Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d34bbc7-6674-3cf8-a8ad-5298b0ef0998.roa
File: 1d34bbc7-6674-3cf8-a8ad-5298b0ef0998.roa (raw, json)
Hash identifier: st5YDyw3ND8JbDd3Wgetleq76p5U+CEswl1wRb2uOuM=
Subject key identifier: DF:9E:1C:6D:F6:89:3C:42:F4:41:33:77:D6:00:AB:F2:9E:E7:68:97
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B4D3BFC834DF307649D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d34bbc7-6674-3cf8-a8ad-5298b0ef0998.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.36.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:4d:3b:fc:83:4d:f3:07:64:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=34444707-f666-42db-a661-2345643dee84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:94:06:23:02:bd:0b:30:4d:81:83:4b:11:
40:29:95:be:77:cd:1e:e2:03:c5:b9:34:b2:d6:d7:
f2:04:68:6f:1d:17:20:57:d6:73:20:ff:14:68:f6:
a1:77:21:34:fb:c9:d1:c7:a9:e6:b0:11:36:7f:86:
fd:29:b6:8f:de:fe:fd:65:97:0f:55:ac:d8:44:6e:
a3:95:e6:db:fc:cd:ff:6f:57:ae:de:07:cf:23:10:
f3:04:ad:90:41:07:fe:f1:81:a8:e4:ba:db:67:74:
ba:c2:e7:1b:03:45:82:ab:1b:23:39:8d:76:c7:da:
79:dd:58:b4:5d:e1:67:e3:2e:cd:5d:7c:2c:41:63:
26:ed:39:65:be:e8:91:27:2f:a7:00:76:2b:38:04:
a3:39:0a:0f:01:27:75:5f:ab:b9:95:00:ef:1c:57:
d6:1a:79:b1:0f:48:37:04:b1:26:57:da:03:5d:cb:
a4:ac:ad:fe:17:e4:65:f6:e0:b8:56:23:01:f2:e4:
f3:a8:56:6a:a7:af:1e:f2:ed:aa:a3:12:17:5b:f5:
6e:68:61:c0:0e:42:22:66:b1:91:b6:5e:de:f6:65:
97:2d:81:62:be:3e:dd:3d:b9:6d:a8:ef:28:e5:05:
dd:85:6c:f5:21:a1:f7:b4:1e:69:d5:43:0c:18:74:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9E:1C:6D:F6:89:3C:42:F4:41:33:77:D6:00:AB:F2:9E:E7:68:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d34bbc7-6674-3cf8-a8ad-5298b0ef0998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.36.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:fb:59:3a:3f:bb:a9:f3:91:45:a1:ca:07:9b:54:5d:58:4b:
a0:b5:77:3a:7d:40:0d:a4:57:1b:ad:9b:dd:bc:60:cd:4b:ad:
51:9d:9f:8b:36:ba:19:a7:3b:18:b1:61:98:7c:c5:54:2b:93:
d6:09:f9:2d:c7:f4:83:12:b2:27:1b:57:22:39:7c:b1:bd:be:
c5:ad:9c:20:58:b7:bb:68:85:7f:be:06:8a:f5:95:58:85:42:
4d:6e:98:0f:f8:d9:81:88:8b:60:3e:5b:10:f3:07:c1:67:44:
35:9d:9e:ca:04:dc:9e:fa:50:8d:8c:fa:bf:52:a9:1b:a3:f8:
ce:be:27:89:90:ec:b1:39:d2:9f:77:ae:18:07:d1:53:84:d5:
74:af:fb:be:71:04:ad:26:32:53:36:85:37:71:42:18:62:df:
ad:26:5a:2c:4b:2d:c4:9d:0b:68:d1:aa:54:8b:7f:27:be:e9:
ef:79:e3:df:28:67:4d:5d:55:c3:ee:d9:1a:5e:c9:a3:9b:bd:
bf:20:e3:a0:90:8c:76:bd:8b:ae:3b:95:b7:d6:82:9c:0f:5d:
e7:8b:76:9b:d7:62:49:7d:35:9f:e3:ff:f8:b1:35:60:91:60:
2e:43:c3:90:94:70:ea:55:c9:f3:3c:2f:19:6b:e8:0a:3e:b1:
ed:39:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:48:34 2025 by rpki-client