Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df252f34-aec1-34e4-aa8b-fa1d6c14c7c2.roa
File: df252f34-aec1-34e4-aa8b-fa1d6c14c7c2.roa (raw, json)
Hash identifier: ITdgjltEOnHeqKiENwdxwhntg4q5Hp0lafCJvFNBoXQ=
Subject key identifier: 98:FF:4E:6A:62:0D:57:65:AB:82:00:99:92:2A:5B:A7:51:83:8A:4A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C127C1A3AA047E19249C680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df252f34-aec1-34e4-aa8b-fa1d6c14c7c2.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.38.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:7c:1a:3a:a0:47:e1:92:49:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0f461126-f348-40b8-9c34-e7dc99ca7721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:32:6f:be:20:60:40:b9:90:84:97:cf:0b:
1c:00:d8:8d:ca:cf:07:45:1a:7d:3b:d3:8e:3e:f1:
fc:79:55:bd:6b:ea:4b:00:7f:a5:18:9b:4f:3a:12:
af:d8:50:5d:49:c7:ae:d9:30:db:39:2c:03:c6:59:
4f:a1:90:5f:26:86:32:54:d6:dc:48:23:7e:eb:8c:
78:8a:27:4a:03:5d:6f:7c:2b:a1:a9:5c:16:67:89:
e7:ae:c8:af:0d:c6:ac:de:d5:28:fc:52:46:65:36:
1c:fa:0a:8a:26:87:dd:93:7c:39:df:5f:77:70:bf:
58:f0:59:5c:cb:8e:79:29:9f:12:d9:e4:9f:e0:4f:
50:85:9f:21:fc:ab:11:5c:2d:ed:85:91:a1:2f:0f:
3b:b3:37:38:38:d0:a7:98:f8:70:3a:01:e0:e0:42:
78:8e:e1:4c:f5:5a:07:d0:29:92:84:97:ae:be:06:
9c:e4:68:ab:47:50:29:b6:21:bb:e8:62:ea:af:05:
6c:4a:65:6d:47:74:77:b5:a4:38:cc:6f:2f:6c:c5:
fd:6a:b3:72:9a:d0:07:9c:6c:c2:1f:7f:32:22:fe:
87:c4:03:cd:8e:12:8f:44:6c:28:06:a2:1b:10:ed:
17:8e:3c:b0:3a:eb:e9:7e:ac:bc:e6:9b:30:e0:f8:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FF:4E:6A:62:0D:57:65:AB:82:00:99:92:2A:5B:A7:51:83:8A:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df252f34-aec1-34e4-aa8b-fa1d6c14c7c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.246.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:15:ff:0d:cf:0c:a6:48:c3:20:a3:f8:7e:28:7a:5f:9c:ed:
f4:e7:17:aa:36:af:9a:f8:10:b1:3d:57:88:e7:61:14:dc:ae:
f6:84:9b:b3:d8:98:09:24:6a:f5:0d:60:c8:1c:08:38:c0:8d:
4b:9e:2d:ee:18:6e:2e:f9:76:39:35:97:ba:4b:8d:2c:92:74:
2f:ea:8c:7d:56:9a:84:59:49:da:09:29:aa:0f:e8:80:da:81:
3b:70:d2:7d:82:de:17:1a:a5:bd:57:4a:df:a3:6b:00:a7:48:
80:a6:23:07:6d:36:b9:3f:6d:b0:5d:dd:76:b8:05:e3:10:0f:
db:31:de:7f:64:b4:ac:50:98:d3:d9:45:ed:df:d3:ba:3a:fd:
c2:1e:cc:90:2b:c3:c2:7f:67:81:b3:1f:50:39:a2:87:0d:ee:
08:c5:c1:96:7a:a9:35:27:97:f0:44:da:9a:26:a4:d7:c9:b1:
d0:8c:f4:5e:1d:b9:00:cf:42:df:df:36:ee:d6:dc:3a:50:56:
35:32:eb:53:27:c9:1b:8b:8e:93:e2:3e:5a:59:bf:73:ab:c5:
95:9a:35:cb:b4:9f:b9:72:e3:41:09:b5:e2:1a:03:ab:5b:33:
c7:40:5d:77:65:fd:8a:b9:2c:85:11:32:59:a0:36:d4:fc:2b:
cf:25:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:37 2025 by rpki-client