Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f0a238e-acd4-380c-a674-cc48709440da.roa
File: 0f0a238e-acd4-380c-a674-cc48709440da.roa (raw, json)
Hash identifier: zcmctweHan+zZ8J+FrG8IHHCL4kfHEsT5V4Yc5rckGo=
Subject key identifier: F1:40:75:8E:26:4E:EC:FE:28:52:A7:36:23:DA:67:BC:7F:98:02:14
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C128684D45D9091F8F72900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f0a238e-acd4-380c-a674-cc48709440da.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.54.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:86:84:d4:5d:90:91:f8:f7:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=94b06fac-9561-406f-8b35-f614663033b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:56:9e:0c:d0:89:4f:72:eb:49:60:89:f9:
01:0b:5a:75:05:19:48:fd:e9:63:a9:db:1d:be:85:
53:2f:bd:79:92:9e:e8:2b:45:d5:2c:6a:49:b6:b0:
a1:40:e6:f6:b9:84:a0:fb:ba:eb:7d:98:3f:60:5f:
3e:93:5f:42:8e:0e:26:50:4c:a2:70:25:bf:84:c6:
ff:0a:88:ea:79:9e:1b:92:0d:bd:94:45:de:7f:d8:
ab:ef:ca:e7:d9:be:bb:dc:14:14:9d:c6:dc:ae:d8:
42:de:6a:39:02:3a:f8:e3:12:30:fb:ed:64:ae:e6:
ac:93:66:f9:4b:b3:68:c1:9f:d0:5b:1c:a7:c9:68:
fc:37:a8:2e:41:af:68:db:27:e9:19:52:49:33:c6:
31:3d:01:f5:f1:e4:30:d5:63:12:eb:62:07:01:47:
23:ed:29:63:60:d6:f8:1b:b2:a1:3e:e5:32:34:aa:
47:9d:01:9d:21:ee:05:a8:4d:74:93:52:ae:85:59:
b4:38:62:7b:6e:d5:b4:d0:69:cf:bc:1d:d9:c7:9e:
67:fe:ec:19:1a:99:e5:ce:2d:1b:be:78:c1:d9:53:
c0:05:37:ec:61:56:e7:2e:bb:be:dd:57:39:19:cb:
c3:18:13:03:9e:da:f0:86:1d:4f:1d:33:90:91:4d:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:40:75:8E:26:4E:EC:FE:28:52:A7:36:23:DA:67:BC:7F:98:02:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f0a238e-acd4-380c-a674-cc48709440da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.54.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:5e:e6:94:f1:63:6d:14:4e:08:0d:2b:ec:ad:39:cc:6f:c0:
c3:0f:ee:c5:89:98:06:dd:b4:9b:5b:b9:59:67:34:9c:4b:0d:
e4:9a:25:83:e2:03:80:45:4b:59:7d:4f:85:fa:49:ca:65:88:
2e:43:4d:29:1d:8d:63:7b:dd:ee:8f:d0:1c:85:9f:fa:94:e9:
32:55:d2:6f:98:17:b0:5b:6f:ae:d4:cc:a0:38:1b:a2:e2:6e:
d0:27:04:00:e6:21:80:89:d0:4d:76:dc:5c:48:25:26:95:7b:
47:2f:45:d4:9c:56:48:63:a5:e8:59:20:46:dc:84:ef:5a:3d:
77:81:2d:37:a6:b0:cd:8c:12:13:5b:07:72:49:13:80:05:9c:
e7:11:a5:fc:34:6a:06:da:db:e2:a0:74:cc:2a:21:46:cc:1b:
2b:55:15:4e:54:18:e6:f4:25:a9:11:1e:fb:f5:9f:6e:33:be:
db:73:45:5e:93:e3:2c:33:8a:ef:a7:11:93:af:7b:c2:b8:b0:
7b:ef:ac:f9:80:54:70:b4:de:47:9d:e8:de:4e:28:c9:a6:6c:
ae:d6:88:87:a6:33:51:bb:81:f0:e2:74:f6:5a:e0:d6:15:fe:
2a:18:94:3d:2f:e2:72:41:da:b1:bf:ec:a2:5d:86:55:4d:bb:
81:10:6c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:27 2025 by rpki-client