Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/20b441c7-8759-3fff-8d9a-456dc9b8a427.roa
File: 20b441c7-8759-3fff-8d9a-456dc9b8a427.roa (raw, json)
Hash identifier: ks6x/UUk2/hU9l29H98Qjpla0xyja3sWfIL9SDwZYi0=
Subject key identifier: 8F:4E:10:F2:CE:7E:C8:F1:D8:EC:2E:60:93:7C:E1:45:87:E1:00:AA
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F4328584902EC22CABF7A03EBEB8F4680
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/20b441c7-8759-3fff-8d9a-456dc9b8a427.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 14618
IP address blocks: 192.184.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:22:ca:bf:7a:03:eb:eb:8f:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=4f1cfed8-3663-493e-ab78-d713266c15d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:4a:29:65:cf:bc:ad:bd:77:e6:be:7c:83:
ee:9c:31:4d:84:36:e6:9c:54:58:44:21:e7:64:96:
65:7e:9b:a4:41:c3:68:af:ca:bf:e6:58:3b:0f:e2:
5f:87:2f:9a:1d:fd:8e:d2:e2:6f:df:34:0e:12:11:
cc:9c:c8:09:06:03:70:23:06:19:ee:04:bf:d6:0e:
f6:1b:52:d5:9a:5f:41:c5:eb:e5:62:90:e5:37:5f:
de:7e:81:59:3f:91:6d:9c:b0:d8:f1:c2:3c:71:9d:
59:3c:7e:cb:77:2d:42:0b:99:82:86:5d:01:92:26:
bf:07:30:40:46:0e:7b:1d:de:e9:6b:b9:b1:51:a1:
4b:bb:3f:cb:cd:73:6c:42:34:b8:74:ca:a2:ce:2f:
35:fc:a9:6c:c3:b3:20:bc:37:8a:75:f0:e7:bf:21:
ef:9b:38:1b:4e:9e:46:34:05:97:34:e1:9c:3d:af:
36:d7:7d:7e:49:a2:69:32:eb:53:99:6d:2b:a6:6c:
55:4e:df:b0:68:8f:84:53:31:8b:54:36:01:5a:35:
df:47:f2:32:f3:e4:64:17:ca:df:05:f0:62:60:7d:
19:5b:7e:5f:de:c9:0e:94:c8:0c:70:59:bf:15:39:
24:94:69:c8:a2:43:be:d8:6f:2d:83:8f:82:c0:34:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:10:F2:CE:7E:C8:F1:D8:EC:2E:60:93:7C:E1:45:87:E1:00:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/20b441c7-8759-3fff-8d9a-456dc9b8a427.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv4:
192.184.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:91:82:6a:ab:9f:78:e6:a5:d3:06:d8:c6:24:2f:c8:ac:4f:
b5:56:82:ec:30:62:2f:22:dc:3a:08:3f:91:25:57:f2:d9:83:
80:76:6e:96:e6:17:df:cb:bf:8f:8e:95:6f:e9:11:93:cd:97:
cf:79:b0:76:26:1f:4d:bc:ea:f8:89:6d:a8:fa:14:8b:b1:c6:
1f:0c:af:f1:1f:a4:b5:e6:cd:c7:97:d8:47:14:8d:6f:89:ea:
64:a0:2e:74:53:f4:c0:44:0b:e1:61:3c:de:4c:48:3c:4a:34:
7d:88:f0:35:d9:da:72:25:bf:10:47:0d:17:2a:ef:d3:9d:53:
6f:12:ee:77:09:9e:8e:9e:1e:a2:d7:25:37:f4:6c:f1:66:7b:
40:1d:67:cb:4d:45:be:fe:57:90:5c:b9:cc:2d:76:43:82:06:
83:00:0b:b9:99:be:5d:86:3e:5f:42:9c:f1:fe:7b:0d:c9:24:
de:9c:a2:f2:91:4a:ed:b3:07:00:da:a2:c1:0c:ea:e5:ec:e0:
b0:8f:1f:38:ae:d2:51:55:31:0e:f8:68:83:e2:a5:20:a3:18:
34:5b:05:a5:1f:8d:59:42:3a:d8:56:b0:d8:3e:2e:c4:9f:55:
dd:a8:55:aa:3b:26:e3:1e:c7:de:5c:28:1b:03:72:95:11:be:
8d:18:24:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CLKv3oD6+uPRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5
Mzc4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NGYxY2ZlZDgtMzY2My00OTNlLWFiNzgtZDcxMzI2NmMxNWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUtKKWXPvK29d+a+fIPunDFNhDbmnFRYRCHn
ZJZlfpukQcNor8q/5lg7D+Jfhy+aHf2O0uJv3zQOEhHMnMgJBgNwIwYZ7gS/1g72
G1LVml9BxevlYpDlN1/efoFZP5FtnLDY8cI8cZ1ZPH7Ldy1CC5mChl0Bkia/BzBA
Rg57Hd7pa7mxUaFLuz/LzXNsQjS4dMqizi81/Klsw7MgvDeKdfDnvyHvmzgbTp5G
NAWXNOGcPa82131+SaJpMutTmW0rpmxVTt+waI+EUzGLVDYBWjXfR/Iy8+RkF8rf
BfBiYH0ZW35f3skOlMgMcFm/FTkklGnIokO+2G8tg4+CwDSELQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9OEPLOfsjx2OwuYJN84UWH4QCqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy
MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMjBiNDQxYzctODc1OS0z
ZmZmLThkOWEtNDU2ZGM5YjhhNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz
MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0
OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi
MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmRgmqrn3jmpdMG2MYkL8isT7VWguwwYi8i3DoIP5ElV/LZg4B2bpbm
F9/Lv4+OlW/pEZPNl895sHYmH0286viJbaj6FIuxxh8Mr/EfpLXmzceX2EcUjW+J
6mSgLnRT9MBEC+FhPN5MSDxKNH2I8DXZ2nIlvxBHDRcq79OdU28S7ncJno6eHqLX
JTf0bPFme0AdZ8tNRb7+V5BcucwtdkOCBoMAC7mZvl2GPl9CnPH+ew3JJN6covKR
Su2zBwDaosEM6uXs4LCPHziu0lFVMQ74aIPipSCjGDRbBaUfjVlCOthWsNg+LsSf
Vd2oVao7JuMex95cKBsDcpURvo0YJN0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:09 2025 by rpki-client