Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa
File: 48fd603b-32a7-3914-8971-7bbb10a51a4e.roa (raw, json)
Hash identifier: h0ctnIvwWd7k9wZ9V7PR3GcUK5zPMzYx9Mky1Y1GzEQ=
Subject key identifier: E2:62:E5:EE:88:AA:31:68:04:89:32:9D:41:C9:EF:FC:AC:3A:7E:8B
Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial: 010D0C9F432858488DAB487F3EB195B57926FF78
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 36103
IP address blocks: 68.70.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:48:7f:3e:b1:95:b5:79:26:ff:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=ab7cfe64-c23b-4866-b681-e8eac08bc0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:c4:bc:56:5e:d9:d4:3a:fd:fb:2b:d6:e2:
f7:29:7e:ee:ee:8c:89:bd:8e:4d:86:0f:ca:f5:83:
02:6d:09:bc:71:1e:38:c7:52:2c:f6:ef:44:e8:8f:
52:93:4a:4e:8d:36:b7:39:d5:ca:d8:ad:f6:be:65:
18:ac:20:0e:55:ad:5c:c4:7f:21:ea:d5:05:f5:0a:
28:b7:63:13:9a:a8:b8:a9:7f:c1:d9:dd:bd:9a:2a:
d5:bc:34:47:0b:6b:96:6d:72:71:4a:c5:75:77:76:
94:bc:5f:72:55:f6:f3:4b:c9:be:c0:20:8e:cd:d5:
64:02:9a:13:ce:cb:c1:de:f7:06:8f:f8:8a:45:c9:
d2:99:fe:3c:f3:82:2b:d1:89:46:e0:f9:50:e3:a6:
2b:ee:36:7a:2b:61:7a:eb:f5:44:0e:4b:a7:3d:93:
64:f7:29:c4:3d:eb:6e:19:87:2a:6b:97:84:0b:8d:
22:30:c4:16:f8:b8:d9:05:32:2e:1f:61:68:8e:81:
1c:50:a2:d9:04:11:34:ee:1c:4e:bb:36:1a:95:9a:
b4:cd:cf:9b:f4:45:40:fd:e5:7d:a4:56:2f:91:00:
4b:a6:60:14:01:cd:e8:33:d0:b4:31:2d:21:0d:4f:
c9:ae:93:6b:2f:e4:b2:e5:1f:bd:97:1b:09:6c:01:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:62:E5:EE:88:AA:31:68:04:89:32:9D:41:C9:EF:FC:AC:3A:7E:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
X509v3 Authority Key Identifier:
keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
sbgp-ipAddrBlock: critical
IPv4:
68.70.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:9f:28:19:b9:0b:72:f6:12:1a:49:6c:b3:14:be:ed:cb:8d:
d4:05:a6:a4:51:1e:39:05:ec:3c:66:b5:15:ba:12:55:d6:4c:
1e:f0:c6:8e:d7:b1:bc:ad:dd:11:e0:48:1e:53:d7:88:ce:02:
21:4e:07:70:80:8c:37:9e:08:8e:33:03:f8:ff:05:9c:2b:69:
19:73:c0:64:48:eb:ec:cd:c6:f0:e4:cb:c3:b9:9e:bd:bc:7f:
f8:d5:5c:1c:7e:d8:d8:c3:f3:d3:f0:9b:16:6a:fb:7e:98:18:
6b:d9:8e:24:30:fe:72:d7:20:f9:b9:42:12:f8:33:26:bc:ae:
83:09:08:4d:31:23:c0:36:3a:d9:af:20:f8:c0:67:ea:13:b4:
8d:14:52:e7:9e:01:4e:83:ae:de:eb:d8:7d:ed:3d:11:16:86:
8e:fe:28:39:b2:de:cd:9f:da:28:72:43:e3:4e:bd:fa:b8:c5:
da:e0:3a:6a:ab:c8:81:b7:ad:5a:92:dd:55:14:00:42:b9:2d:
e1:52:96:4f:e7:52:80:71:cf:f3:fa:0d:fb:13:fb:9b:9f:12:
52:32:8b:f6:b9:d3:e0:7d:1a:29:6a:9b:18:32:c0:ab:61:a4:
49:77:60:4a:a3:8f:3b:0d:d4:72:8a:72:d2:60:5e:02:99:09:
ac:68:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:10:04 2025 by rpki-client