Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d096c0ae-f3c3-36ad-861d-2ca8a6aec838.roa
File: d096c0ae-f3c3-36ad-861d-2ca8a6aec838.roa (raw, json)
Hash identifier: PNye0IE325Tr3nCYj5m6Py6vJ3ibws6EIEDnOu835KM=
Subject key identifier: 0E:BC:B3:B2:5B:9F:0F:E1:AE:9E:5A:67:D7:D6:8A:D1:15:82:4F:5B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B4F01B04D14A38EBC4140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d096c0ae-f3c3-36ad-861d-2ca8a6aec838.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.36.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:4f:01:b0:4d:14:a3:8e:bc:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=25589010-edfa-48cf-845e-0b16159388b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5f:ba:f6:75:11:c8:92:0c:e2:60:9f:e4:56:
5a:f0:ca:f6:9d:f5:05:6f:e4:4e:52:d0:15:24:86:
b6:4f:c0:1b:58:f2:97:90:72:e0:17:92:83:77:10:
5a:14:9e:88:5d:b7:d3:8a:09:94:83:92:19:cc:87:
07:9e:82:f1:22:3c:f9:dc:da:f9:b5:f0:58:5d:8e:
5e:f4:78:f9:eb:02:73:0b:bb:2c:19:5b:10:d5:78:
62:d1:54:8d:a8:07:1f:2a:f1:d6:d6:01:f2:3b:bb:
fa:02:68:4a:10:ba:cc:dc:cc:27:c7:ee:9e:9e:a7:
53:17:a6:03:82:24:a9:6f:72:a6:59:a7:51:09:92:
66:1d:80:ce:0a:bb:6c:4c:c0:95:cd:0d:29:00:0f:
4b:1d:27:b7:e7:97:b0:5c:92:34:43:ad:ef:ee:00:
38:a7:a1:4b:e0:db:c1:67:d4:41:74:63:45:1e:85:
52:47:55:35:6f:ef:6b:0d:3e:23:3f:cb:8a:ad:5d:
76:a9:62:32:36:07:e9:bc:d8:46:76:dc:f6:91:74:
d0:d6:50:59:a9:29:4f:3d:a2:a5:1f:02:d5:d3:d8:
2e:d2:39:c6:04:17:31:5d:3d:38:56:17:5e:75:3b:
05:1a:6d:e9:37:9d:c9:fb:5d:25:1e:fa:b5:6d:12:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BC:B3:B2:5B:9F:0F:E1:AE:9E:5A:67:D7:D6:8A:D1:15:82:4F:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d096c0ae-f3c3-36ad-861d-2ca8a6aec838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.36.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:50:17:fb:e5:d9:4e:91:5a:e8:8c:06:e1:54:f7:10:fe:a0:
c8:a3:46:89:8a:9b:9e:b3:b6:37:60:51:07:98:e3:ba:74:6b:
84:1b:41:9b:4b:73:f7:34:b1:f2:0d:41:8f:31:c1:dc:c5:56:
8e:17:92:ad:d3:d7:d4:47:9e:e6:fd:9e:1a:f8:8a:9b:90:b0:
52:0f:9a:6f:a3:3b:30:ad:44:14:dc:31:87:35:52:8e:57:b4:
d3:b6:2b:57:4c:e4:ce:fe:f6:82:ca:ad:c1:40:11:f0:8a:90:
eb:1b:5f:54:d2:45:f2:9e:d8:c6:85:10:e9:dd:45:e8:a3:18:
3b:07:07:32:cd:74:3f:a3:7b:47:36:d8:f5:f0:5b:0a:a5:4c:
c6:d7:3a:08:12:a3:31:b0:d7:ff:b9:64:f1:21:92:93:84:b7:
3c:1e:47:13:ef:c3:ef:f3:9e:6d:03:66:ec:e1:d6:db:e8:90:
1a:e4:7e:fb:3b:83:90:52:51:6a:d9:46:b9:37:fe:21:95:93:
d8:26:8c:5c:ad:24:d6:ca:2c:03:bb:e2:cb:6e:c5:e6:93:cb:
59:42:80:00:a9:38:c7:d8:87:dd:b2:f6:3c:8f:6f:de:42:b4:
40:8e:7f:8e:33:b6:14:27:f1:dc:31:4c:8d:f4:bb:da:d7:32:
9e:8e:92:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:37:56 2025 by rpki-client