Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa
File: f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa (raw, json)
Hash identifier: hspT7l2yLHkV7EvnaweTVCmCMOhJA5gHXa7myVjjBpw=
Subject key identifier: 68:68:03:34:BC:9F:B2:10:06:AA:91:15:87:78:F5:B0:B7:9C:CA:67
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584917DC00701746BFDEE4A9A880
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 7018
IP address blocks: 67.216.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:00:70:17:46:bf:de:e4:a9:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=2f18cae1-98ef-42be-8c14-46afb3304cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:15:f3:88:7e:2d:3a:d9:ba:04:bd:58:a4:
39:c0:a5:8a:fa:f5:28:f1:b3:fc:4a:c4:5f:26:9d:
ca:69:d5:20:ca:84:1d:b3:f7:c9:33:7c:32:32:87:
bf:cc:9d:8b:d1:87:36:f3:be:41:4b:7f:83:24:ba:
a9:f7:fb:27:df:6e:01:8e:0d:0d:74:59:6d:f3:45:
1d:76:56:e6:0a:b4:fa:e4:61:33:63:83:09:7c:83:
ef:b3:30:22:87:c8:e1:45:36:57:78:04:ce:b2:0d:
bb:7b:fd:92:10:d5:fa:dd:a1:c5:1f:be:8a:f2:aa:
88:2c:d2:17:b5:52:07:8a:fe:c9:f7:f8:74:5d:16:
73:6e:dc:30:7e:b1:df:da:9e:c4:d3:5c:cb:23:b6:
07:b9:39:7e:0e:56:60:1d:27:ba:66:b0:7e:2c:ae:
33:3b:e1:ac:b1:61:27:43:0a:44:e4:9a:b6:d3:dc:
8b:c2:b9:db:3d:bf:5d:d8:65:f1:00:bd:22:33:1b:
77:31:f5:17:c2:8d:25:1f:99:52:19:a8:95:44:ae:
c0:30:64:9e:3b:2c:64:cf:02:dd:e6:6a:71:56:c2:
aa:11:68:32:98:78:82:94:63:0f:9b:d4:c6:32:34:
1f:a8:7a:80:3c:a2:52:0d:55:b5:99:83:a9:b6:0b:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:68:03:34:BC:9F:B2:10:06:AA:91:15:87:78:F5:B0:B7:9C:CA:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
67.216.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
df:81:4d:a4:6d:af:ab:68:b0:87:8f:09:f9:c9:fe:d4:16:58:
ce:1a:a3:bf:b2:84:bc:c8:39:66:02:80:0f:fe:01:07:be:87:
21:df:00:74:4f:ca:3d:c6:d0:b1:40:d9:35:89:7a:f7:d3:cb:
0e:70:c3:30:9c:1b:1c:9b:85:34:fe:39:82:5f:2d:c6:f7:27:
19:f7:a7:a4:ba:50:ec:d9:e4:40:1d:00:8d:c9:18:ba:b1:81:
e4:36:68:d3:d7:38:a0:ac:fd:da:14:ab:e8:47:d2:93:d5:f5:
7a:f7:1c:a1:fb:84:9e:17:da:06:cd:36:03:d4:d3:36:ce:31:
a2:f3:8e:2c:c7:83:af:fa:bc:fc:52:b1:8a:81:14:a2:9e:b0:
77:d8:a3:74:ec:57:fc:24:5a:b9:1a:eb:c1:6e:13:bc:d1:0d:
3e:21:4a:69:e6:89:72:ff:e1:75:2d:af:1c:a5:15:02:b5:a0:
be:a8:14:bd:e7:f6:c7:f3:23:54:74:7e:ac:88:93:03:01:3d:
34:95:0b:e8:11:82:86:23:7c:ae:7b:11:a5:05:63:3d:ba:19:
f7:9e:bf:18:7e:a0:06:dd:c8:73:5e:74:15:da:c7:f0:04:2b:
8b:13:df:e1:1c:8b:3b:d5:54:65:50:d4:65:6b:0f:55:39:ab:
4e:62:c2:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3ABwF0a/3uSpqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MmYxOGNhZTEtOThlZi00MmJlLThjMTQtNDZhZmIzMzA0Y2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsAV84h+LTrZugS9WKQ5wKWK+vUo8bP8SsRf
Jp3KadUgyoQds/fJM3wyMoe/zJ2L0Yc2875BS3+DJLqp9/sn324Bjg0NdFlt80Ud
dlbmCrT65GEzY4MJfIPvszAih8jhRTZXeATOsg27e/2SENX63aHFH76K8qqILNIX
tVIHiv7J9/h0XRZzbtwwfrHf2p7E01zLI7YHuTl+DlZgHSe6ZrB+LK4zO+GssWEn
QwpE5Jq209yLwrnbPb9d2GXxAL0iMxt3MfUXwo0lH5lSGaiVRK7AMGSeOyxkzwLd
5mpxVsKqEWgymHiClGMPm9TGMjQfqHqAPKJSDVW1mYOptgvnfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhoAzS8n7IQBqqRFYd49bC3nMpnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZjhlNzljYjgtZTU2ZC0z
M2EyLTlhMDAtZDQ4NDM1OTQ1ZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9jsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN+BTaRtr6tosIePCfnJ/tQWWM4ao7+yhLzIOWYCgA/+AQe+hyHfAHRP
yj3G0LFA2TWJevfTyw5wwzCcGxybhTT+OYJfLcb3Jxn3p6S6UOzZ5EAdAI3JGLqx
geQ2aNPXOKCs/doUq+hH0pPV9Xr3HKH7hJ4X2gbNNgPU0zbOMaLzjizHg6/6vPxS
sYqBFKKesHfYo3TsV/wkWrka68FuE7zRDT4hSmnmiXL/4XUtrxylFQK1oL6oFL3n
9sfzI1R0fqyIkwMBPTSVC+gRgoYjfK57EaUFYz26Gfeevxh+oAbdyHNedBXax/AE
K4sT3+EcizvVVGVQ1GVrD1U5q05iwvQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:19:21 2025 by rpki-client