Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa
File: 3af553af-3e25-340a-8320-484a9fc606f9.roa (raw, json)
Hash identifier: uDYAHZTCXQBcmMhOEQUc0rCd1IdqaFVZazKSlUjyWYA=
Subject key identifier: 92:BF:A7:2C:F9:30:5A:FD:29:A7:6D:59:D7:86:39:A3:FB:F1:BE:4A
Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial: 010D0C9F432858492E13BB0F1B0F273E08886140
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 37277
IP address blocks: 68.142.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:bb:0f:1b:0f:27:3e:08:88:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=9a99dbfc-c50c-46f1-8b4b-e923c57f56c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:63:d6:98:e3:28:ce:c7:ed:23:31:97:ef:
fa:da:5c:d6:a3:a4:8d:a6:7f:64:c5:af:48:e7:f7:
eb:09:11:c9:b0:65:2c:a5:97:5c:8a:7c:b5:ea:a2:
af:c3:dc:d5:41:c1:66:11:3d:15:44:ee:98:c2:6f:
36:96:e9:fb:c4:d4:36:7a:0a:2b:cd:c1:75:45:9e:
03:f2:ef:de:51:37:7c:97:a7:13:23:68:b1:6d:bd:
2d:f8:74:89:eb:6b:bc:56:61:8d:67:f3:11:59:18:
c3:47:bb:c8:7a:af:bd:9e:df:e9:e0:dd:85:e6:78:
d3:c2:5b:82:d8:d0:d0:dc:1d:fe:98:7f:58:6b:34:
bb:d4:c3:48:84:13:f7:f7:d9:1e:94:09:4f:4b:29:
d6:8b:1f:40:e3:88:74:b1:80:c3:c0:d4:45:4f:cd:
78:8f:6a:69:13:15:d0:5a:cb:1b:b7:f9:4a:9e:14:
8e:21:36:c5:b5:8e:e4:c9:ac:15:f5:33:63:bf:0d:
87:04:1e:bb:4e:85:3a:50:1f:ae:b1:ba:16:f7:13:
e4:97:30:97:fc:f3:f9:f3:1c:f9:2a:a1:9c:f5:a3:
0a:c5:63:6f:c1:6f:c4:d9:4d:76:fc:fd:0e:8e:bd:
36:f2:b9:0d:29:61:3b:73:3c:bb:d6:a8:a1:47:49:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BF:A7:2C:F9:30:5A:FD:29:A7:6D:59:D7:86:39:A3:FB:F1:BE:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
X509v3 Authority Key Identifier:
keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
sbgp-ipAddrBlock: critical
IPv4:
68.142.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:73:6f:b5:91:9b:0c:45:f7:ad:b2:75:bc:c7:a7:27:70:20:
5f:81:e6:77:0a:51:1e:eb:5d:ce:70:94:3e:bf:82:4c:35:20:
46:56:4d:a8:ba:26:57:7d:91:72:82:fd:10:bd:24:85:d7:71:
7c:d4:04:36:49:ff:14:5c:86:42:c8:94:df:0b:f6:c1:db:42:
e8:60:21:fc:19:97:39:54:b6:b0:f1:fe:f3:0c:4f:63:14:23:
7f:04:c7:1f:e4:6c:03:bd:3b:0e:7e:df:cf:fa:36:7f:c1:59:
0c:52:a2:d7:9d:41:65:b2:61:f7:d7:38:13:88:34:8e:d0:b0:
45:34:c9:73:13:1b:d4:82:d2:d6:be:3a:f1:2f:cf:05:1c:d9:
7e:0d:69:13:ff:8f:74:4d:7a:0f:aa:ed:42:aa:04:8c:7e:2a:
dc:c3:2c:5b:0c:5e:7e:c6:c0:e0:9e:f0:db:d1:c3:72:b4:de:
1f:b8:c1:53:3f:b8:fe:bd:96:f5:5b:a6:85:40:37:5d:32:b9:
42:66:0e:85:0c:ab:97:b8:0a:e9:58:d6:47:6d:73:49:f1:02:
98:69:4b:51:9e:c8:5d:cf:15:b9:c6:cb:2a:de:b2:ba:3c:ef:
8a:4b:f0:77:d3:9c:18:8e:31:b2:6a:c0:10:2c:64:b2:94:aa:
0d:d3:c1:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7sPGw8nPgiIYUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
OWE5OWRiZmMtYzUwYy00NmYxLThiNGItZTkyM2M1N2Y1NmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyktj1pjjKM7H7SMxl+/62lzWo6SNpn9kxa9I
5/frCRHJsGUspZdciny16qKvw9zVQcFmET0VRO6Ywm82lun7xNQ2egorzcF1RZ4D
8u/eUTd8l6cTI2ixbb0t+HSJ62u8VmGNZ/MRWRjDR7vIeq+9nt/p4N2F5njTwluC
2NDQ3B3+mH9YazS71MNIhBP399kelAlPSynWix9A44h0sYDDwNRFT814j2ppExXQ
Wssbt/lKnhSOITbFtY7kyawV9TNjvw2HBB67ToU6UB+usboW9xPklzCX/PP58xz5
KqGc9aMKxWNvwW/E2U12/P0Ojr028rkNKWE7czy71qihR0m1DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJK/pyz5MFr9KadtWdeGOaP78b5KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvM2FmNTUzYWYtM2UyNS0z
NDBhLTgzMjAtNDg0YTlmYzYwNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRI5EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdzb7WRmwxF962ydbzHpydwIF+B5ncKUR7rXc5wlD6/gkw1IEZWTai6
Jld9kXKC/RC9JIXXcXzUBDZJ/xRchkLIlN8L9sHbQuhgIfwZlzlUtrDx/vMMT2MU
I38Exx/kbAO9Ow5+38/6Nn/BWQxSotedQWWyYffXOBOINI7QsEU0yXMTG9SC0ta+
OvEvzwUc2X4NaRP/j3RNeg+q7UKqBIx+KtzDLFsMXn7GwOCe8NvRw3K03h+4wVM/
uP69lvVbpoVAN10yuUJmDoUMq5e4CulY1kdtc0nxAphpS1GeyF3PFbnGyyresro8
74pL8HfTnBiOMbJqwBAsZLKUqg3Twfo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:53:00 2025 by rpki-client