Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e28c666-6c69-35e0-80cf-ee96d9d58242.roa
File: 3e28c666-6c69-35e0-80cf-ee96d9d58242.roa (raw, json)
Hash identifier: OAWCT7UeLMg1KNMaY4BK2eq6AJ0c+qD1npFodLnpFAg=
Subject key identifier: CA:DC:7C:75:F7:87:80:67:8F:29:92:97:17:46:11:1A:2C:7F:AC:3E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F290CEB533AE78A16CB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e28c666-6c69-35e0-80cf-ee96d9d58242.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.37.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:29:0c:eb:53:3a:e7:8a:16:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0e0f6360-3cc3-4daa-a16b-44c2bb4ef4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:b2:af:77:dd:f1:eb:30:03:e0:e7:7e:1a:
21:d8:eb:c5:95:40:22:da:6d:d0:e9:96:02:a8:04:
51:71:8f:c8:1a:78:b1:aa:f2:88:bf:5c:b7:19:7c:
01:c2:e1:b6:fb:3b:5d:6e:db:98:b5:22:c0:e6:fd:
4c:c0:56:53:64:50:ed:ed:15:17:fa:77:55:a4:89:
da:2e:ee:ad:fd:e2:03:83:26:6c:50:0a:72:74:29:
a8:42:26:b0:41:89:b9:b8:93:21:c0:b3:9d:be:31:
4b:46:c6:3d:c6:5f:2b:61:87:ec:64:a5:b1:59:ab:
bc:f3:10:19:ff:13:02:87:96:69:ab:c9:93:8e:e1:
29:25:ee:c9:88:3a:3e:2e:b7:48:67:11:25:3c:b8:
77:54:e2:6e:a9:17:4b:7a:cc:87:c8:03:d4:dc:b8:
b8:77:f4:70:06:a0:07:ae:a5:42:f5:94:27:ae:54:
59:f8:2f:b0:13:94:55:a8:28:72:ba:86:13:07:23:
71:1c:d7:8d:0d:cd:ef:5b:7a:9a:a2:59:88:a1:4e:
4a:07:75:a8:26:42:bb:75:8d:83:41:09:27:e6:fc:
20:90:2a:df:34:e6:81:af:ee:a9:94:47:e7:96:9f:
0a:7d:68:74:e4:db:13:7a:c4:12:aa:5a:3e:ad:17:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DC:7C:75:F7:87:80:67:8F:29:92:97:17:46:11:1A:2C:7F:AC:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e28c666-6c69-35e0-80cf-ee96d9d58242.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.37.80.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:de:19:54:eb:63:63:99:06:a3:49:05:21:2b:c1:43:83:13:
18:e6:05:22:63:f7:c5:33:51:f9:0b:b1:52:8e:5b:f2:5d:4e:
ea:dd:48:fc:1e:9c:4f:61:f1:e7:5f:e0:73:9a:6f:c2:c8:75:
66:4c:04:aa:ca:5a:16:f9:a1:e5:a6:9f:5b:71:81:87:a5:0a:
94:1f:1e:f1:16:5a:bc:fa:d5:95:03:7d:19:f0:66:4a:ac:2e:
0f:ab:4b:13:3b:ca:65:7e:6e:cf:28:15:6b:c6:80:22:65:af:
64:99:fe:4a:22:7f:2b:46:45:29:da:d0:6b:0a:ad:a0:9d:51:
e8:a7:78:70:70:f0:af:42:9b:b6:25:1f:36:4c:cc:0a:7d:75:
2e:c7:cf:09:ac:16:a6:a6:40:90:39:ed:e2:e2:22:39:49:b6:
39:51:9e:26:5f:98:c1:08:cb:61:1a:d1:f1:d3:fc:ac:06:c8:
a5:8f:b7:02:ba:27:b8:f4:98:4c:2a:49:f0:79:8e:61:01:2d:
71:a8:cd:a0:2e:9a:f0:e6:0a:6e:3e:af:15:1d:ee:7e:ab:bc:
9e:7a:43:88:9a:d9:f9:27:b9:54:27:1f:97:10:d0:62:76:a6:
8a:16:b5:50:76:a2:27:1c:eb:7a:79:ff:1b:b9:16:d7:45:98:
e3:23:e3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:10 2025 by rpki-client