Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6d3677a-32a3-352c-842e-e56dad181b26.roa
File: a6d3677a-32a3-352c-842e-e56dad181b26.roa (raw, json)
Hash identifier: 838r3YDq1PV9QhvX2s+N0+Jsvo7XjQSa1Fx5UOrr/ww=
Subject key identifier: 3F:25:D7:B0:46:18:B1:49:A3:D0:EE:FA:26:6B:FD:17:1B:3B:10:95
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5A39C2AABAA1C4D31580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6d3677a-32a3-352c-842e-e56dad181b26.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.43.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:5a:39:c2:aa:ba:a1:c4:d3:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=168df54e-7ab5-40e5-83d5-e54598dacaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:fa:c1:0b:c5:0c:a1:5f:d3:05:32:b1:44:
6b:c8:bd:07:39:b1:3d:0f:72:36:20:df:d1:b7:1b:
f7:27:96:af:32:9f:f3:6e:27:96:d4:a8:ad:c9:19:
23:8c:9a:5a:d2:e4:b7:dc:80:2f:55:6c:0f:4f:d6:
9c:89:3d:e1:a3:7e:1b:51:41:7e:87:93:16:30:51:
e1:c7:80:41:2b:eb:07:a5:cf:2b:7b:d7:83:39:3c:
f1:0b:b0:42:a6:7d:07:03:b2:73:c9:86:46:b2:00:
eb:37:8c:02:ac:63:0b:3c:74:84:88:5d:20:1e:bd:
dc:39:1f:22:08:29:48:4a:d1:64:d0:cd:39:0e:02:
39:f0:0d:28:97:ef:2c:73:ef:5c:1a:5e:b2:09:97:
a7:72:3f:88:18:20:54:64:4c:b0:fb:bc:cd:b6:80:
c7:c8:df:a9:d3:28:7c:cf:63:05:ed:f8:ed:39:e5:
1a:d5:ca:2e:7d:1b:14:de:23:f3:da:54:93:31:7c:
49:ef:6d:f0:b6:61:a6:85:94:f0:f1:68:ff:a9:bc:
5f:83:e4:e5:e9:70:bb:d5:87:d9:50:57:0d:a1:12:
33:2e:ef:74:ac:9f:eb:0e:a7:80:ca:25:52:5e:a5:
69:04:15:d5:33:ce:5d:e4:29:d3:6d:fe:4e:0c:ed:
be:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:25:D7:B0:46:18:B1:49:A3:D0:EE:FA:26:6B:FD:17:1B:3B:10:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6d3677a-32a3-352c-842e-e56dad181b26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:4a:f8:fa:bd:fc:07:fa:e3:93:40:3c:72:75:05:a5:1d:1a:
08:3c:80:b5:c1:ae:10:8f:c9:f5:89:33:c2:b0:c7:86:b7:3a:
b1:1e:dd:f8:d1:6d:4d:f5:20:07:c0:fa:d0:31:05:a2:43:6d:
46:84:46:48:8d:66:a5:27:03:b3:dc:74:ce:70:41:12:31:19:
92:51:9e:dc:db:50:70:57:ce:25:57:1a:2c:5d:39:0d:d5:f2:
bd:03:ca:04:16:de:f6:52:23:7a:e9:05:01:f9:18:f0:b8:e1:
fb:96:b8:dd:7a:66:22:dc:0e:b2:dd:c2:a7:63:32:d5:3f:f3:
4f:7c:55:95:07:96:02:26:1c:c3:9d:65:0e:de:46:b2:de:15:
96:ab:92:ad:a2:f7:22:d7:89:63:c5:71:91:aa:f0:a1:1d:84:
6d:2b:4d:d3:45:92:e2:5c:1e:88:84:78:a4:45:76:cd:3e:12:
77:2c:4c:ea:c7:89:23:9f:10:2b:44:84:a1:83:06:a2:30:36:
3e:b0:24:8f:fd:f9:36:cd:aa:e6:2d:b3:21:bb:83:fb:f5:14:
44:89:9c:d3:ee:0a:c6:ab:6d:0e:69:53:8a:51:c1:e4:d1:20:
56:34:8f:0a:92:74:fa:a3:6f:14:cb:b3:e7:e6:1f:c4:97:20:
ae:03:13:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:46:06 2025 by rpki-client