Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b13ce078-d567-3633-8f1a-620e8ccbe3c6.roa
File: b13ce078-d567-3633-8f1a-620e8ccbe3c6.roa (raw, json)
Hash identifier: Icx+L0xc2nCBcL8RoYy39mEGV+b2ZMtu/FyC5UZMu7E=
Subject key identifier: 51:48:66:2D:23:F5:21:E5:A3:CE:C7:C1:2F:B4:B2:D0:F3:A9:5A:E9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B6172D8ACE7087F2BA880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b13ce078-d567-3633-8f1a-620e8ccbe3c6.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.55.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:61:72:d8:ac:e7:08:7f:2b:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e68ea687-8766-4109-ba97-6c0cbe2e2017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:fd:fa:4a:b0:03:a9:35:8d:53:36:9c:c4:
dd:30:e1:4c:57:a1:b1:05:50:04:ad:b3:8b:a4:03:
61:3e:41:6f:be:0e:84:d1:74:76:1f:07:c2:ef:78:
92:8e:83:79:9a:18:9b:e8:a4:a8:28:87:70:7c:5c:
82:59:2a:d7:5f:24:eb:2a:34:74:9b:d5:cb:ae:73:
9f:23:63:f2:f6:8b:da:e7:8d:56:4e:88:79:57:57:
c9:60:80:cc:50:49:b5:b5:07:17:76:f0:e0:52:de:
5a:7a:af:62:24:42:e9:ad:f7:1e:db:13:75:40:6e:
c3:82:06:e4:96:38:47:e9:22:79:cc:48:b7:cd:c5:
3e:d2:92:6b:1b:c3:d3:21:b8:d9:89:ee:82:bc:0b:
0f:e7:96:0d:c1:42:e2:38:f3:6a:1a:18:19:24:ce:
e4:6e:c8:81:08:2f:ca:87:9f:5f:49:53:64:2b:d7:
f4:c0:8c:e2:44:fd:6f:04:d7:7c:92:aa:25:9c:ca:
c4:e4:e9:16:b7:66:94:5b:45:0c:bf:6d:75:42:03:
24:a9:c3:9b:53:af:0c:32:f4:51:53:15:4e:4f:90:
0b:c2:ad:a7:69:28:87:36:e3:c5:f5:80:44:f2:f6:
81:58:75:07:d0:da:68:d0:fb:78:a7:2c:06:e5:dd:
f3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:66:2D:23:F5:21:E5:A3:CE:C7:C1:2F:B4:B2:D0:F3:A9:5A:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b13ce078-d567-3633-8f1a-620e8ccbe3c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.55.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:7a:98:36:33:5d:c7:78:8d:d2:94:55:5a:78:83:00:e3:08:
a6:0d:85:14:9a:24:e1:87:bb:0a:28:60:59:66:48:85:77:ff:
a4:5a:98:ed:fb:19:53:af:88:2f:b7:d1:23:5a:e3:db:be:af:
f8:58:3b:02:33:b2:2f:72:cf:2a:c6:dd:d5:4a:7c:1c:78:65:
45:aa:82:ff:7a:9f:ad:68:ee:92:76:3d:2b:c4:10:01:11:9b:
6e:d1:79:8a:b0:2f:d1:db:9c:4c:65:a5:e1:c8:a5:94:4a:e3:
13:8b:f7:10:cf:53:17:12:48:5a:5a:d8:59:6e:70:cb:bc:b0:
df:f5:d9:d0:88:73:98:95:88:a3:5b:8b:7b:f3:0a:0f:26:90:
1b:0a:7e:c8:9e:c8:7b:99:cd:1f:05:0e:a3:54:0f:e7:65:87:
46:6a:d8:95:9d:61:2b:3a:ce:79:8f:cb:f2:b5:2a:2b:8a:af:
3a:79:e6:11:70:db:10:5f:79:ad:22:e3:52:d2:48:94:64:1c:
bd:71:c5:b3:21:ca:9e:5a:8e:ee:bc:fa:68:a7:82:0b:44:ed:
5c:27:f9:a1:6d:58:19:b3:6d:52:3c:78:35:83:d9:04:78:7f:
7c:76:ac:5a:2d:36:e5:01:e0:4f:58:81:82:5b:76:2b:75:31:
71:12:a4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:58:54 2025 by rpki-client