Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37de1b6e-0bb4-3139-b83d-3f76ee6e859b.roa
File: 37de1b6e-0bb4-3139-b83d-3f76ee6e859b.roa (raw, json)
Hash identifier: OcA+CO6ehk0WJHKOF+1d3lz+Fn6+AM9w/w2cE3kSJzA=
Subject key identifier: 47:76:22:80:F3:12:88:0D:B2:2C:93:E4:E1:73:64:9A:1B:72:7F:3E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1232BF42D8ED23EC26A470
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37de1b6e-0bb4-3139-b83d-3f76ee6e859b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 68.84.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:32:bf:42:d8:ed:23:ec:26:a4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=bc8fbc2e-b837-40bf-8c00-49b9a857985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:1c:a8:94:9c:72:f8:92:fc:be:2b:d5:41:
80:58:64:f1:ae:74:17:5f:66:e8:30:fd:98:28:eb:
1a:9d:41:76:c8:13:94:56:ea:be:2d:25:6b:e9:e2:
7a:50:9e:6f:ba:d5:f9:9d:f3:de:33:4a:67:80:bd:
53:53:fc:31:99:40:92:b1:97:3c:07:fd:b1:27:80:
f7:3a:4b:2e:d6:e1:93:85:09:1b:8f:9b:b4:41:c9:
1f:14:45:06:9a:cf:4d:e9:01:1e:5b:aa:03:5d:88:
2e:39:95:c3:44:e3:6b:8c:c9:a7:c5:b5:c0:b2:e2:
45:ac:6e:9b:8d:8f:b9:65:64:d7:10:d5:13:c1:7d:
7a:b6:3e:a5:09:0f:86:ac:b9:98:11:08:b8:38:98:
93:81:8d:1b:a8:45:8e:8c:86:19:c5:bc:7b:65:74:
54:cf:17:00:08:48:00:40:a8:b7:04:72:84:f3:25:
d1:d5:e6:60:b3:80:94:b9:9e:ee:86:c3:6d:27:45:
56:d6:dc:d1:29:52:14:f1:7a:46:8a:d6:bc:71:d6:
0e:e5:f7:c1:88:52:c3:3c:b4:11:2e:22:0f:82:ca:
ec:df:e1:aa:96:20:2e:60:be:e0:57:3d:9c:3b:b8:
31:91:54:fd:c2:6f:2d:57:da:f5:d0:af:5f:61:f3:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:76:22:80:F3:12:88:0D:B2:2C:93:E4:E1:73:64:9A:1B:72:7F:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37de1b6e-0bb4-3139-b83d-3f76ee6e859b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.84.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:59:47:38:ef:0d:b1:0e:ff:86:2f:fc:e2:20:c3:e3:8e:47:
cc:4f:d0:2e:93:f3:04:d2:ce:86:63:26:1c:26:cd:8b:c5:4f:
5a:8c:1f:b1:f9:2e:86:6d:f5:ff:5e:75:0e:be:8a:74:29:ad:
ec:b5:85:86:16:57:13:9a:03:d4:2d:ac:f9:05:71:11:71:36:
be:e5:dc:68:30:2b:b0:9f:f7:52:31:3f:12:c2:8b:9e:b2:65:
fc:46:b4:41:d7:25:f6:8d:75:59:96:03:96:28:ac:d4:ea:98:
4b:b5:c4:fd:0f:6c:ec:90:c3:ef:72:93:bb:57:05:86:e0:94:
9b:59:96:54:1d:d5:35:a9:3d:54:e7:11:41:05:27:9b:04:f8:
f2:40:a3:3d:bf:96:0f:4b:8d:37:69:d0:59:e6:e7:45:02:c6:
1d:cd:03:80:a7:60:11:d1:85:71:69:8e:86:86:82:eb:db:fe:
51:95:e0:cd:77:cd:87:94:c9:aa:b6:c8:20:aa:60:65:4d:91:
5e:7f:ec:cf:a8:2e:29:a7:40:8d:d3:8a:66:3c:fb:28:8b:56:
59:c5:07:b4:19:d8:34:ff:fd:2e:45:3d:60:4b:fa:18:db:08:
34:37:c2:77:8c:03:d3:1b:d5:1d:6b:56:cb:a8:e3:c1:a4:6b:
23:59:bb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:05 2025 by rpki-client