Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2fd859d-b824-38c4-bb03-f6ba29ff5759.roa
File: f2fd859d-b824-38c4-bb03-f6ba29ff5759.roa (raw, json)
Hash identifier: lABQQJc8SDNFVa3unI+z07R8gGEWf+4mpinCo80ceXc=
Subject key identifier: 76:62:E9:BB:E2:49:B4:AB:3C:99:65:70:1E:6B:FC:06:16:73:6A:88
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F5635BBCEB02BFFE573C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2fd859d-b824-38c4-bb03-f6ba29ff5759.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.56.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:56:35:bb:ce:b0:2b:ff:e5:73:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=cad5ff74-1e14-4b24-b872-4610d0eb6a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:4a:c9:f1:2e:83:01:0a:b6:57:89:f5:64:
12:14:a4:65:7f:94:03:f1:59:8a:dc:8d:94:24:96:
f6:91:67:48:ab:9b:72:12:29:9c:fb:0d:ab:58:0c:
de:44:2c:86:11:0d:6c:7f:29:ca:10:ef:45:12:74:
ab:26:0b:dd:22:bf:1a:53:ad:48:6c:64:94:5d:63:
79:e4:b9:74:a6:ff:00:8d:f3:85:16:a3:f9:51:33:
42:73:87:50:72:82:3d:c0:60:06:d9:75:dd:eb:c1:
cc:ce:c2:dd:74:4a:3a:58:00:21:bd:e2:44:56:c3:
e5:76:cf:28:f2:d9:e6:9a:39:d0:61:c9:82:36:6c:
b3:20:cd:7c:f7:31:a2:4b:21:55:81:3f:8f:64:4e:
65:75:e6:19:2e:46:ba:ac:77:fc:bd:32:65:62:83:
4c:b9:52:6d:f8:ef:8f:42:43:b8:45:35:87:ef:68:
24:ae:d2:02:e2:3c:12:c2:56:ba:b6:a2:62:e5:c8:
35:d9:c7:ca:d1:43:c3:23:0b:05:25:8f:7f:ca:95:
e0:3b:bd:bf:9f:65:52:e5:b9:43:ec:70:ee:6c:34:
1c:d1:50:1f:2e:fd:08:90:96:a0:30:50:e3:04:4c:
df:ae:38:f5:8f:43:1d:f5:ab:da:6e:43:55:1b:a5:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:62:E9:BB:E2:49:B4:AB:3C:99:65:70:1E:6B:FC:06:16:73:6A:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2fd859d-b824-38c4-bb03-f6ba29ff5759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:b3:08:1c:e0:92:90:ae:99:c8:c7:20:f4:3a:ba:9d:e4:d5:
1b:f5:b0:67:2f:9a:64:98:a7:ac:ff:db:a1:9e:0f:b8:10:1c:
28:41:af:8c:ec:31:f3:b2:27:5c:fd:5c:10:4e:86:8a:a0:37:
b4:0e:20:43:a6:3c:a1:6a:1c:9c:c5:0b:b6:27:7c:c3:51:81:
c3:4c:b7:c8:e9:20:0c:94:83:49:ff:c6:4a:99:d8:9c:47:eb:
de:81:13:50:6a:ea:7d:d6:24:f9:b1:ba:13:70:95:69:57:85:
d2:af:8a:45:14:72:27:b5:cf:fc:b9:31:c0:d3:f1:48:d6:f3:
02:10:6d:76:a2:6a:45:18:23:bb:dd:f1:32:78:a6:18:c2:9b:
c3:f8:40:73:76:b4:c2:4a:b9:0f:69:65:fe:90:80:ef:be:ac:
25:ed:7c:66:a2:45:73:c6:fe:9b:a9:7f:9f:39:c9:89:36:bf:
55:b9:98:02:e4:b6:d1:f9:82:73:70:fb:fb:03:88:e0:4c:75:
58:42:7b:b8:4d:94:dc:6a:38:ac:bd:05:f9:51:31:79:a0:22:
6f:55:81:47:c7:67:f5:1d:fe:e2:0a:00:f9:9d:76:44:39:dc:
b7:3e:6f:50:5e:93:73:5b:84:32:dd:2a:85:69:2a:02:90:d4:
00:03:42:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:49 2025 by rpki-client