Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae66dfa1-40cc-34d0-957c-9ea8c1018148.roa
File: ae66dfa1-40cc-34d0-957c-9ea8c1018148.roa (raw, json)
Hash identifier: XkCzCXAlYnhXprv8P8UvoSzryht6Jjtdmk2IW+a04fw=
Subject key identifier: A3:F4:5A:B3:9A:8B:1C:D1:D0:64:DB:88:1F:54:62:D7:30:95:B9:E2
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858482D5AA3FE08F509505F076CE6
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae66dfa1-40cc-34d0-957c-9ea8c1018148.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 22773
IP address blocks: 68.225.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:a3:fe:08:f5:09:50:5f:07:6c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=febd2fb6-7ae4-4652-93b3-e96c21839735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:44:01:f3:9e:a4:06:5a:6a:c0:89:f8:7b:
d5:50:f8:24:51:0d:90:b7:3b:cb:c8:b2:ef:de:b1:
3d:4f:2d:8d:4d:66:83:19:05:8d:85:25:59:78:6d:
da:f7:88:bc:16:ad:ba:e1:37:61:9f:6c:46:b0:4d:
ef:30:de:07:8c:a5:e6:08:c6:c3:8b:35:ee:ab:9c:
d6:cd:01:a9:94:10:a8:f4:38:05:23:e0:cb:1d:2b:
dc:91:29:a3:5f:d0:ce:fc:bc:74:7e:3c:ed:24:3f:
79:53:91:07:90:d0:62:ae:db:48:92:88:3d:d4:2b:
7f:87:64:30:ee:b0:09:ab:d8:0b:da:7d:8f:9d:4c:
ed:d3:26:47:98:77:78:35:ae:6d:42:6f:ef:95:18:
85:1c:73:08:df:2d:f8:ee:d5:2c:df:bf:e4:27:7f:
06:30:e3:d3:64:97:92:41:7f:83:9d:5a:f3:75:4d:
d5:ee:28:48:1a:c7:2f:5b:b8:bb:c0:0c:1d:01:24:
9c:a1:f6:a5:eb:7b:6b:09:87:43:36:49:94:12:5a:
7b:3b:a5:12:20:50:a1:66:c1:cf:0c:de:18:3e:c6:
2e:11:b8:ce:3d:7a:6a:ed:cc:a8:7f:79:80:90:89:
59:bf:79:9b:95:3a:52:1e:d7:3f:c7:a1:72:58:48:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F4:5A:B3:9A:8B:1C:D1:D0:64:DB:88:1F:54:62:D7:30:95:B9:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae66dfa1-40cc-34d0-957c-9ea8c1018148.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.225.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:76:d9:58:51:1c:43:b3:96:b0:11:26:55:a5:f3:25:8b:68:
05:53:66:e7:90:6c:b5:80:11:0a:9d:cc:22:ec:6f:27:04:83:
e5:6e:51:88:35:59:e3:95:f2:71:46:b1:7b:50:d0:05:ff:1f:
38:f5:12:67:15:60:8d:c8:f6:39:17:84:44:ff:7d:b7:64:1c:
06:6f:5b:1a:6b:3f:22:46:aa:38:ce:61:4e:38:65:44:a6:5e:
ed:2f:1a:d8:42:6d:f7:3d:0d:1e:c2:c2:7a:6d:13:8c:7d:e7:
22:64:08:eb:88:ef:4b:e6:a9:a6:4a:19:3e:b0:cf:a9:ce:3b:
d4:30:9f:ab:03:80:c7:2e:89:2d:87:95:42:0c:10:ff:35:b1:
95:d2:cf:f7:7f:fc:2b:55:53:a8:1f:5f:77:76:16:0e:1b:0e:
dc:97:ad:f1:73:65:a4:bc:c6:05:e9:63:98:0b:2f:db:64:75:
4b:2a:91:12:d4:31:3b:ee:8b:9a:80:0c:20:0f:f4:00:41:80:
32:b3:61:28:98:cc:b2:61:47:1d:5a:73:94:b4:d3:af:60:ed:
cb:35:1f:dd:f2:70:f5:ad:74:8b:c0:f4:ae:92:10:00:ce:18:
15:f9:b3:d8:61:e3:e2:9d:29:3f:53:27:bd:58:4f:67:36:20:
b1:b9:0d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:14:34 2025 by rpki-client