Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac830bc-7fd8-3c7e-ae1f-234ba24c0bb5.roa
File: 2ac830bc-7fd8-3c7e-ae1f-234ba24c0bb5.roa (raw, json)
Hash identifier: PP+Qu9i7HExwK8cZNQeDizh8FD1mMg7I8D8DBcdnYds=
Subject key identifier: 59:1F:FB:37:1E:5D:9A:26:E5:DD:36:7D:C7:89:21:F5:38:9C:C8:AA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C127C306FC58D93DCE2E800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac830bc-7fd8-3c7e-ae1f-234ba24c0bb5.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.38.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:7c:30:6f:c5:8d:93:dc:e2:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1fee5062-8f34-4e87-937b-1009caa5210e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:23:b4:48:4d:7c:02:92:5a:13:72:ac:9a:
8d:f1:36:28:7e:82:6a:0d:05:75:5d:f1:c3:cb:4b:
91:a5:9e:c9:a5:a6:79:83:cf:63:e2:96:e5:90:82:
31:ce:0f:d6:00:bc:b5:b5:2b:61:df:d1:0f:77:6b:
db:12:a4:e3:b3:11:f4:04:18:41:1f:6a:0f:7e:1f:
6e:ad:27:f7:9c:cc:3d:54:e2:c5:d3:1d:dd:95:57:
b4:09:f1:b6:f5:18:df:fc:ed:5e:4b:8f:8b:29:7a:
ec:15:e9:5a:db:54:fd:9d:3c:10:74:6e:86:ef:c3:
da:61:d5:bb:f1:dd:34:8a:6c:c9:59:d0:d5:10:1b:
8a:83:b2:b7:e0:60:31:55:c7:ce:1f:73:b4:8f:64:
61:e4:0f:10:29:9e:96:57:b0:67:08:dc:80:01:2a:
f4:39:d0:2c:56:da:23:7e:e4:66:aa:74:d2:0c:52:
1e:07:ff:03:71:fe:4b:5f:93:f6:9e:d1:00:41:c2:
53:02:52:08:74:6e:a8:ca:ce:e5:05:1d:34:82:5d:
f5:f5:e6:c9:28:53:e9:2c:da:0d:ac:48:d8:01:50:
eb:fc:d2:f2:0c:a2:57:59:a7:47:a2:f2:7a:4b:14:
2f:0a:fd:89:8e:c0:f7:0d:42:7e:ae:5a:a1:18:8e:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1F:FB:37:1E:5D:9A:26:E5:DD:36:7D:C7:89:21:F5:38:9C:C8:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac830bc-7fd8-3c7e-ae1f-234ba24c0bb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:ea:29:85:58:76:ee:61:d6:e9:14:d0:e0:19:4d:46:18:da:
46:02:ac:47:9b:db:c2:68:e1:f4:e1:42:59:d9:fa:9e:c1:a9:
3b:8f:54:05:f1:77:f5:97:3e:85:43:7e:7a:97:ae:39:8e:c0:
48:fe:e3:5e:d8:d3:7d:f1:ce:7b:78:63:69:55:6a:f5:9b:9f:
ad:1b:cb:39:a7:e3:03:56:9d:83:1f:cc:87:a3:2e:29:61:7b:
60:d9:f4:79:02:1e:35:de:a0:cc:04:6a:89:43:18:e8:f5:11:
93:0f:06:29:fe:f3:d5:18:5b:2c:42:fd:93:1d:35:ad:c2:53:
f1:c8:12:89:53:70:d2:39:f3:cc:93:79:14:7d:d5:37:5e:cb:
9e:7e:68:21:30:1d:f2:5d:0d:da:4b:5e:f8:7d:54:85:45:8d:
5b:31:c5:05:34:1b:e1:82:10:4e:79:b5:fa:d9:d4:61:2c:ed:
27:f1:29:1d:8d:a3:c8:2d:ef:6f:9b:b9:ee:95:2e:b5:d7:4c:
4c:5f:6e:f1:d0:1b:27:df:ec:d4:a0:64:53:ee:43:1d:5c:1b:
85:39:af:7c:c4:76:a3:61:52:6d:d1:3a:f9:c9:c7:f8:a0:73:
34:86:a8:69:d6:06:de:1a:b6:aa:a4:0a:0c:64:e8:aa:95:14:
10:32:97:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:37:57 2025 by rpki-client