Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcf2fa70-126f-3c7c-9813-dd41139cd6f3.roa
File: dcf2fa70-126f-3c7c-9813-dd41139cd6f3.roa (raw, json)
Hash identifier: 1336aYiR70OD8gB0cXE0cYBO6OpHVb02Wlt+Y35bcjA=
Subject key identifier: 7F:04:E3:0B:51:C6:30:6C:22:EA:2A:05:E8:28:33:A0:5D:A7:42:DE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10EAF913488D1E9D4F9140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcf2fa70-126f-3c7c-9813-dd41139cd6f3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.58.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:ea:f9:13:48:8d:1e:9d:4f:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=95b2c024-dcb6-4c6d-9616-975bfdbd1261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a1:ab:33:20:6b:aa:f6:a5:ab:e6:c6:7f:f6:
af:29:20:71:ee:98:fe:3e:99:0c:e0:79:12:3f:48:
fe:e2:77:66:a2:09:e8:4e:ee:d0:28:93:af:63:f2:
1c:38:d5:29:cb:90:ad:7c:f5:33:63:bf:b4:ce:80:
7a:cc:ae:28:4e:07:3d:17:00:e4:ef:2b:28:96:e9:
f2:f0:c5:4d:8e:82:e6:2f:a4:70:fe:36:8b:80:f3:
a7:9c:91:e5:95:d8:ff:ef:44:67:85:da:5a:bf:b8:
7a:72:36:0e:19:24:73:b8:4a:6a:df:17:72:27:24:
5d:1f:2c:70:ee:73:84:4b:78:bb:d1:0b:eb:1f:ab:
8b:5c:47:9c:04:15:56:71:f2:e0:81:9d:23:ce:4e:
89:5e:90:84:1f:0c:9d:90:fc:40:cd:2e:5a:25:0a:
f2:11:cf:80:84:b7:11:47:ee:c9:70:93:8f:60:c2:
bf:3d:53:99:30:2a:cd:02:bd:af:71:05:6c:33:27:
0d:6a:6d:3a:3a:23:08:3c:70:d3:be:54:4c:fe:2b:
e4:f2:a1:3b:f4:b8:c4:7d:91:27:7c:7c:f1:0f:65:
ce:8f:d2:ae:ff:38:da:a5:fd:c1:3c:41:7e:b6:00:
96:8a:77:7e:96:49:3b:af:47:05:6c:e9:c8:d3:86:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:04:E3:0B:51:C6:30:6C:22:EA:2A:05:E8:28:33:A0:5D:A7:42:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcf2fa70-126f-3c7c-9813-dd41139cd6f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.58.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:12:3f:34:a5:9b:93:89:6b:03:14:26:2f:7e:4a:a6:e5:3a:
3a:16:4c:93:f7:7c:a6:d4:e1:93:9c:e2:af:51:5e:85:9d:56:
ef:37:90:e0:94:1d:76:be:e1:a5:67:fd:18:a2:e0:11:2a:a6:
f2:6c:37:af:4b:eb:dd:6a:70:04:0e:65:5b:0c:33:29:91:e8:
1f:bf:0d:5e:15:e0:ab:22:ca:f2:52:14:2b:a1:81:cc:f2:c1:
4a:2a:08:f3:23:5d:62:43:49:50:07:fc:28:95:2d:32:6b:31:
9e:12:1c:b5:6f:8d:39:78:cb:2d:cd:84:be:56:37:17:ff:cc:
1f:8f:f8:d9:5a:7c:bb:e1:f1:1c:71:23:81:d7:6c:55:50:07:
a2:2f:16:7e:42:34:38:22:34:83:d4:b0:d1:55:4a:90:58:25:
9b:1a:bf:83:ff:3e:71:99:d9:aa:77:96:29:e6:3f:f2:7d:8d:
87:bf:ae:82:00:d8:25:4b:ac:79:3a:53:26:96:f8:33:78:0f:
e9:59:73:bb:8c:b3:09:f3:df:ce:d9:8c:04:57:d7:2d:13:85:
29:5c:ea:ec:7e:10:91:97:10:26:ac:e2:8b:77:e7:94:bd:43:
07:cf:83:15:1c:ef:2a:7f:55:60:a2:8d:07:d3:50:a3:8f:d1:
b4:83:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:34 2025 by rpki-client