad:89:bd:f1:4e:06:a5:
83:d0:0a:be:64:bb:89:53:fc:e1:b0:6d:b9:52:3a:ab:c7:29:
fd:9c:1d:e1:e7:bf:3d:a8:fd:af:1a:42:a8:a1:7c:4b:20:05:
8e:44:4a:e6:8c:39:45:47:1f:b6:57:21:cd:56:db:57:f4:12:
da:69:56:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094sFJdKfJqnLMGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NGVkYWI1YzUtMjA0ZC00MmJhLWFiNTQtYTU2YWI4ZDE3OTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwlyawVxW+1cfgnt7gH1YsLFZ2yrMalC1YnG
2h7jZZNp0roumrrazy3awJeKTzMvXyx+pRZSerhagSGu5dbpkOG26BadG+i6NrO9
j4tmX1PVcQIu9f1P1dbMbbvtMuVdi0T6nSEEkfactuuaH6K2uV2p7JEn9wzuu3/j
lBxU4eUm3bCu2A0i9TxoCoMKnR8vXk2+PR7hEhKfZoTGC85foyLkzRKgYTZAtx+J
7qUPY94vQgi1N/mAymwqnGSdulC3aLDVQEcui17B7F9mFdr1SUHeKaxxeB6SfTG+
NDgIwkTyJzuGdLozWPBoRvBpRQrADgeLvnYDySc6FL1Hm2vxhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxd5iANxtmFjfAY2aKKPSJr7+74MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZiNWM5MmUtYjkzNC0z
NTY0LWIyZGEtYjMyYmQ4ZDUwNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCnYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZXJqJwJpHr1Ior3lT/66hGqYhgVJdAGHSJlKRCfxdXKlD1+Xrj12Ni
S6IsXCJOPiLh9/S6EqlZ1AJ0/1PI9s/wpp4a/X92uhih7XqpEPWPrmOx1syQC3Sw
1Ciy5UlVdiKH+McjvYEMm4oHqePAvFTYbZsKtE8UhpEcb0hHmj0kWbvCn1PED6J8
auPIBOXST5/fGOobsubyd1qVP6ry/+pEinYEi1sK7gnc1dnSyY1zXjf/dmRKm8KI
BPQ9TdR7rYm98U4GpYPQCr5ku4lT/OGwbblSOqvHKf2cHeHnvz2o/a8aQqihfEsg
BY5ESuaMOUVHH7ZXIc1W21f0EtppVpE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:24:58 2025 by rpki-client