Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa
File: 829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa (raw, json)
Hash identifier: ZPMwcJlC/auQyUfV2u7wdxpCAsQ1ac0xeY+zB2DygAI=
Subject key identifier: 01:E1:B3:89:82:DE:EB:E1:AF:04:EE:5F:FC:88:6A:0A:E1:82:BF:A9
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F432858491941893F3770D0F467CF3F00
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 68.71.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:89:3f:37:70:d0:f4:67:cf:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=ff0bfba7-d96b-4d02-a809-68cc0c6adf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:dc:37:c8:5d:70:00:c5:44:bd:a0:14:42:
29:90:fd:ca:bf:e0:72:63:c2:3a:92:de:6e:aa:71:
89:58:73:40:39:64:9d:7f:14:3f:81:62:8f:30:3b:
db:29:8b:72:be:ce:59:e9:d3:14:23:c7:2e:66:72:
57:a9:2d:03:67:02:57:d5:db:92:e8:bc:a1:d9:27:
d0:86:85:9a:d1:7f:6d:71:9b:4d:fc:fb:cf:c5:64:
d7:99:6f:8f:96:67:4a:02:f1:42:11:b8:fd:3c:22:
42:6f:f3:eb:7f:76:b1:99:a2:b3:ea:3b:f6:55:81:
e6:dc:3e:d6:b7:88:1a:81:c1:8e:7c:60:c4:3d:f7:
60:3e:37:a2:aa:c9:39:cf:fa:2c:29:eb:af:ce:15:
6b:86:c8:3e:5d:e7:d5:06:71:94:2f:39:ed:da:1d:
5a:eb:37:3d:5d:95:32:55:bf:84:02:e0:69:76:63:
c4:23:1d:f4:cb:b9:1e:2e:7b:5d:16:16:6a:da:60:
4c:cf:36:5f:e2:04:89:15:9d:7d:78:20:14:2b:d9:
fd:3f:bd:74:ae:52:14:52:c2:88:ea:4c:b5:a2:12:
0d:78:42:83:19:e6:0b:cd:3d:ca:69:3f:e3:91:28:
9b:8d:91:04:03:7a:ff:dc:a0:fa:39:3e:39:4a:50:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E1:B3:89:82:DE:EB:E1:AF:04:EE:5F:FC:88:6A:0A:E1:82:BF:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:8e:06:d8:33:cd:49:c2:8f:0a:f8:31:3b:12:3d:a0:3e:ef:
28:5a:c0:08:cf:18:ee:f9:30:14:52:1d:d0:2a:b4:dd:bd:0c:
43:8e:f4:00:03:b9:1a:bc:2c:63:86:3c:8e:eb:f6:7f:19:3b:
f7:3d:a8:8a:b2:91:19:4e:f8:83:9b:92:6b:dc:3f:33:bd:c7:
41:d8:99:a3:8e:2f:0e:3b:9b:1c:08:89:31:8f:c4:3b:c5:d7:
a9:fa:cc:38:fe:14:91:ab:01:b3:10:7e:e4:97:31:29:0b:be:
d2:3d:ec:29:b5:f6:8f:97:9d:10:0a:e3:34:6b:33:b9:b8:0c:
f0:d3:75:c1:48:d0:31:e4:b3:3a:c6:d5:1a:5b:ed:cf:a0:e4:
e8:28:d1:07:ae:2d:55:fd:f7:f3:f8:b8:dc:8a:6b:3e:be:43:
52:8f:3e:8e:f5:76:dd:16:1a:ed:9f:da:32:fc:4c:20:51:03:
43:26:a1:05:c2:d5:49:a5:24:3b:a1:a1:68:97:4c:53:fc:ee:
f1:1f:b9:76:6e:f1:3c:21:54:e0:c9:bf:1d:a1:4f:c3:13:db:
d1:b0:7f:6c:e3:bf:56:3c:a4:c3:4a:b1:32:58:c6:7c:e5:4f:
e9:be:3b:fb:f1:ed:f6:17:a4:6d:c4:b5:f7:96:e5:4e:64:d9:
dd:41:17:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQYk/N3DQ9GfPPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh
YmRlMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZmYwYmZiYTctZDk2Yi00ZDAyLWE4MDktNjhjYzBjNmFkZjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k7cN8hdcADFRL2gFEIpkP3Kv+ByY8I6kt5u
qnGJWHNAOWSdfxQ/gWKPMDvbKYtyvs5Z6dMUI8cuZnJXqS0DZwJX1duS6Lyh2SfQ
hoWa0X9tcZtN/PvPxWTXmW+PlmdKAvFCEbj9PCJCb/Prf3axmaKz6jv2VYHm3D7W
t4gagcGOfGDEPfdgPjeiqsk5z/osKeuvzhVrhsg+XefVBnGULznt2h1a6zc9XZUy
Vb+EAuBpdmPEIx30y7keLntdFhZq2mBMzzZf4gSJFZ19eCAUK9n9P710rlIUUsKI
6ky1ohINeEKDGeYLzT3KaT/jkSibjZEEA3r/3KD6OT45SlAYUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHhs4mC3uvhrwTuX/yIagrhgr+pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk
YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODI5ZWEwN2QtOWRiZS0z
NmZkLWI0YWEtYzdiMzgwMzRmMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0
YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4
YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl
NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiOBtgzzUnCjwr4MTsSPaA+7yhawAjPGO75MBRSHdAqtN29DEOO9AAD
uRq8LGOGPI7r9n8ZO/c9qIqykRlO+IObkmvcPzO9x0HYmaOOLw47mxwIiTGPxDvF
16n6zDj+FJGrAbMQfuSXMSkLvtI97Cm19o+XnRAK4zRrM7m4DPDTdcFI0DHkszrG
1Rpb7c+g5Ogo0QeuLVX99/P4uNyKaz6+Q1KPPo71dt0WGu2f2jL8TCBRA0MmoQXC
1UmlJDuhoWiXTFP87vEfuXZu8TwhVODJvx2hT8MT29Gwf2zjv1Y8pMNKsTJYxnzl
T+m+O/vx7fYXpG3EtfeW5U5k2d1BF9o=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net