Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec22983-ce16-3925-90b7-12cbba2d6e6e.roa
File: bec22983-ce16-3925-90b7-12cbba2d6e6e.roa (raw, json)
Hash identifier: LXW2ytQd/mP0u3TLKVs1nW/SnZAq58Vykrv2KQQz5hM=
Subject key identifier: 6A:A1:72:AA:71:8D:A8:3D:DD:7B:77:19:FC:43:19:A7:0D:8C:FD:1B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CA83CBD53E6F228C9E380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec22983-ce16-3925-90b7-12cbba2d6e6e.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33657
IP address blocks: 68.85.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:a8:3c:bd:53:e6:f2:28:c9:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=3a452534-6532-48c5-af55-e8f2f4ae1f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:9e:b2:de:c4:80:60:40:a6:44:f3:ea:23:
63:6a:fe:06:99:64:ff:75:47:43:11:14:4d:54:c9:
67:44:01:ad:0b:dd:00:39:79:d7:dc:57:1f:78:b4:
e3:95:e3:3f:10:75:58:ab:24:cf:2d:54:ce:f4:7c:
6d:61:53:ca:63:ae:7a:c9:36:41:a9:d5:26:cb:73:
1a:15:80:37:c6:41:2c:22:e7:38:cd:1e:39:7c:ee:
82:f2:ab:5b:97:67:af:4d:ce:60:03:e1:1d:42:bb:
5a:bc:41:01:49:c1:c7:30:32:79:bd:8d:90:12:23:
7a:64:98:7b:1f:56:ef:b7:db:2b:4d:4c:7e:9b:37:
1d:a2:2b:c4:82:c0:99:84:27:e6:1a:76:fc:83:c8:
ab:f0:b4:55:a0:bd:6e:9d:ef:76:19:7e:66:fe:c5:
1f:21:21:db:c7:e0:6b:04:41:e2:a6:93:d9:1f:0a:
b6:67:b4:0a:c0:3f:e8:b0:1b:36:cd:1b:59:af:1c:
4a:03:73:b7:28:3e:38:ba:61:de:46:d9:44:77:25:
82:d4:ab:bb:52:ea:75:3c:43:7b:23:fe:e1:8a:7e:
5a:17:f0:07:4f:bb:ef:bf:04:cb:64:e4:74:ac:30:
2c:16:5d:84:7b:98:85:7b:fa:27:16:0a:03:e6:7d:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:72:AA:71:8D:A8:3D:DD:7B:77:19:FC:43:19:A7:0D:8C:FD:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec22983-ce16-3925-90b7-12cbba2d6e6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.85.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:62:ef:d2:59:ac:08:6b:c5:f9:45:8a:7a:46:c3:59:e3:87:
da:42:25:5c:02:8c:f8:50:9b:cc:61:b9:53:8c:48:6b:b4:7d:
42:9f:f4:5b:97:db:b5:45:58:fb:8b:9b:66:93:90:46:74:0b:
e1:04:d3:9f:69:ce:6f:e9:73:3a:0e:8b:2e:2b:5f:5d:34:22:
cb:1c:d7:c6:19:bf:6a:82:a7:35:66:4b:9f:c8:ab:c9:fe:28:
d0:cc:19:55:9e:4c:ad:80:d2:f3:99:f4:a3:d2:8f:c5:71:61:
b8:21:88:31:47:c3:be:9a:79:0c:13:b4:a6:fb:7e:cd:98:5f:
79:e2:58:28:3c:4a:26:dc:53:0f:98:a2:1d:04:fe:26:d3:41:
d5:52:07:b1:ae:9f:3a:b5:b7:71:c1:8d:ac:7b:58:95:4a:a8:
82:ec:24:6d:26:b6:aa:7a:c4:d6:c3:a8:6f:00:17:a0:ac:36:
3f:3a:0a:ca:89:ff:9d:9c:1e:8c:e4:d0:40:d8:d1:10:da:9b:
1b:99:d8:fe:73:f1:b5:68:50:bf:5b:d3:27:06:d8:65:7e:b4:
22:d0:f9:4a:06:92:65:ce:bb:aa:af:4c:5b:cf:e5:df:eb:c7:
b4:26:15:36:c9:e7:17:44:7d:e8:c4:5d:54:b1:6c:e2:9b:75:
61:b9:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:12:05 2025 by rpki-client