Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3da6d4a5-5659-36b9-b9f5-2c0b61eba92f.roa
File: 3da6d4a5-5659-36b9-b9f5-2c0b61eba92f.roa (raw, json)
Hash identifier: 4S3+5als6Cza0nZ23A8yoWGN6pc6gSq7Hr8A0Fsp2wE=
Subject key identifier: B1:24:6D:80:47:71:01:5F:2C:54:76:DF:C9:8F:2A:87:28:9C:12:01
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C128015E78FEF78D09A1F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3da6d4a5-5659-36b9-b9f5-2c0b61eba92f.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.44.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:80:15:e7:8f:ef:78:d0:9a:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=20bf772d-f297-463d-a8b8-1aff65bca195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:23:f1:c7:53:22:80:4f:50:4f:2b:78:62:
af:16:44:ed:ab:9b:d0:72:98:e7:1b:fc:72:6b:a4:
19:d7:7a:36:63:6c:58:8b:12:7d:8e:23:3e:17:0e:
fc:35:81:3d:98:43:1a:13:b7:d9:60:a1:50:00:bd:
81:d0:57:8e:9e:ec:e4:09:94:6c:d0:cd:f3:40:d3:
3c:b0:dd:0f:8b:e8:9a:99:12:a7:99:2d:a6:ae:b0:
ce:54:e6:da:6a:41:87:21:49:98:55:0f:43:9d:03:
4e:b2:8b:f2:d9:8c:bf:98:46:70:2f:f2:d7:8c:af:
98:c2:3a:99:a0:97:96:a8:11:35:d2:6f:56:c4:db:
c5:9f:37:c9:0b:27:81:a9:17:24:f8:68:3e:97:01:
b8:43:e2:86:92:d1:6f:b6:84:2b:d9:38:d6:25:ec:
89:3a:3f:d6:c4:f8:e6:4d:6c:06:c3:b1:93:c8:75:
6d:f5:57:43:da:c6:e5:c3:27:07:92:39:dc:65:cb:
70:29:82:4b:54:32:34:7a:89:0b:27:cc:dc:72:19:
c3:c7:0c:c1:88:c6:79:75:c7:ab:f4:42:33:e0:9c:
17:5a:51:79:64:08:df:cd:c9:5c:fc:f6:f8:8d:1e:
e5:67:d5:92:91:ba:82:09:af:4a:be:ab:b7:bf:57:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:24:6D:80:47:71:01:5F:2C:54:76:DF:C9:8F:2A:87:28:9C:12:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3da6d4a5-5659-36b9-b9f5-2c0b61eba92f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:ad:c4:68:40:a3:f4:5b:1a:0f:ed:95:9b:5d:21:64:ea:6b:
ab:51:09:de:6f:a7:9d:50:dd:f9:69:01:91:05:f0:28:84:03:
93:dc:3d:4d:29:8f:05:68:3a:4d:d0:d6:22:0b:26:df:5d:99:
44:e4:5d:68:c0:89:d1:99:21:8f:93:cb:b7:12:54:f4:c3:93:
d9:48:46:ed:ad:04:fe:51:ba:ed:63:38:6f:7e:e7:ed:95:ea:
c2:73:10:00:ee:0a:77:28:5f:6f:17:e3:43:48:64:30:5d:67:
a5:b4:c5:45:fc:95:c8:c6:f9:e3:f4:52:a7:7c:82:46:f2:f7:
16:54:2e:89:8a:80:cf:f5:28:78:11:f9:6e:ba:dc:22:9b:e2:
35:ba:df:45:60:a9:4e:42:99:d2:e9:96:cc:4b:46:81:69:00:
85:07:bb:42:c1:51:9d:0c:af:1c:e2:60:90:13:72:0b:08:3c:
c9:95:b3:2c:e8:ad:55:03:a3:a1:10:7a:25:e5:af:e5:98:8a:
8f:66:f1:fe:bb:d8:55:4f:16:26:11:e3:42:0c:53:a4:67:d2:
6e:7b:87:a8:c0:12:52:cb:d7:fe:7d:42:d0:7e:b8:32:81:aa:
4c:c9:1f:94:40:81:a1:47:4f:bf:d3:07:a2:a4:56:b3:d1:38:
74:72:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:39 2025 by rpki-client