Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/665b9de5-b5bd-31d2-89be-ff6034afa149.roa
File: 665b9de5-b5bd-31d2-89be-ff6034afa149.roa (raw, json)
Hash identifier: VFH62yjgJKzblOcqRlUP6iTX4/GzZvvODHtYd7Q5g2Q=
Subject key identifier: 3B:5F:35:C2:74:88:3D:BF:B6:9C:68:49:02:ED:37:52:C0:92:D4:AD
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858493C093849BA91E5313CFF8400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/665b9de5-b5bd-31d2-89be-ff6034afa149.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 22773
IP address blocks: 68.107.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:38:49:ba:91:e5:31:3c:ff:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=a7a29b0b-0acb-4916-9701-f25b33867165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:59:28:cf:38:a4:67:c6:14:a0:5b:e8:8c:
17:a2:fa:7d:e4:e3:b9:f5:fc:8c:a1:03:c9:9d:04:
17:4a:9e:28:3a:50:f2:c0:52:b4:60:83:5a:db:ee:
56:7d:98:15:94:c7:59:cc:c8:a0:64:6f:dc:e0:58:
fb:5f:cd:ee:e3:17:07:6f:5a:06:c5:32:7f:b4:eb:
41:72:38:a5:1c:d0:a2:bb:e6:8c:5c:8f:af:75:76:
b9:f9:94:6b:c5:9b:74:8d:86:f9:18:a9:35:83:e5:
ee:ad:06:95:da:ca:d3:b1:6c:92:4d:ae:56:c9:01:
31:89:fa:c5:41:60:ff:5e:40:88:98:57:b2:60:94:
d5:49:c9:a5:10:f0:3c:b2:05:49:60:79:93:86:41:
30:00:64:90:5b:53:94:f1:a7:67:3c:76:53:cd:8a:
29:23:cd:71:48:07:5d:bb:ab:5e:78:25:d9:9d:68:
f2:ad:9e:c0:fe:fc:f0:55:f3:79:91:da:24:c9:f0:
a9:f6:0b:ae:84:93:4b:a3:89:ae:6e:29:bc:3f:f5:
e8:60:a4:71:71:cf:87:56:2c:14:36:b0:9b:67:06:
3e:05:ba:0f:61:3e:3c:12:43:6a:0a:9b:5d:88:75:
c0:70:df:98:49:5b:14:d6:72:f0:09:09:81:5e:8a:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:35:C2:74:88:3D:BF:B6:9C:68:49:02:ED:37:52:C0:92:D4:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/665b9de5-b5bd-31d2-89be-ff6034afa149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.107.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:52:d2:8f:1f:b9:1a:e9:50:09:e5:bd:3b:89:f3:79:71:a2:
89:b4:dc:e2:62:09:18:59:ff:f5:63:ed:6c:a9:69:93:ee:ca:
6a:75:ee:5d:51:8a:64:b5:da:1d:d6:e3:6b:da:36:bb:76:ca:
85:f4:a4:6f:e4:32:da:84:fa:9c:5d:7d:4e:aa:8e:50:f5:6a:
0b:f2:3a:17:f8:86:11:a6:80:13:22:69:98:27:a6:11:34:df:
9e:2f:e1:88:ff:94:da:86:9a:b1:9d:b8:cc:8e:4c:4a:7a:57:
aa:b9:73:65:c4:df:e7:48:95:ae:ba:0e:bd:f2:ff:fa:80:55:
a1:e6:43:6f:80:f6:bc:ff:51:7c:ac:7e:86:83:20:bd:b3:60:
8f:85:7c:b2:01:71:14:72:fa:1f:c1:6b:81:c9:4a:5e:0f:cd:
d6:c9:23:0a:0e:b6:d8:e9:11:87:ed:f4:99:9f:3d:75:63:59:
9a:13:bd:94:bc:c4:a7:f9:8d:2b:32:84:2f:cd:2c:6f:91:e0:
bf:24:4c:80:46:f8:a7:82:e4:42:de:d6:ff:bb:c9:e7:ed:56:
2a:36:3d:3a:0f:8a:fb:40:44:67:d8:8b:ed:46:bc:b0:ff:e0:
69:b7:12:0a:9d:28:38:b6:52:e1:4c:3a:4e:82:f0:84:c9:d1:
d8:94:f5:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CThJupHlMTz/hAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
YTdhMjliMGItMGFjYi00OTE2LTk3MDEtZjI1YjMzODY3MTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSlZKM84pGfGFKBb6IwXovp95OO59fyMoQPJ
nQQXSp4oOlDywFK0YINa2+5WfZgVlMdZzMigZG/c4Fj7X83u4xcHb1oGxTJ/tOtB
cjilHNCiu+aMXI+vdXa5+ZRrxZt0jYb5GKk1g+XurQaV2srTsWySTa5WyQExifrF
QWD/XkCImFeyYJTVScmlEPA8sgVJYHmThkEwAGSQW1OU8adnPHZTzYopI81xSAdd
u6teeCXZnWjyrZ7A/vzwVfN5kdokyfCp9guuhJNLo4mubim8P/XoYKRxcc+HViwU
NrCbZwY+BboPYT48EkNqCptdiHXAcN+YSVsU1nLwCQmBXorEIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtfNcJ0iD2/tpxoSQLtN1LAktStMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjY1YjlkZTUtYjViZC0z
MWQyLTg5YmUtZmY2MDM0YWZhMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGvvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZS0o8fuRrpUAnlvTuJ83lxoom03OJiCRhZ//Vj7WypaZPuymp17l1R
imS12h3W42vaNrt2yoX0pG/kMtqE+pxdfU6qjlD1agvyOhf4hhGmgBMiaZgnphE0
354v4Yj/lNqGmrGduMyOTEp6V6q5c2XE3+dIla66Dr3y//qAVaHmQ2+A9rz/UXys
foaDIL2zYI+FfLIBcRRy+h/Ba4HJSl4PzdbJIwoOttjpEYft9JmfPXVjWZoTvZS8
xKf5jSsyhC/NLG+R4L8kTIBG+KeC5ELe1v+7yeftVio2PToPivtARGfYi+1GvLD/
4Gm3EgqdKDi2UuFMOk6C8ITJ0diU9TE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:57:30 2025 by rpki-client