Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9145c22-d0f5-38da-9f67-e3afdfb16fe0.roa
File: f9145c22-d0f5-38da-9f67-e3afdfb16fe0.roa (raw, json)
Hash identifier: BZ0ZD2b0J0SwAna33ICrM8e77JBhMXJgsoKj4rwGjV8=
Subject key identifier: 40:CA:24:36:2E:6C:3A:E5:83:AE:6F:AA:ED:95:EC:E9:80:EA:22:71
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10EBF415F08313DF516C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9145c22-d0f5-38da-9f67-e3afdfb16fe0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.59.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:eb:f4:15:f0:83:13:df:51:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=c9a0b402-4156-4644-ae25-dfca1b28248b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:b7:ab:78:c2:00:31:53:1b:b5:78:2c:22:
37:7d:1a:e8:a7:ef:ff:2d:4a:13:f4:85:c6:a5:ec:
d4:cc:02:6a:82:75:be:ea:34:a5:aa:25:2c:cc:3b:
cb:eb:75:85:64:8e:28:d5:63:3b:65:0b:74:d6:91:
90:50:26:89:5e:8a:9e:1c:8c:51:cd:c5:5f:ba:95:
64:b0:3a:a2:3f:8c:be:08:8f:1b:bc:36:a1:8f:09:
4c:50:09:ee:58:1b:68:ca:4b:ce:26:27:5a:4d:d5:
f2:83:50:35:e6:80:d1:a5:fe:da:68:72:09:04:da:
91:b2:62:38:ec:b4:04:f8:5e:bc:66:63:ed:68:a1:
9c:a8:62:36:a2:71:e5:18:00:18:7f:40:74:74:1e:
43:46:e0:5a:ff:e7:18:7e:c1:cf:c4:1e:bf:65:e5:
3b:7d:76:65:7e:e4:81:d8:f7:9b:35:5d:7c:d9:a5:
c6:9c:aa:85:5d:10:d6:a9:a7:30:22:c5:45:2d:25:
72:0f:00:62:e1:c6:31:5b:94:80:c9:31:9c:63:f7:
05:86:d7:55:96:2a:35:27:2f:9d:8f:22:ad:ac:0f:
4d:4e:8e:26:fc:6b:00:03:8c:1f:50:3a:8c:08:38:
f6:5c:33:e9:46:be:27:9f:eb:26:89:b7:3c:4a:bc:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CA:24:36:2E:6C:3A:E5:83:AE:6F:AA:ED:95:EC:E9:80:EA:22:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9145c22-d0f5-38da-9f67-e3afdfb16fe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.59.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:7e:8d:ee:bb:a8:e2:e8:4a:71:cb:fe:7e:0f:e8:e0:18:59:
23:1c:f4:90:24:61:29:62:23:14:3b:2e:11:31:d8:5f:eb:03:
27:cc:7f:66:37:5b:38:77:04:07:04:ec:a3:00:5a:5d:38:c5:
a4:6a:9b:78:36:ed:dc:53:86:0f:57:5e:96:3d:5f:3f:93:d4:
13:58:37:9b:11:27:cb:76:42:0a:3d:4e:4f:32:db:a7:b0:fa:
a5:ef:bb:b5:c1:85:84:26:93:a7:18:e3:38:19:e2:92:1b:a0:
4c:45:8a:08:9d:6a:d4:02:37:4d:96:62:c6:b0:2c:d5:a0:91:
55:28:19:a3:06:ea:12:85:29:33:31:e2:ee:ad:cc:f8:f5:47:
a5:34:0b:61:64:72:06:81:6e:1f:67:9d:9c:af:c9:0a:5c:1b:
fe:d6:0d:31:e2:33:96:dd:2c:ad:ae:70:a4:b1:0d:ea:72:5d:
53:8a:96:d6:f9:b3:dd:3d:a1:ce:c6:e6:48:19:ee:f2:ca:f2:
fc:ec:1e:f6:fe:75:67:dc:3b:69:73:4d:6b:4f:0a:13:7c:4a:
46:58:7c:fc:9d:cb:aa:7c:ce:39:b0:94:d2:f5:35:15:7a:7b:
31:6d:46:0b:b1:59:83:a5:80:60:83:a4:58:7d:c7:4f:ef:37:
68:f4:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:57 2025 by rpki-client