Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed5a4c4a-f095-3b50-a2dc-70372829515e.roa
File: ed5a4c4a-f095-3b50-a2dc-70372829515e.roa (raw, json)
Hash identifier: JYGhXnd2wwe44Q1Y/no+nBf/oJuU2bthyLbSdHNvMGQ=
Subject key identifier: 96:BD:94:31:3E:08:77:23:D2:5C:38:BC:C4:6D:63:E5:C0:2B:7F:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B657FEBD89484220CA600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed5a4c4a-f095-3b50-a2dc-70372829515e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.59.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:65:7f:eb:d8:94:84:22:0c:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9b888888-5e51-4726-a0f1-19cdd9a11955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:47:5c:2b:85:69:ce:60:c7:cf:cc:fb:5b:
20:0b:ce:93:c7:ff:84:a9:ec:e1:87:d2:f8:d2:dc:
7f:d3:17:26:62:34:aa:6c:3f:55:69:11:87:c1:79:
1e:2f:c4:08:07:7d:9d:e0:5b:f6:23:9c:9d:4e:8d:
ad:97:d8:e5:3f:58:2f:9d:00:66:da:84:6d:68:5c:
47:b1:c5:60:e2:62:ce:f7:4f:a6:04:49:93:66:68:
cb:c5:e7:99:2b:88:4e:ad:e8:cf:81:02:5b:92:9f:
5a:9f:a0:51:88:21:b8:48:5b:7b:68:05:7f:a0:74:
62:0f:d9:23:0e:8e:a0:d0:4a:9e:51:f4:88:50:c3:
3e:4d:2e:df:17:ad:62:dc:e4:92:5f:a0:cd:b7:5f:
0f:94:2a:de:d0:ec:79:0f:9f:87:41:1e:fd:b1:5f:
34:eb:57:33:4b:37:d9:54:56:d3:81:cc:10:69:83:
8e:1c:9f:06:d6:aa:58:28:60:01:3d:dc:e3:2b:04:
91:a0:93:24:cf:24:e8:76:9d:63:9d:8c:3b:70:14:
ea:c4:a3:c4:51:20:2b:ce:13:04:b2:6f:7d:d4:99:
df:6d:b5:05:10:d9:c2:d2:f2:4b:9d:31:37:97:41:
00:8c:40:ca:f2:54:cf:8d:3a:02:ce:02:04:06:9b:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BD:94:31:3E:08:77:23:D2:5C:38:BC:C4:6D:63:E5:C0:2B:7F:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed5a4c4a-f095-3b50-a2dc-70372829515e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.59.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:b1:d8:c5:79:1b:95:75:a9:71:4e:00:62:28:42:72:54:52:
03:9c:39:c7:8b:96:cc:29:0d:fc:56:fb:0f:6d:d7:5a:b2:77:
42:ae:3f:f4:1b:ac:82:94:bd:8a:c8:14:4f:4f:6a:35:0c:4a:
b8:41:5b:2f:a6:d2:ce:44:b2:fe:4e:0d:98:5f:a5:61:bd:a5:
e3:28:12:08:cf:5d:1a:34:46:c3:4f:fe:73:a1:c4:9b:c5:e0:
e6:f4:ee:53:44:d5:08:75:02:93:c2:5d:8a:ba:26:bc:ad:95:
61:69:25:07:65:50:a8:77:d9:56:04:84:f5:02:f3:16:10:40:
8f:3d:b4:dd:7c:1b:aa:78:df:f6:60:6f:44:f4:46:84:c4:8a:
7a:e9:99:ae:40:06:61:e8:dd:34:f9:97:be:45:be:98:de:53:
8e:cc:25:84:dc:27:a4:94:84:8e:c0:37:b0:60:7e:e9:26:65:
48:a8:09:c1:2e:f7:a4:95:dd:15:89:10:e3:a8:da:5f:b3:fb:
04:62:50:fe:0a:ce:f3:83:03:a2:34:35:54:c5:3e:47:f7:31:
78:fb:b1:f1:83:ca:62:f4:54:e1:49:04:32:89:78:40:4e:b4:
36:43:e6:10:a6:43:5b:db:02:b0:5d:32:ef:56:05:aa:b7:8d:
8f:5e:f0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:46:16 2025 by rpki-client