Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c037e974-4bfd-3cc8-a63b-fd822335b17d.roa
File: c037e974-4bfd-3cc8-a63b-fd822335b17d.roa (raw, json)
Hash identifier: aFVsp0/8yEpHprCbNbacMe+15BvqikS4MvtHFt2bb8o=
Subject key identifier: F7:AF:92:87:68:9E:DB:C6:1C:2F:BA:5D:4C:81:AD:A0:7E:78:FC:62
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F1DA63E2896F4E8780400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c037e974-4bfd-3cc8-a63b-fd822335b17d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.36.116.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:1d:a6:3e:28:96:f4:e8:78:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=6ae1a3d2-e8b1-451d-8209-c81f812b9d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:58:e4:d7:da:25:a4:ca:3e:72:3a:09:16:
ce:17:af:0a:d4:48:5c:4b:2b:3e:cd:3c:e8:da:1e:
22:d0:2b:a9:00:b9:6e:f5:b4:58:44:7d:d8:fe:2c:
9b:05:5b:e7:3b:cc:2a:c7:a4:7e:68:63:07:2f:80:
97:df:50:12:4c:33:56:81:05:cd:87:30:f9:15:75:
ab:48:36:12:86:c8:d5:10:5d:bc:2b:2a:a9:5f:c5:
39:60:df:0b:ea:fb:78:43:b0:bc:48:a9:28:0d:e8:
82:52:9f:f3:38:37:88:9b:ba:84:42:95:47:ad:60:
53:ac:10:90:7a:dc:c7:30:55:7b:75:9a:68:20:8c:
d2:64:92:46:7e:31:e5:65:e4:e8:66:c5:2d:85:3b:
69:38:05:de:82:6f:07:bc:30:93:db:f6:61:b6:48:
79:85:46:f6:39:92:ae:c8:2a:37:20:d5:d7:06:0f:
1b:15:9a:18:c1:4e:fd:5b:28:fe:c7:43:31:3b:8d:
59:3b:25:41:aa:bd:01:dd:fd:f8:9d:9e:df:da:f7:
99:f7:8b:0f:01:71:0a:88:55:5d:b3:80:46:79:03:
39:ba:66:6d:42:08:5e:9b:ee:b7:b7:e1:0c:e4:bd:
b8:3c:ad:34:68:d9:68:47:6d:69:e0:c1:56:43:86:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:92:87:68:9E:DB:C6:1C:2F:BA:5D:4C:81:AD:A0:7E:78:FC:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c037e974-4bfd-3cc8-a63b-fd822335b17d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.36.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:b5:b7:b6:82:61:c2:11:8c:3d:cd:88:af:b4:18:6d:79:37:
fd:04:f6:eb:f9:21:e7:5b:88:8e:0d:ce:87:6a:4c:ba:49:34:
42:21:5b:5e:09:f9:f2:5a:bf:ab:1d:51:96:e7:a2:1b:2a:05:
89:7b:70:36:1e:fc:12:04:24:25:8b:48:51:bd:27:8c:4e:42:
45:53:3d:85:8d:89:01:f8:e4:bf:fe:66:64:2e:6a:22:6a:14:
31:07:96:c0:4f:0e:9e:83:85:c7:f4:47:c3:a9:f6:6f:87:3d:
91:4c:6f:a3:13:ad:83:10:99:04:ef:d1:73:d8:e2:c7:17:10:
6f:d5:bd:40:d4:b2:61:a1:f9:f1:04:b1:9a:d1:7d:a9:e7:f0:
27:5f:ee:08:9d:fc:c0:43:ab:c7:8e:e7:5e:33:f3:50:50:34:
be:b8:3d:29:ed:61:63:f9:d6:86:49:f5:60:d5:6c:61:42:1c:
39:c0:c9:ac:1c:16:91:43:9a:2d:7e:db:8b:a7:b5:73:8c:11:
ca:36:8e:49:4e:04:b1:72:e4:34:fe:c1:55:6f:a9:55:71:aa:
d2:d1:26:29:86:15:f1:10:ad:3a:ed:25:7e:45:aa:f0:74:d6:
cb:4b:4a:9a:56:34:07:4c:b5:71:78:72:5b:34:f5:63:f4:1c:
e4:49:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:32 2025 by rpki-client