Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e133fd4b-b790-38a2-80b2-ffa548fac2d7.roa
File: e133fd4b-b790-38a2-80b2-ffa548fac2d7.roa (raw, json)
Hash identifier: czrlUSEW4v5NiV9O1rAOTeFaFOhypkiAMGeTJPkSMds=
Subject key identifier: 2D:DF:FC:69:B3:EE:CD:24:D7:AC:B9:21:2E:EB:C1:75:0C:BA:AF:9A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F2F8614578ACCBED35400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e133fd4b-b790-38a2-80b2-ffa548fac2d7.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.40.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:2f:86:14:57:8a:cc:be:d3:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=435c05f1-9a6e-44a7-833e-0aea379056d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:5b:f6:93:4f:80:b8:24:06:7f:57:c8:94:
72:7a:f7:9b:a9:d1:d4:93:f2:8d:3b:06:b7:c0:c0:
05:4e:05:ea:21:b4:e7:b1:d8:ff:c3:eb:19:13:82:
30:72:66:78:8e:16:66:44:8d:dd:1a:bc:6a:99:ba:
f9:2a:a8:87:6c:8c:41:52:d7:e0:f6:7b:19:a7:ab:
f6:92:2b:c6:6b:85:e4:99:6c:3c:bc:d2:0e:be:1f:
b1:2c:33:28:35:57:14:c9:6e:37:63:35:20:d8:66:
43:8c:b8:8b:b7:5b:ac:dc:52:ed:36:80:02:34:42:
0d:8f:d7:7f:8f:2b:e9:7a:78:34:28:40:76:6e:32:
f9:19:a1:22:90:e8:fe:45:13:b3:d5:c5:b9:63:64:
65:f7:1f:61:57:53:24:c1:e6:94:a3:a5:83:ea:e9:
f3:e0:30:7c:c9:ec:12:18:d8:4a:90:8e:76:c3:17:
96:a2:3f:b2:86:4e:c4:75:07:db:8d:ae:11:83:b0:
fb:82:fc:3e:d6:47:39:06:1d:39:86:9d:55:04:54:
c1:ff:f9:71:c0:a8:73:c3:98:df:c7:dd:45:d0:57:
e3:51:97:e4:f6:a1:9e:d1:a4:a4:fc:de:4a:9d:21:
06:34:07:4a:b0:4e:f3:3a:6c:07:0f:b2:65:fc:a8:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DF:FC:69:B3:EE:CD:24:D7:AC:B9:21:2E:EB:C1:75:0C:BA:AF:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e133fd4b-b790-38a2-80b2-ffa548fac2d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:00:b0:55:31:47:0b:96:3a:da:30:bf:c1:a6:9c:58:b3:19:
5f:b4:df:42:10:20:d0:ae:4e:32:3a:02:ee:fc:39:5e:ff:cd:
22:36:68:1d:51:d1:ff:ac:d1:e2:90:62:88:66:96:36:7e:b1:
e9:39:6f:65:01:ac:d5:e0:69:47:a8:ff:15:e8:bf:75:9c:3e:
8f:4a:e2:20:3f:b2:c6:c1:fc:4b:23:b0:34:4d:8f:5e:a5:58:
80:6c:52:e3:43:bb:1f:80:30:0f:26:b2:fd:80:4e:53:72:97:
d9:0a:89:c2:93:97:9a:72:27:50:42:0d:01:05:50:6a:dd:3b:
ee:13:74:c7:0b:fb:31:e7:46:58:b9:5e:de:c4:e5:cf:5c:10:
15:d3:28:47:ff:12:b7:c1:f7:7d:a0:87:d6:f8:df:40:4d:c8:
b6:83:46:ac:79:81:fd:fe:f0:c3:cb:bc:02:05:b1:30:45:9a:
5c:36:da:8b:c8:78:cb:53:4a:f5:dd:68:35:ba:3a:96:5c:22:
57:f5:73:4f:94:df:61:be:56:6d:8a:26:99:a4:db:a8:4e:6e:
41:12:7b:96:6b:b0:c8:17:51:86:ad:66:f1:70:57:d4:3e:e2:
5c:a1:93:b0:a1:d3:ab:d3:39:82:e6:64:f3:d0:f3:df:1b:d2:
23:d0:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:50:10 2025 by rpki-client