
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce564ce-869e-35c2-acd3-22242e71edce.roa
File: 3ce564ce-869e-35c2-acd3-22242e71edce.roa (raw, json)
Hash identifier: /4l8dfQOCs9K/F9j420Nz44j/X84A9PIO4IOGSNu+m0=
Subject key identifier: DB:65:BD:72:64:F4:B9:4C:E8:8F:B5:F7:07:BA:34:68:DA:5F:C5:0E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F6348268C5BE3E713B200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce564ce-869e-35c2-acd3-22242e71edce.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.62.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:63:48:26:8c:5b:e3:e7:13:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ef942abe-b0e2-40c3-b5d1-2e7069fdc985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:d2:4b:23:61:0a:e9:07:f9:41:71:9f:c9:
7f:86:4b:b4:bc:a7:1a:a7:51:f2:cb:70:9f:82:79:
2f:e2:5f:04:67:57:53:21:77:7e:f0:fe:33:18:42:
e6:06:b0:93:1d:43:93:9a:a5:f5:ea:3e:35:00:0f:
64:c2:8d:15:6d:a5:cc:fc:90:b1:37:be:7b:a3:c4:
79:2c:99:8c:b4:82:f6:d1:0a:b7:24:08:67:ae:23:
5b:3f:39:36:1a:b1:13:0c:b1:fc:aa:3b:e7:30:7e:
70:ca:3b:fd:b7:7a:dd:cd:5c:bf:99:99:4c:74:fb:
fd:45:35:3b:9f:a4:8c:83:22:b5:ae:92:4f:72:08:
1b:cf:60:0c:a9:54:91:f5:90:80:9b:cf:b1:a9:c1:
18:60:f4:94:30:fb:d9:58:5a:9d:27:23:9b:46:20:
39:e6:59:0d:06:14:a7:7a:d8:ae:a0:07:a7:c8:75:
12:3f:66:b2:87:a8:6a:07:ea:d1:ba:83:34:ca:4e:
b1:82:7e:54:a8:b8:25:f6:7a:f5:a6:a1:47:dc:39:
4a:ea:ef:c2:66:fd:b8:0b:fe:37:62:d0:51:06:c0:
eb:e8:09:34:e6:94:41:05:ad:92:88:b7:59:52:fd:
61:fd:36:22:10:7b:77:f8:99:57:cb:56:75:14:cf:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:65:BD:72:64:F4:B9:4C:E8:8F:B5:F7:07:BA:34:68:DA:5F:C5:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce564ce-869e-35c2-acd3-22242e71edce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.62.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:9a:50:8d:79:a2:ea:51:f2:dd:e1:ba:95:bf:12:2d:b3:5d:
9b:aa:5e:dc:44:54:18:d1:e9:49:d6:38:7a:8b:7c:46:05:74:
29:5b:ac:c5:49:9c:34:ce:44:5e:a3:0e:de:c3:ea:15:d4:0a:
8c:ed:f7:60:aa:bf:85:08:45:67:bf:cd:32:ea:61:27:4c:c6:
89:77:24:69:45:b8:5f:e3:07:d1:e9:dd:c2:80:87:15:fc:6d:
79:6b:d9:cc:9d:90:cd:23:96:10:75:a3:9c:10:bf:43:0b:92:
65:4d:80:58:39:14:73:30:4d:60:ec:f8:2d:4e:76:a6:8a:44:
6d:4d:3e:7e:19:f8:ee:0a:e8:c2:ce:8c:9b:b0:b6:39:b9:31:
33:d9:85:4c:85:17:a9:dc:e5:f3:02:be:cf:49:6f:5f:b7:49:
19:e9:e5:73:fd:1e:5b:bd:6f:44:ca:c6:ec:cf:3c:ae:94:33:
5a:08:28:de:9b:3c:20:c7:8c:88:94:7f:2e:f1:20:09:8d:f2:
44:c2:4c:76:39:61:bc:89:15:c0:de:9d:91:dc:b4:70:30:51:
a4:66:f7:df:e0:97:b8:e3:b5:3e:08:9f:6f:1c:d0:17:c7:53:
be:d7:13:40:5f:5b:3f:6d:82:c5:f3:a3:6e:26:1c:22:b7:eb:
99:76:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:19:57 2025 by rpki-client