Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3a60b84-ca71-370d-baff-625136a9afc9.roa
File: a3a60b84-ca71-370d-baff-625136a9afc9.roa (raw, json)
Hash identifier: vFBlP9NRgxFzL5sb43KkjDV6qectucYHyXg7nVctwmw=
Subject key identifier: D7:DA:84:0C:9B:E8:C6:1A:D1:B2:2A:42:13:09:99:5C:87:C6:AB:55
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10EC4F22DBF0721EB69520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3a60b84-ca71-370d-baff-625136a9afc9.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.60.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:ec:4f:22:db:f0:72:1e:b6:95:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=bec1cdbf-8858-4605-aad0-922557ecc0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:f9:0a:4e:d3:15:ac:6c:af:f6:69:1e:fc:
5b:8a:1a:d3:af:85:ad:1d:d0:06:ac:c9:b7:ac:d0:
03:f5:f0:0c:6b:d5:ae:29:60:d4:52:69:25:78:ec:
e5:89:24:a8:81:34:96:17:ee:7f:2e:8e:16:ee:fe:
38:f4:ca:b7:c5:55:1b:8f:9f:3f:b5:cb:c2:e2:f7:
4e:27:bf:0f:01:44:15:34:60:9b:d0:80:57:48:c1:
84:d0:c5:3a:f4:97:04:de:fe:12:e8:ca:5e:a1:c3:
ff:57:c0:24:c8:1a:16:58:2d:6b:d7:1c:90:a7:8f:
7c:64:98:1a:f0:1f:3c:c0:f6:3c:1a:05:76:96:aa:
1b:de:bc:15:16:1a:58:42:6b:5a:d6:17:86:39:2b:
7d:f4:74:05:dc:15:1b:07:8f:9a:6c:39:dc:8c:05:
c2:47:2a:43:ed:ae:2b:90:5c:37:11:29:67:d1:33:
c5:3f:51:e0:35:76:b1:ce:e1:bc:85:9d:90:61:ec:
10:8c:fd:54:d2:3d:8d:24:9f:8c:b5:d9:4f:40:f2:
b0:d9:43:2e:10:d7:e5:c5:48:3e:c2:ab:73:c6:7d:
0e:87:7c:54:c1:ca:66:9b:d5:f0:79:62:ba:6a:c1:
db:7f:0e:81:c7:40:ce:89:9c:5a:9e:c9:ce:f0:f3:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DA:84:0C:9B:E8:C6:1A:D1:B2:2A:42:13:09:99:5C:87:C6:AB:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3a60b84-ca71-370d-baff-625136a9afc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.60.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:9f:fc:26:24:4a:ee:bc:e1:d0:50:1e:7d:b5:35:c6:37:87:
10:2a:19:1f:d3:be:26:a4:f1:32:a6:89:4b:e5:0d:e5:8b:14:
67:df:9b:54:b8:bd:c8:48:0b:7f:f3:0d:bc:63:25:99:37:a8:
6e:22:98:0c:09:82:aa:37:ee:4e:d2:9b:f9:f5:72:d3:57:07:
8d:78:47:d5:06:41:2b:3a:77:cf:02:23:80:f4:ef:37:06:0f:
56:3f:b0:7d:27:76:2a:ca:1c:50:25:5c:80:25:95:2b:6f:41:
88:92:15:cc:d3:4f:fc:3c:82:5c:91:37:97:97:e3:67:69:c2:
75:b2:57:e5:3e:02:49:f1:6b:ef:d7:1a:af:44:26:25:2a:40:
42:f1:6f:cf:a4:4b:5a:f7:ff:a0:66:e8:84:3b:2d:a8:c5:d6:
bf:00:1a:8f:f2:42:c4:c0:ba:e3:2c:aa:2e:cf:b2:8a:d4:b7:
e2:ec:7c:b3:a0:0e:65:20:4e:32:68:04:f1:be:37:99:e9:de:
78:da:ac:f2:1d:92:5c:69:7f:20:93:8c:61:e2:85:4a:b6:64:
76:dc:71:a4:24:ff:02:6f:f0:96:6c:97:c5:24:d9:bc:36:6f:
14:07:89:ef:93:98:ed:75:62:25:e5:a5:77:70:ef:26:9d:38:
f5:5f:75:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:57:53 2025 by rpki-client