Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f8112d7-9020-3c94-ad1b-e07baaafff68.roa
File: 0f8112d7-9020-3c94-ad1b-e07baaafff68.roa (raw, json)
Hash identifier: RuJnsIHK1VlNzZxGgRzt514Q7XsTBgBzkUyao8VYV/A=
Subject key identifier: 7B:80:1F:B6:CB:84:49:75:93:A2:C2:90:B0:65:E1:98:9F:98:F4:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C127E184CAD258AE6A17DE4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f8112d7-9020-3c94-ad1b-e07baaafff68.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.39.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:7e:18:4c:ad:25:8a:e6:a1:7d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0d307f29-b395-4519-88cd-b058aed090b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:de:12:b2:f1:8e:ed:c1:59:52:14:03:c6:d1:
7e:42:ae:6b:44:7b:2b:d8:82:12:9d:90:71:72:94:
19:28:13:ed:50:50:e9:0d:5e:b7:fc:46:ad:33:b3:
7c:32:f9:4d:c5:ca:7f:75:d4:60:09:c5:e2:38:8e:
8a:95:48:c8:27:51:65:3b:a6:63:63:8e:65:ea:9f:
74:da:f0:c9:87:83:96:c8:60:4c:02:8e:9f:66:fb:
dc:af:ad:9b:c4:c2:9a:c8:e2:5e:32:81:33:6d:82:
fc:5d:35:88:ff:25:c7:52:4e:83:fc:1b:7f:f7:23:
5e:d5:c0:c3:dd:3e:94:9f:4e:52:8b:d0:3b:70:e4:
de:05:06:bf:4c:80:47:1f:2b:72:7c:9c:65:8c:17:
e3:06:d5:c4:74:4f:47:2b:41:2d:cd:c8:e9:ed:ed:
cf:a1:f1:77:a7:5f:79:ed:b7:13:36:26:d4:08:43:
7b:f5:e3:4a:d5:09:2c:7f:8b:d6:c1:07:84:a1:7a:
69:24:fa:8d:3f:1a:8a:d9:12:11:bc:da:d6:3f:0b:
25:a7:31:c3:c3:52:9b:24:f5:9a:83:d6:6f:5a:30:
08:ac:f0:26:9f:ac:cb:14:a7:b9:93:6f:53:c2:e5:
9b:52:ad:24:2b:72:be:74:d5:ad:b7:36:b6:da:1c:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:80:1F:B6:CB:84:49:75:93:A2:C2:90:B0:65:E1:98:9F:98:F4:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f8112d7-9020-3c94-ad1b-e07baaafff68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.39.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:7c:17:cc:51:03:08:68:98:ea:e7:30:5e:1b:38:66:dd:9d:
d5:1e:2a:ba:ac:ed:fe:a1:eb:87:cd:3c:ce:ac:31:9f:96:23:
ec:41:13:b3:ef:4c:df:26:77:9e:a6:86:18:96:b1:c5:56:ab:
70:7f:a7:e4:6a:19:71:a3:1c:ba:32:71:16:5e:89:88:6f:24:
07:a3:d0:24:13:88:26:44:a2:cc:51:ca:5c:a1:68:08:2d:40:
38:60:63:60:08:17:57:75:f0:f0:e7:f1:79:86:b1:93:2e:51:
be:f4:5f:79:78:06:f1:d7:5d:5d:2f:9f:bf:db:ec:98:89:6e:
03:e8:c7:41:af:e6:e7:8e:e9:54:94:fb:f1:47:23:a4:61:93:
65:21:b1:4e:78:7c:af:92:28:aa:a4:48:11:00:bd:51:e9:39:
3d:87:9e:51:76:ed:b4:24:58:34:5a:24:21:9b:df:c9:2b:96:
1e:39:fa:1e:53:52:5e:95:b8:c3:12:7d:e3:f9:ac:ec:99:37:
ae:ef:9e:84:2c:40:82:45:81:ce:14:e6:a2:66:fa:12:f0:0a:
15:e8:9a:16:d8:cc:82:25:5a:db:93:78:22:0a:ac:96:95:c1:
d0:e9:06:a7:30:25:4a:81:3f:65:4c:e1:8e:d9:35:37:10:5b:
db:57:a9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:10 2025 by rpki-client