Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81b426c3-a88e-36d9-b797-a1ccb149769c.roa
File: 81b426c3-a88e-36d9-b797-a1ccb149769c.roa (raw, json)
Hash identifier: ZKDgnWDu1bk5GIeP+4MV9OLsFuIyFd0ymwdmgKlzp7U=
Subject key identifier: FE:B1:65:05:ED:AC:A0:F9:C7:FD:5A:23:8E:B1:6D:0E:03:1D:F5:72
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F310E9BAC8BFB80FF9D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81b426c3-a88e-36d9-b797-a1ccb149769c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.41.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:31:0e:9b:ac:8b:fb:80:ff:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=d83088c2-e25f-4fe3-b61b-d621678ead58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:d8:31:b5:08:9c:a1:92:40:3a:a2:07:b7:
03:dc:f1:b9:97:9d:35:13:4e:20:e1:21:dd:a4:b1:
44:36:b6:b7:ea:f8:20:df:a7:62:d4:e1:33:fe:19:
11:71:4f:e2:4f:5f:db:cf:dc:8c:19:b2:54:a8:53:
21:91:5b:fc:21:f4:88:11:8b:79:db:5b:b5:ce:c9:
c8:4e:ff:2b:02:f6:e0:c1:15:bc:4a:12:0f:bc:eb:
45:bd:0e:26:f7:a5:43:15:f6:33:cd:7f:fc:ed:30:
5f:c5:21:c0:3e:8b:79:44:0d:c3:75:4e:10:77:f6:
bc:de:ba:d6:9f:12:4c:50:26:eb:27:b9:fe:74:b9:
ca:96:ad:b1:a7:5e:2a:0b:ef:a7:24:4d:77:f0:49:
47:3a:6c:0b:e7:37:f2:a5:58:88:f0:b8:e0:0f:8e:
8f:78:7c:4c:18:71:95:e9:5a:2d:b9:7c:9d:19:c9:
d3:cd:00:73:f4:1c:c7:56:60:5d:5f:96:5e:90:85:
52:0d:99:7e:93:34:2c:82:a9:9b:25:3e:94:9d:9b:
bb:65:50:7c:0f:3a:07:25:cb:59:36:62:18:63:d4:
ef:62:6a:34:70:81:3c:32:fb:23:57:1d:6a:0c:83:
36:dd:f5:db:9b:ac:a9:7d:58:04:8d:07:78:1e:6c:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B1:65:05:ED:AC:A0:F9:C7:FD:5A:23:8E:B1:6D:0E:03:1D:F5:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81b426c3-a88e-36d9-b797-a1ccb149769c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.41.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ba:f0:32:32:e5:41:97:7e:29:95:8a:b6:d8:21:be:03:68:
9e:f6:76:e8:5e:9a:dc:2f:21:98:58:f3:d6:c1:7c:81:fd:6c:
41:d4:e0:bf:65:22:bb:ce:99:70:f3:8a:25:b2:b2:69:9b:19:
b5:b7:ac:f9:f0:a1:20:18:99:64:dc:fe:07:5b:fb:48:bc:4e:
59:da:fc:77:cd:c3:d7:23:dd:89:68:95:e5:3e:3c:7b:fd:29:
f6:b2:18:24:e9:e2:4a:fb:54:f3:62:bc:f0:24:dc:d2:64:1d:
e9:91:df:5d:33:cc:3a:1c:3a:1b:99:ca:57:1e:1c:09:d8:f5:
bd:d2:fc:41:18:4a:73:37:4b:7d:d1:62:4d:ba:c7:84:95:72:
3c:99:87:42:ef:09:9b:a0:5d:8e:cc:85:95:e4:8d:cd:3c:46:
d1:97:71:42:0f:83:ea:aa:63:a5:e7:d9:5f:79:89:50:48:ce:
91:17:e7:66:f9:e4:db:f9:8e:d6:a0:16:6c:1a:ad:97:ac:10:
59:66:d8:ef:2e:bd:80:c9:49:cc:e7:92:be:80:c3:38:a6:13:
d5:0b:a6:90:9d:4a:8c:51:3a:0f:ed:e9:df:8a:ae:0c:28:af:
46:46:dc:83:47:0e:24:0f:34:18:4b:4e:66:2e:68:77:ff:14:
00:3c:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:16 2025 by rpki-client