Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a837b4-b1d5-373e-8574-6ae98d78e616.roa
File: 53a837b4-b1d5-373e-8574-6ae98d78e616.roa (raw, json)
Hash identifier: QEN9XbeQzBVL5XJFAyA8W3+NJhDaZY3fjyvNnUe0RJg=
Subject key identifier: AF:F8:AC:D5:8B:4E:5A:2B:F7:7F:B4:21:5A:2A:2D:16:5F:D5:1F:D3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5ACED58C5C292185ED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a837b4-b1d5-373e-8574-6ae98d78e616.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.43.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:5a:ce:d5:8c:5c:29:21:85:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=6ed9e442-9cea-4300-ab0d-c24e7d15e370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:a9:1b:9f:a0:f0:5f:54:4b:cc:c1:68:1e:
a0:80:68:fb:69:08:49:46:65:81:62:c3:62:b6:cd:
4a:cf:7d:58:1b:f2:f7:f0:c7:af:17:42:55:62:92:
ff:91:d2:1f:61:9f:2e:ab:ef:e3:17:01:91:97:5c:
ba:2c:70:9d:01:38:0f:32:84:ad:82:c2:51:46:42:
cc:95:d0:89:a3:01:7e:71:b0:fe:bc:e3:18:b6:61:
76:b3:45:7e:ac:ee:ca:69:79:91:82:b9:be:9a:37:
0c:12:91:9b:65:59:5f:34:02:bb:12:36:1e:d7:1a:
15:0b:d4:cc:b7:f0:b6:57:ee:ae:c4:c2:5c:d4:72:
72:5f:4c:2e:a4:3d:08:86:0d:bd:d4:82:8c:b0:bb:
fd:de:52:55:d7:0b:3c:1e:83:9a:ab:e6:7e:fd:d8:
28:d9:c1:07:ef:da:a5:3b:2a:76:e7:64:c0:c1:3e:
14:a0:20:ba:46:a2:fe:fd:82:36:59:e1:76:c1:48:
f6:71:e8:f6:75:01:88:2a:09:57:0f:a6:a1:5f:69:
e0:68:c6:78:7c:75:1b:8c:c0:dc:c3:90:b5:94:bd:
71:22:1b:74:2d:87:99:bb:08:d5:52:b4:8e:15:65:
fa:84:91:aa:73:d8:97:30:90:66:e0:38:40:16:99:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F8:AC:D5:8B:4E:5A:2B:F7:7F:B4:21:5A:2A:2D:16:5F:D5:1F:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a837b4-b1d5-373e-8574-6ae98d78e616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:34:06:e3:af:ce:aa:4b:d3:6e:93:5c:54:61:73:65:5d:16:
64:48:36:4c:1f:8e:d0:9b:0b:46:c4:7a:e1:09:a9:a7:14:37:
e9:39:82:4f:6d:75:b4:63:cb:c5:c3:d7:9e:02:80:12:b8:66:
c4:9d:25:31:7f:ce:0a:82:c3:44:8f:b2:95:e2:ec:a3:42:34:
1d:be:8d:6a:cf:cc:30:ba:89:56:47:e8:22:9c:5d:79:ca:29:
b3:37:33:98:6c:4b:27:ed:53:68:c6:c0:c7:16:28:ae:0d:c9:
f5:f9:69:16:4b:4b:9c:7e:15:eb:b3:22:75:ae:06:2c:25:3e:
2a:92:0c:91:f8:4f:16:c2:db:60:53:01:ef:79:1b:dd:10:e3:
29:e9:57:ff:39:a8:98:fc:ac:bb:45:b4:e5:72:c1:98:39:db:
6a:e4:fa:eb:a2:a7:fe:31:3d:b1:c4:14:ba:d9:61:08:f5:72:
2a:da:80:82:23:8e:d6:e6:bc:4d:30:62:28:bd:e1:ba:ee:2c:
e9:7a:42:5c:13:5d:fa:f1:63:39:b5:74:df:42:72:50:13:86:
71:3e:14:db:14:d1:6f:78:9c:ae:12:10:43:67:2d:c8:b2:79:
bd:32:a0:fb:96:49:e4:ba:0c:58:20:18:c1:a6:e2:5e:32:58:
da:6e:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:05:23 2025 by rpki-client