Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6625461f-d7f1-306d-8608-fd485e5ec7b6.roa
File: 6625461f-d7f1-306d-8608-fd485e5ec7b6.roa (raw, json)
Hash identifier: bnlr3dI7dw3fITL7YOy5JuV8w1RSV6jBaImvhYoNnbk=
Subject key identifier: 96:89:6E:D0:43:1A:DA:11:D1:01:8C:95:AA:C5:94:28:5F:E0:2A:98
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B61D3EAD3D1D307721E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6625461f-d7f1-306d-8608-fd485e5ec7b6.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.55.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:61:d3:ea:d3:d1:d3:07:72:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=498c5c4d-7bc2-4095-bdb9-70846770b831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ce:40:76:de:e0:3e:80:df:ee:20:61:90:28:
1f:e5:c8:2e:4c:d6:23:3e:fd:e3:40:fb:ac:5d:1a:
2d:a5:bd:c0:4b:10:21:bc:cb:e6:94:bd:cf:19:15:
c8:2f:75:3d:24:9e:65:f5:1e:71:b3:de:6e:f7:38:
fa:41:5b:58:2b:59:77:e8:46:ee:80:9c:12:13:c6:
dc:fe:c5:d5:c5:de:c7:7c:37:8b:a3:91:ff:e0:b7:
16:d1:2d:72:2c:93:23:d2:b1:89:a4:ad:75:ad:c8:
ae:1d:c4:4c:09:bf:15:9d:68:3a:61:eb:6f:05:f7:
14:17:4e:08:aa:b2:9f:2b:20:e6:cf:94:cf:7c:19:
1e:88:91:67:24:04:32:49:5b:d9:5d:e0:ec:f0:96:
a9:83:a6:55:80:15:ee:69:14:cf:20:f6:b2:96:90:
2b:8c:7b:24:34:b5:ef:89:58:86:87:64:19:a5:c8:
cb:ac:ee:08:f2:59:a1:e7:f5:a5:b8:d4:13:b3:7a:
14:72:1a:0a:04:c3:3f:29:0e:db:39:74:56:29:63:
04:23:5c:b7:4f:51:5f:ba:12:17:09:d5:7b:ae:c1:
4e:df:b7:3d:f5:90:6e:b8:39:42:14:e2:03:66:ae:
f5:39:91:85:73:87:1c:6f:a9:85:62:20:8f:c8:ef:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:89:6E:D0:43:1A:DA:11:D1:01:8C:95:AA:C5:94:28:5F:E0:2A:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6625461f-d7f1-306d-8608-fd485e5ec7b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.55.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:57:5d:d5:fd:8e:d1:59:6b:96:84:7f:07:9d:8a:11:49:18:
41:e1:db:f2:db:aa:17:23:aa:6a:53:e6:7a:30:fe:d7:9a:a8:
3f:ca:ca:37:0e:e3:52:ec:63:5b:56:12:90:75:11:88:34:b3:
44:62:ec:8c:53:40:84:78:4c:ce:f1:dd:5b:ea:a6:a6:a2:4e:
b5:d5:bb:d0:a5:e9:a0:7f:31:06:14:bb:33:00:53:3e:96:60:
dd:e5:58:c5:4b:47:e9:ac:90:e7:87:5f:15:bf:bc:ef:77:ed:
66:01:f4:91:f5:ac:14:56:e3:62:31:7d:0b:08:0a:cb:b5:23:
a7:b0:d7:17:60:80:d1:2b:1f:8e:30:8b:30:2f:94:ff:f7:81:
40:d3:cb:f3:b7:f0:59:90:f0:79:52:b0:85:a3:eb:42:12:e6:
86:e1:6d:3a:5b:1f:e6:52:d6:b7:7d:bd:9c:44:c5:b4:d5:f0:
0a:c3:99:b1:c9:45:a5:44:5d:1c:04:fb:2e:50:d5:25:97:63:
06:05:dc:83:f9:2c:6c:bd:fa:ba:ab:70:b8:12:b9:b8:e6:fc:
8c:88:fa:e9:8e:bc:17:bc:56:fc:2c:de:84:d1:86:1d:38:22:
ce:e3:f9:7a:d1:55:09:01:cf:6f:fc:fe:76:ba:5f:cb:eb:ae:
5b:20:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:57:51 2025 by rpki-client