Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df89c50c-62c6-3b77-9fec-19798455694b.roa
File: df89c50c-62c6-3b77-9fec-19798455694b.roa (raw, json)
Hash identifier: j2SNAHpWxt6Perd6SucGXdAJ9IMCFup3ocOpiPI9+nU=
Subject key identifier: 08:1D:07:D4:3B:93:EB:B2:FB:AB:BE:83:17:5F:68:E7:EA:CC:BA:DF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8E3EACD381086588E7180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df89c50c-62c6-3b77-9fec-19798455694b.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.42.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:e3:ea:cd:38:10:86:58:8e:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=678f4cb8-d2d2-4d51-901d-3e6c9c2a071d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:d2:81:54:5d:ae:34:4a:4f:2e:49:6f:9d:
6c:5d:4a:06:66:83:7d:1d:7f:87:1a:ad:23:83:65:
c7:2a:59:03:e8:f1:e7:75:bf:98:dd:8a:d8:06:a1:
d8:16:4b:d0:47:aa:35:98:a8:c5:0b:57:61:8b:a7:
3c:d4:8c:91:b5:b4:ee:23:d9:0a:d0:bc:67:f7:cb:
25:6c:7c:43:f6:73:ed:90:30:c2:db:87:cd:72:d3:
bb:11:0b:64:ec:af:1e:e5:13:23:8a:41:16:a0:ac:
46:86:ed:cf:f1:74:74:85:47:ce:80:e8:f1:45:7a:
9c:21:e8:d5:ce:08:2f:a9:e3:33:7b:7c:11:d0:5d:
1a:b6:51:a3:c6:0e:51:cd:73:50:47:1b:2e:26:9f:
f8:97:5d:49:fb:e8:ff:12:16:10:7e:59:8e:83:48:
6e:9f:90:f7:d5:da:c0:56:65:6e:ad:41:94:2f:80:
6f:57:3d:68:26:1e:db:bc:97:03:09:cc:ed:55:c9:
9f:6c:72:a1:9b:2c:b4:d9:4b:c0:b9:ab:27:a9:92:
66:1e:f2:45:07:5a:f5:d9:ed:0e:c0:26:8f:73:2f:
a4:db:f0:eb:ae:fc:4a:40:75:fc:c5:57:0e:1c:e5:
99:31:05:8b:95:2e:6f:64:be:21:39:fa:ac:a2:f3:
9f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1D:07:D4:3B:93:EB:B2:FB:AB:BE:83:17:5F:68:E7:EA:CC:BA:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df89c50c-62c6-3b77-9fec-19798455694b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:7f:f5:7d:26:3a:69:0f:77:cb:cc:59:66:a8:23:70:9e:0a:
51:ff:dc:91:52:2c:dc:17:db:54:47:9a:7d:65:b5:44:99:e0:
8c:ab:28:d5:3d:c2:8e:84:ed:68:f6:aa:3f:66:7b:dc:73:71:
9c:60:5a:92:d1:65:4a:59:bc:d4:a2:fd:73:f0:48:cd:6e:9e:
2f:8e:0f:b0:a0:93:b1:ae:cf:9c:54:e4:75:2c:d4:8b:87:cb:
05:7f:66:f1:ad:1e:2b:2f:44:33:63:ed:4f:c7:e4:bb:13:e7:
53:5a:b4:ae:6e:46:00:83:2a:e2:c7:be:0f:29:94:d9:1c:59:
02:80:05:85:c8:5f:a0:0c:25:67:d1:46:78:64:ba:84:fa:13:
42:b4:76:75:14:87:dc:52:b5:75:74:e8:87:d2:0b:ea:44:86:
4e:12:29:ae:d1:8d:83:35:06:0e:a7:f3:ad:df:c5:d9:cd:a8:
dc:41:53:e4:6a:b3:01:2c:9b:12:a2:32:4c:50:34:70:a7:cf:
c1:4b:63:c7:a9:08:a0:a5:0a:2a:dc:36:94:20:db:6f:0d:80:
df:ca:13:21:06:85:49:52:29:16:d4:31:23:7b:9e:80:0d:6c:
ce:49:6f:76:5c:2c:35:70:62:60:2b:cf:45:57:c5:b8:3a:b9:
6f:29:e3:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+OPqzTgQhliOcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
Njc4ZjRjYjgtZDJkMi00ZDUxLTkwMWQtM2U2YzljMmEwNzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/PSgVRdrjRKTy5Jb51sXUoGZoN9HX+HGq0j
g2XHKlkD6PHndb+Y3YrYBqHYFkvQR6o1mKjFC1dhi6c81IyRtbTuI9kK0Lxn98sl
bHxD9nPtkDDC24fNctO7EQtk7K8e5RMjikEWoKxGhu3P8XR0hUfOgOjxRXqcIejV
zggvqeMze3wR0F0atlGjxg5RzXNQRxsuJp/4l11J++j/EhYQflmOg0hun5D31drA
VmVurUGUL4BvVz1oJh7bvJcDCcztVcmfbHKhmyy02UvAuasnqZJmHvJFB1r12e0O
wCaPcy+k2/DrrvxKQHX8xVcOHOWZMQWLlS5vZL4hOfqsovOfrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgdB9Q7k+uy+6u+gxdfaOfqzLrfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY4OWM1MGMtNjJjNi0z
Yjc3LTlmZWMtMTk3OTg0NTU2OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCpmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABB/9X0mOmkPd8vMWWaoI3CeClH/3JFSLNwX21RHmn1ltUSZ4IyrKNU9
wo6E7Wj2qj9me9xzcZxgWpLRZUpZvNSi/XPwSM1uni+OD7Cgk7Guz5xU5HUs1IuH
ywV/ZvGtHisvRDNj7U/H5LsT51NatK5uRgCDKuLHvg8plNkcWQKABYXIX6AMJWfR
RnhkuoT6E0K0dnUUh9xStXV06IfSC+pEhk4SKa7RjYM1Bg6n863fxdnNqNxBU+Rq
swEsmxKiMkxQNHCnz8FLY8epCKClCircNpQg228NgN/KEyEGhUlSKRbUMSN7noAN
bM5Jb3ZcLDVwYmArz0VXxbg6uW8p49w=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:22:52 2025 by rpki-client