Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a06f9d21-4ce6-3d81-9fa9-cda61bb30bd8.roa
File: a06f9d21-4ce6-3d81-9fa9-cda61bb30bd8.roa (raw, json)
Hash identifier: in8e4PoJfe1KUONb7T4XYcDEUmTLjOpLUKmAXMRQmD0=
Subject key identifier: 4F:B1:92:51:88:F5:12:C0:42:8F:7B:06:AB:44:01:AC:8F:4F:56:1A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F3988A2FBFF56DCC47C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a06f9d21-4ce6-3d81-9fa9-cda61bb30bd8.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.43.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:39:88:a2:fb:ff:56:dc:c4:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=3c7ec59d-84f2-4944-8086-05d2a81211ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:78:5b:55:74:a0:c6:62:42:76:d7:09:63:
f8:98:dc:61:2a:fb:76:72:75:28:84:13:c1:a9:6c:
51:c6:b0:16:87:35:2d:3e:43:c5:44:0c:5b:52:0a:
4c:e1:cd:b9:a4:9e:3c:45:00:e0:94:15:d2:78:16:
6d:43:e8:0b:eb:3e:ec:39:51:2d:71:b2:1c:e0:1a:
5e:2e:01:f8:5e:94:91:fa:7f:9d:ca:a4:57:02:41:
26:a8:15:d6:e9:87:01:9c:2f:2f:cf:90:1d:53:4c:
6e:81:79:e8:b9:d2:af:f0:df:43:cb:19:42:0b:35:
85:f3:8e:29:13:cd:59:ac:cc:c8:0c:bc:cd:4a:cd:
d3:6e:22:cc:a6:12:75:d1:f2:95:fb:b8:f4:bb:3d:
4b:02:77:55:e5:bb:59:e9:26:e5:77:52:c8:f2:f4:
cc:d9:e4:b5:75:ab:60:98:4c:65:7d:ee:cd:8c:70:
8a:9b:e3:03:dc:15:87:c1:5f:21:be:93:8d:e7:02:
ba:35:18:0d:69:8a:a8:f1:82:3b:1a:00:b1:64:6d:
76:76:ad:09:d5:5f:f4:79:7f:b9:65:5a:10:14:4e:
3e:34:4f:4d:fc:c5:87:1e:a5:f5:e3:55:94:03:c8:
7b:e5:25:74:94:76:58:44:92:7a:e0:f6:d6:87:45:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:92:51:88:F5:12:C0:42:8F:7B:06:AB:44:01:AC:8F:4F:56:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a06f9d21-4ce6-3d81-9fa9-cda61bb30bd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:d4:46:1a:2c:3e:c0:c9:00:f2:95:4d:97:3e:3e:b2:bc:58:
5f:46:b3:7c:f4:4f:90:e3:0a:ed:0c:0f:60:93:2e:fd:8b:f7:
fe:d1:27:3e:36:16:a3:56:5e:47:ae:d2:b2:ea:34:61:15:a1:
16:ee:52:0a:1a:69:7a:d9:ff:20:e3:05:e4:d7:df:40:b9:06:
1a:67:ac:7d:43:2e:ee:62:4b:b9:0a:a0:8b:ab:d8:5c:b3:90:
7e:6d:fd:06:ba:2d:84:4a:7b:7e:95:f5:fd:d2:84:25:e7:11:
2e:11:63:ef:71:87:a7:ff:2f:13:6e:c4:8b:ee:94:30:11:45:
73:81:ea:50:d7:92:be:07:0a:6b:ff:ca:84:7b:27:b0:31:9e:
c5:9c:48:86:bf:f0:bc:56:bc:5a:5e:62:e7:b8:a5:34:70:2a:
3a:52:df:94:07:40:e7:43:05:71:0d:dd:26:7e:27:47:a3:93:
53:b6:d4:4d:ad:5f:33:a5:d7:8a:cf:cd:7b:bf:87:8d:40:a3:
22:91:d4:c2:86:f1:3a:8a:09:d0:94:d1:e8:2a:3c:d7:56:4b:
bb:01:40:66:b1:e0:75:be:6e:22:32:35:5c:2c:96:f1:15:19:
b1:d8:a8:c9:d4:03:bc:c4:3c:5e:f1:1d:dc:d4:8e:ee:28:ac:
05:34:db:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:13 2025 by rpki-client