Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa
File: 28f48885-1529-3cc6-99f5-c11c8192cce8.roa (raw, json)
Hash identifier: 8HyaHi3/Jk0DnF4vRkK6/Ge43KULTAxPhxxY+HNvrWo=
Subject key identifier: 79:92:F4:28:AF:19:04:04:7A:5A:81:C4:E8:47:A6:15:4D:0E:EF:C6
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858482D5A9A38430F057C33BF3900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 22773
IP address blocks: 68.230.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:9a:38:43:0f:05:7c:33:bf:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=37acd025-c02f-4a6f-9321-044a82ea9128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b2:c7:85:47:53:48:f1:97:bc:94:08:84:1b:
e5:74:14:3f:bc:3f:31:ce:4d:3e:2a:17:b4:cd:c9:
d8:69:37:c8:10:b9:85:c0:ae:74:04:d9:e0:8d:99:
4a:75:74:b5:26:8e:30:f3:c6:5a:07:d7:b3:60:00:
fa:95:e1:4e:c5:bf:4c:d5:b6:9b:0c:25:e8:2e:e5:
bd:94:f7:14:e3:58:38:86:db:ca:57:05:19:5e:4e:
4f:fc:c6:ef:42:f1:87:e3:9c:51:dd:26:5f:da:57:
39:95:ed:25:eb:58:bd:9d:f8:02:34:99:d8:20:18:
39:89:97:d0:4a:3f:92:51:90:c6:ff:91:cc:c2:73:
fb:fd:ea:12:6b:9e:c2:7c:ae:eb:17:84:6e:23:39:
3b:57:04:d5:40:22:46:85:cd:ba:8b:4a:d9:1f:fa:
ac:7e:aa:eb:10:bf:f7:da:b7:98:af:77:6f:69:1c:
78:82:e9:df:48:8d:cf:85:0b:bb:58:2d:93:b3:ef:
89:b6:f3:7a:ab:f1:39:a1:bb:9c:60:6e:29:58:76:
98:e8:06:08:4e:c6:2c:9c:6e:23:f4:09:3a:46:3e:
c6:33:03:84:c2:62:4a:b8:bd:2e:1d:af:16:01:b8:
6e:fb:0c:2b:88:16:97:a5:38:bc:04:5e:b1:98:cf:
6e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:F4:28:AF:19:04:04:7A:5A:81:C4:E8:47:A6:15:4D:0E:EF:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.230.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b9:78:c9:35:e8:8a:f3:72:7f:b0:c1:a2:19:34:52:ba:a2:
82:2b:e2:ef:ca:9c:e5:37:91:3f:69:89:27:97:d4:4f:e9:3e:
f7:f6:86:64:67:d0:2c:95:5f:60:86:ac:44:58:c9:78:a3:2c:
11:d9:a8:ed:39:8f:94:7c:c0:04:1c:1c:58:b6:b6:d6:99:f2:
12:be:92:86:ba:e3:f0:18:3a:5d:f3:97:67:9e:be:7d:07:e7:
20:19:b8:0c:2a:52:5d:94:63:e8:85:0d:85:6c:4c:9a:5d:92:
db:84:ba:05:75:53:e8:78:f9:c2:2d:9d:20:b3:6a:25:63:b8:
4d:d9:c5:47:4f:fb:4b:ab:0d:c3:90:e3:bf:b7:cb:44:4b:71:
38:04:cc:07:0f:c4:57:28:a9:61:55:86:fa:0e:ed:3b:d7:30:
94:28:62:d2:16:fd:8d:1d:4a:c9:e9:53:53:50:5e:fb:53:d1:
4d:26:fb:c2:f7:d2:02:af:c9:94:24:e4:3f:ba:07:76:22:2c:
87:31:00:a0:9c:9d:1b:89:6f:20:2c:4b:ff:3e:c5:35:84:68:
58:d7:fc:e1:cd:31:af:d2:ca:d2:f5:c2:50:f3:71:7d:46:68:
52:9d:af:a7:c7:0a:da:51:ed:09:71:ae:04:f2:65:59:10:04:
e6:7f:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:27:15 2025 by rpki-client