Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458a4a3b-2e7f-3a32-ba0d-482d9a54f861.roa
File: 458a4a3b-2e7f-3a32-ba0d-482d9a54f861.roa (raw, json)
Hash identifier: jli9KyWLcsdrCoy1pC67wZJP7ArD+sn7mMttklgE8Zg=
Subject key identifier: 92:B3:F5:C4:D6:BB:74:09:78:06:B7:E6:49:E3:5C:83:9B:82:6D:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B4A2D2C830EE402EAF600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458a4a3b-2e7f-3a32-ba0d-482d9a54f861.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.32.178.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:4a:2d:2c:83:0e:e4:02:ea:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ac87da7c-b8fc-4c1b-83f6-9c7812421852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:3a:21:8a:5d:1e:fe:4d:ad:55:fd:2d:1a:
00:f7:bf:b8:ec:d0:25:0a:5a:aa:60:f1:aa:a6:3a:
77:a7:b6:6f:44:5d:ad:a0:39:63:db:5e:2f:ca:24:
61:5b:0c:f4:b5:c2:2d:9c:ab:58:9f:05:6f:02:7e:
a5:bb:f2:45:27:27:ef:be:97:0a:62:62:14:9b:a1:
a7:a9:07:0e:2a:10:e2:27:ee:7f:d2:3d:a4:19:5c:
45:70:55:d6:4e:57:9a:0a:69:a7:8b:89:da:c2:d9:
51:d6:7b:19:d1:c6:e5:18:06:3a:b0:73:06:2c:63:
01:8c:86:0f:53:b3:a0:b3:0d:2e:61:6e:ef:b4:c8:
1a:23:a6:0c:24:34:c9:10:7f:19:fa:58:86:8c:b6:
84:97:10:63:e8:50:9f:e0:dc:06:1a:07:ae:f8:83:
41:d7:c0:b2:64:c5:0a:10:19:f8:cf:08:5b:4c:ee:
21:41:fb:c8:3c:a9:6b:e7:1c:b7:ea:2b:97:5a:43:
cf:83:44:c1:5c:4d:e0:68:17:a1:69:16:0b:10:13:
a6:eb:68:7c:06:e6:9f:6a:f8:1e:26:77:7c:d9:3e:
2a:de:12:b7:70:aa:6c:af:16:d7:5c:ca:1d:aa:ef:
f5:4f:44:22:f2:dd:5b:18:0b:6f:3a:b8:59:84:12:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:F5:C4:D6:BB:74:09:78:06:B7:E6:49:E3:5C:83:9B:82:6D:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458a4a3b-2e7f-3a32-ba0d-482d9a54f861.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.178.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:97:e7:ec:58:03:a1:ae:48:77:04:13:07:05:ad:44:0f:9d:
45:9b:ac:56:51:1c:be:14:c7:33:4e:ab:73:4e:36:d3:c2:08:
6f:a7:df:75:41:66:c0:30:84:b9:9b:2e:6d:64:4a:d4:1a:f2:
29:3c:d2:60:7b:8a:b7:d6:b8:4e:7a:7d:33:98:ff:36:53:86:
f9:da:7b:d3:d7:7d:19:3b:15:07:75:85:cf:4e:3d:17:72:c9:
9a:f8:66:92:77:68:ad:42:b2:69:73:92:68:d1:90:57:dd:e6:
c7:96:96:42:22:b4:81:f1:bd:c3:c7:88:52:20:e8:c4:a5:d7:
a9:d8:81:bf:5e:49:40:49:7b:72:73:ac:38:4f:53:f3:40:bc:
31:36:6c:37:a6:33:da:85:9d:3d:43:01:c3:8c:65:01:d5:db:
09:2c:b4:51:81:16:3d:9f:58:f3:19:a9:0f:0b:92:03:df:dc:
84:cc:af:84:82:80:a2:92:f6:ac:be:59:95:01:ef:9d:4f:c3:
0a:f8:36:7b:bd:64:77:da:66:6a:8d:c9:28:24:8e:75:d1:f2:
d0:98:f8:0b:59:90:31:6b:c3:cb:b9:7d:7a:a6:0c:20:11:c4:
2a:9c:3e:14:9c:57:6d:e5:e3:45:c9:b0:36:62:f9:f0:7a:39:
67:f8:66:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:41:16 2025 by rpki-client