Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5da0b497-6f67-3eea-8f22-0221b4fa1918.roa
File: 5da0b497-6f67-3eea-8f22-0221b4fa1918.roa (raw, json)
Hash identifier: hWJQ9F0NqxDAdz52zjal2lj+BB5eIF7cfOPPbcZENbk=
Subject key identifier: F2:15:C5:9D:EF:02:A9:F4:A3:71:C0:2C:4A:5D:73:BF:22:92:70:8B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C109592228B65A457ED1A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5da0b497-6f67-3eea-8f22-0221b4fa1918.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 68.82.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:95:92:22:8b:65:a4:57:ed:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=53a30202-2429-43e9-95f8-820a6b7e095c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:8c:67:2f:2c:72:d1:3f:25:f4:93:3e:1d:
64:cb:8c:7f:66:5b:63:82:ae:3e:ef:bb:eb:f3:3b:
d0:95:84:2f:b5:c9:4d:89:8d:51:1b:74:54:d2:1b:
3c:bc:b2:5a:dd:35:03:01:b0:4d:3a:ed:67:f7:ec:
66:01:f9:e3:62:cc:85:15:c4:94:b8:0d:9a:2a:c9:
27:f6:41:96:0b:2f:a4:8d:26:38:2a:c1:6b:e1:aa:
17:15:f4:6c:a3:d2:1b:79:3a:2c:5d:24:5b:0a:73:
0a:36:01:ee:62:39:ac:22:a7:6d:8a:53:ab:31:85:
b8:65:4a:8e:5c:40:84:55:75:a4:da:1b:da:d8:1d:
11:ed:99:95:17:c7:ad:1b:7a:45:cd:cc:2e:39:d4:
90:91:3a:31:49:02:71:aa:45:b0:f7:70:0d:60:c0:
53:fb:f7:4b:34:df:f1:08:fb:e7:1d:3b:c3:8b:3c:
a5:0a:79:3a:36:01:2b:5e:dd:89:f3:25:76:e8:70:
7f:84:ae:27:c7:88:53:b1:43:f2:c8:ac:34:52:97:
25:e0:93:13:2c:3d:d0:b0:f3:9c:61:70:30:8e:93:
a0:50:3d:0e:c8:b6:f1:b3:60:9a:bc:60:1c:01:23:
cf:b3:e1:af:54:13:bc:02:50:a8:e5:2d:cd:fb:db:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:15:C5:9D:EF:02:A9:F4:A3:71:C0:2C:4A:5D:73:BF:22:92:70:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5da0b497-6f67-3eea-8f22-0221b4fa1918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.82.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:10:1f:ac:9e:73:84:21:9b:c3:17:fc:24:1d:84:48:8c:f4:
59:ae:8d:ab:ce:d2:76:52:24:88:f8:34:13:26:9f:fe:aa:ad:
01:20:3b:b4:8d:35:47:24:04:7d:e9:6d:56:a3:cf:83:d2:d1:
64:bf:99:dc:81:1a:e8:61:12:3e:e3:41:e9:13:50:04:53:c7:
dd:57:33:ef:43:cb:76:3f:3e:77:17:0d:d2:70:b4:b0:c6:44:
5c:ab:4f:17:c9:d0:96:6b:62:13:54:a9:47:08:53:f9:b2:de:
bd:b6:56:61:03:23:73:31:e9:1a:2a:ce:dd:09:d1:71:3d:29:
6c:3c:1b:16:c1:84:cc:3e:ce:9a:2f:b9:ae:c0:da:80:5c:78:
81:da:ff:7e:b9:8b:b3:6e:eb:36:82:3e:46:53:7f:43:75:b1:
0e:a0:ca:34:13:88:7f:dc:71:4c:cd:89:cc:2e:47:77:b6:f8:
43:c9:b1:62:0a:45:0d:c8:cc:37:5b:c8:0c:6c:50:f1:61:d1:
8c:bc:7f:22:db:95:0c:db:52:95:e9:c4:45:1f:d7:8f:55:1c:
d6:2e:e9:66:c8:31:11:a7:8c:8c:8c:60:3d:9a:ad:bf:c8:0f:
0a:50:04:6e:cf:88:d5:70:6e:9f:90:8c:6e:92:27:44:98:fd:
e2:9a:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:53:10 2025 by rpki-client