Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/250a636e-51fa-339e-a80c-3133fe0e5cfb.roa
File: 250a636e-51fa-339e-a80c-3133fe0e5cfb.roa (raw, json)
Hash identifier: mSawqxWSYvpF4bUCP7QvzEOR+Er9SjQijGdBoWYbChg=
Subject key identifier: E6:CF:E7:C4:A9:70:4A:B0:C1:55:7A:09:34:CE:C3:DC:E1:8E:11:1F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C127C8DB065EB2066AABA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/250a636e-51fa-339e-a80c-3133fe0e5cfb.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.38.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:7c:8d:b0:65:eb:20:66:aa:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d23d2dd9-995d-4e1c-9e65-24c74eb0525e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:33:a7:ec:5b:df:1d:e9:97:73:91:59:7e:
2f:aa:b9:9e:0f:ed:d8:20:4f:c8:cd:74:48:8b:b0:
23:9d:b1:4a:fe:e2:72:03:df:ca:06:c0:c6:b8:83:
83:0f:88:23:55:37:49:ec:26:10:53:ce:c2:44:8f:
df:ea:55:7a:da:51:b3:40:f3:af:74:c2:64:69:ea:
53:a7:30:c5:81:94:a2:e6:08:39:34:ad:e9:7e:c1:
7f:38:05:14:5b:dd:29:0f:51:9b:0a:63:4d:ce:13:
be:63:7a:12:8d:e4:81:cb:54:44:2c:37:da:0d:82:
0f:dd:73:44:1b:c5:cd:01:18:7d:67:47:7a:9f:44:
8f:b6:06:31:51:d3:a3:86:d6:ff:54:c1:13:f9:00:
24:c8:68:d0:a9:4b:74:cd:a4:45:7c:58:fb:a0:7a:
0b:fd:e2:82:ed:e2:6c:71:b8:a0:96:3c:8b:1d:f6:
6d:03:45:39:0e:74:4e:a2:ed:ec:fc:d1:c7:ae:13:
56:8c:4a:2e:ce:54:df:73:25:09:75:ed:7b:72:b2:
79:ef:fc:35:43:d7:e7:7a:1d:5e:56:b9:cf:84:84:
a1:15:f5:e2:d5:ed:2f:6c:0d:8e:22:ff:49:a3:65:
99:3f:98:1e:65:52:e8:76:f5:5f:62:4f:44:70:cd:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CF:E7:C4:A9:70:4A:B0:C1:55:7A:09:34:CE:C3:DC:E1:8E:11:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/250a636e-51fa-339e-a80c-3133fe0e5cfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:e9:ee:bc:a4:3a:d5:75:33:52:b8:5c:8a:63:74:82:ba:8e:
d8:52:05:24:f3:8f:ce:36:73:2e:56:8c:f9:23:63:29:03:bf:
1f:02:a4:30:b9:03:c4:0b:aa:2e:e0:bc:78:bf:f6:0d:9c:c5:
e2:40:07:45:ec:53:08:36:c5:94:70:db:2e:e1:1b:2a:a9:92:
20:d6:17:46:6c:f4:25:85:c7:43:f1:b7:26:38:c3:a3:be:54:
c4:26:b5:e6:09:e2:98:3c:46:f7:2c:19:2e:e3:ce:2c:be:91:
c5:f4:0f:1f:a3:0d:8b:ea:0c:7d:2b:73:01:2a:11:b6:09:a3:
c2:50:0c:8b:9d:b3:b0:3a:7b:4f:f1:14:6e:4a:86:b4:ae:50:
0e:33:02:19:3f:44:95:e6:64:e6:ea:03:79:e7:3b:d0:23:96:
ea:53:f0:b9:20:ed:57:3a:ab:e0:87:f9:6a:3b:4c:c1:86:38:
75:db:95:36:13:a5:17:36:a2:e0:81:aa:6e:8b:34:d7:da:bb:
8f:83:a2:c2:6a:3e:de:5b:ee:1f:7b:34:10:bb:54:ef:39:0a:
de:f9:2c:4f:21:31:97:c0:b5:5f:6d:aa:eb:31:23:55:3e:f4:
5f:51:a2:25:8f:6f:35:0f:17:d0:a2:c9:0b:43:78:67:37:d4:
b2:f1:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:14 2025 by rpki-client