Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6b905b7-a503-3234-8dd7-3b3892def9c1.roa
File: e6b905b7-a503-3234-8dd7-3b3892def9c1.roa (raw, json)
Hash identifier: eIBLFcEjF5fEmgeh/mJZHbeUwhONZGvV4Ji1gZe629c=
Subject key identifier: A0:72:B7:61:09:FC:A2:33:78:0F:FD:C9:28:CC:E9:C7:D6:05:46:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B502BD62A52F168104B60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6b905b7-a503-3234-8dd7-3b3892def9c1.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.36.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:50:2b:d6:2a:52:f1:68:10:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=20358df6-9cdc-4253-953f-2ea8a44f26bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:33:b6:8a:d8:ea:8e:e9:09:cb:64:c0:71:
a3:74:04:f4:48:80:37:d5:27:72:69:a2:0e:fe:3b:
9e:de:97:e5:99:26:09:d5:b2:63:c4:a1:cf:7e:27:
24:57:41:ba:95:95:92:5a:54:25:f8:2f:70:a6:3f:
27:48:3e:23:f5:22:51:d5:cb:0f:de:b5:6a:00:91:
de:e0:46:30:47:f0:5f:a0:4c:3d:43:55:f4:eb:02:
d4:ed:e9:ba:6b:3e:e3:75:e1:9c:c1:15:b7:6a:36:
62:03:b0:44:a6:65:97:8a:c6:c5:f0:b7:84:e5:17:
ed:37:d8:0c:d3:e6:f5:cc:c2:92:46:cf:3e:03:0b:
9d:b8:bc:db:a8:49:66:85:42:c2:ba:59:d1:4d:11:
6d:52:ad:18:70:ee:db:8d:fc:f0:d6:09:e7:f4:0a:
2f:d9:56:96:d9:c5:68:97:b5:26:8d:eb:ef:28:6d:
f1:d9:05:ed:96:0a:5d:52:20:09:c8:9c:c7:91:e1:
7d:18:83:c8:24:54:56:71:cc:34:7f:c7:3a:4a:b3:
20:73:62:ac:10:c7:3f:30:ca:ef:7f:e9:4f:51:71:
ab:72:77:55:60:4e:74:3e:87:34:03:3a:ea:ad:1e:
ee:17:99:c4:5b:e6:3d:6f:8f:3d:ce:19:39:63:9b:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:72:B7:61:09:FC:A2:33:78:0F:FD:C9:28:CC:E9:C7:D6:05:46:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6b905b7-a503-3234-8dd7-3b3892def9c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.36.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:fd:d6:ff:b5:69:53:e5:da:00:64:1c:ef:30:fa:58:c1:71:
03:78:4b:d1:cc:42:58:fe:ce:16:f8:8f:2a:33:66:a2:70:82:
36:88:25:c5:0e:d6:1a:2b:bc:d2:c9:f7:40:d2:5b:a5:2c:26:
e4:57:e2:5c:b1:e7:1d:c5:13:fb:0d:9f:23:81:e5:61:c2:ff:
b1:7a:64:62:4d:06:fb:34:3a:eb:19:43:ae:bd:a8:bf:c4:92:
d4:e9:27:8e:ac:25:ce:58:c6:08:96:c8:ec:f4:d4:67:88:7a:
7a:af:42:e0:5e:a9:1e:a7:ba:bb:0d:64:c9:7f:ec:ba:35:fa:
fa:22:f7:14:34:e3:18:d0:36:0a:b8:a0:a7:8c:1a:02:7a:ec:
40:b2:ec:34:ab:9e:c3:2b:f3:b5:3d:77:3d:84:88:44:f8:47:
c9:48:29:99:b9:78:7a:0c:e5:50:0b:8d:f6:02:77:0b:22:cc:
c5:36:3c:92:71:4a:b7:a0:fd:3f:ed:81:90:7f:b9:66:38:1e:
fb:00:d4:6e:67:77:55:26:95:be:3d:eb:59:f6:01:c9:8a:d4:
2b:23:9f:96:cd:6f:19:4a:e7:70:0a:f2:ea:e2:7c:cb:53:ea:
bd:27:6b:d0:5d:48:96:7d:e7:d2:5b:24:1a:13:81:2f:22:75:
7c:8d:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:05:09 2025 by rpki-client