Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a53543be-c8bb-3b6f-bb3f-0996b59d6f7b.roa
File: a53543be-c8bb-3b6f-bb3f-0996b59d6f7b.roa (raw, json)
Hash identifier: fTTraGCbjJ0J2IiGCdJYXREKFEq0+EBorafCH4ROgvA=
Subject key identifier: 2A:3B:BB:FA:96:8C:23:D4:3D:09:64:94:D0:37:F8:6A:6C:CE:20:6B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B4CE64D9015D3BA0854C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a53543be-c8bb-3b6f-bb3f-0996b59d6f7b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.34.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:4c:e6:4d:90:15:d3:ba:08:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=35982c00-846c-43da-abba-2124f9465c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:d9:5f:75:73:08:17:49:40:b9:15:63:c3:
62:16:ce:2d:fe:d9:ac:31:19:e1:d3:60:46:3a:1e:
f6:9f:3b:1d:c5:48:b3:90:9c:50:87:7d:b0:bb:f7:
bc:29:04:48:ad:aa:eb:00:77:5a:ff:f1:75:50:7e:
7d:56:ec:29:da:85:12:10:4a:17:7e:81:d6:88:27:
1a:b0:bb:9b:a9:32:fd:63:06:7a:ca:4f:4d:a8:5c:
23:3a:6a:d8:8c:84:dd:4b:bb:81:07:15:27:b5:e0:
a5:da:20:74:9c:f8:53:e1:20:56:ff:ab:f6:f9:6e:
d0:93:0c:fb:d8:f1:a8:1a:e1:5f:18:a9:be:7f:fa:
1f:b1:fe:26:44:66:7f:1a:6d:a4:bc:ba:5c:29:20:
25:b0:12:3e:ad:05:d6:28:ea:fd:00:be:7d:d9:86:
27:68:41:a9:d4:f8:19:fc:53:1f:84:6b:db:b0:0d:
5d:cd:4a:61:e2:2f:4f:51:64:22:b3:17:34:38:0b:
f5:2f:6d:d0:00:e1:8e:23:a1:ee:dc:03:d5:2f:25:
f7:d5:2a:a7:37:33:65:9e:27:1b:5e:a3:78:0b:7d:
34:36:46:9d:18:b3:3b:ab:00:cd:7d:6a:a9:c5:5a:
ab:0e:8f:2f:49:fe:0d:66:58:01:bb:f3:42:05:16:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3B:BB:FA:96:8C:23:D4:3D:09:64:94:D0:37:F8:6A:6C:CE:20:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a53543be-c8bb-3b6f-bb3f-0996b59d6f7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:db:1a:7d:bb:25:77:7f:f3:82:50:09:db:84:39:76:07:f7:
08:8c:f6:4d:02:42:fc:04:fd:be:63:28:6b:bf:d3:89:f5:34:
5f:01:3c:04:b3:cf:b9:99:75:74:f8:44:ee:30:18:c4:b0:2a:
ad:a5:8b:74:d2:65:4e:da:a8:0a:b2:fa:40:5e:19:0e:c3:85:
48:e5:71:9e:88:bb:ce:26:55:f9:2d:fd:86:77:3b:18:20:53:
2e:a3:88:82:dd:21:63:ee:5f:38:90:72:50:c4:e8:de:8f:33:
47:e6:05:36:4a:24:56:8d:0d:20:90:8c:5f:4b:bb:f7:b2:d1:
20:50:1d:9e:d0:30:5d:c2:4f:1a:c6:f7:7f:2a:d6:b7:3e:3b:
8a:80:7e:68:81:83:bd:ee:53:b9:12:5f:77:93:8a:5b:c1:f9:
c7:d1:1b:2c:3f:54:b3:85:a8:2d:22:0a:36:e5:0f:b8:a4:3c:
2b:bd:1c:d4:58:d5:81:bd:84:bd:8a:d7:21:f7:df:f8:40:f4:
65:7e:78:9c:e4:9d:ee:bb:0a:88:ca:15:50:d8:9d:93:a9:78:
02:a3:12:55:50:03:a2:e9:e4:33:6e:7b:bd:b5:91:2f:3b:c9:
af:bf:1c:e7:e6:17:b8:29:2b:5b:dc:8d:2c:df:74:01:1a:46:
b4:95:4b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:52:52 2025 by rpki-client