Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa
File: 09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa (raw, json)
Hash identifier: Wu9HcKNbiSMaw6N8h9hmrnMLuFEeMQwrw9PhAuB2sfU=
Subject key identifier: 54:A8:F9:54:5E:05:C2:FD:52:49:5B:4B:68:7C:B3:69:6C:CA:E6:12
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858486C2B172C0C20DDFA41EDD700
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 394285
IP address blocks: 68.68.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:17:2c:0c:20:dd:fa:41:ed:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=2a9d8d95-dd5f-4902-9e17-232f060e7d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:1f:3b:4c:03:97:c0:d9:a2:89:f2:53:25:
1c:53:85:41:f9:c7:4d:71:82:fb:fa:55:75:0d:c7:
87:a9:d2:24:af:ba:db:38:c7:fe:25:4c:8a:68:d3:
09:4d:65:45:79:54:6a:6e:c6:8c:18:ac:65:5f:1b:
da:28:3d:d8:c2:db:f4:85:18:42:2a:d6:a6:2e:1f:
5f:aa:20:4e:69:a6:b3:6f:45:57:cb:41:a5:72:8c:
66:d2:18:ff:cc:8a:b2:ba:d2:d2:0a:68:de:bf:50:
df:7b:cc:bb:56:fc:eb:2e:40:16:52:95:9b:f3:ed:
72:d8:a2:13:59:66:8c:b7:ec:f0:f7:5d:e1:c0:ae:
73:bc:a1:c3:2b:ff:83:f8:26:b3:15:cb:f4:de:63:
53:43:06:eb:ff:2e:3f:59:f7:dc:08:46:23:22:d9:
b0:cb:07:90:6d:1d:82:86:58:73:c5:02:4d:e9:71:
61:91:83:14:bf:49:8c:ff:9b:d4:05:f7:c7:c5:37:
58:b2:ab:28:ee:43:c9:43:8c:87:47:de:6e:f4:b5:
3e:62:15:e8:a4:de:9b:d7:e8:12:f9:99:6e:f0:fa:
eb:9e:9a:5f:aa:be:29:a2:d4:4c:32:ab:f1:71:7f:
4e:39:38:48:94:13:61:8d:e4:72:07:83:c2:0d:b4:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A8:F9:54:5E:05:C2:FD:52:49:5B:4B:68:7C:B3:69:6C:CA:E6:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:2b:e0:78:b2:ce:ce:5f:87:e5:48:44:c2:01:31:68:b8:b2:
46:d5:b4:eb:59:8e:ef:33:51:09:86:08:fa:9f:8f:2f:27:1e:
ab:77:18:2b:fb:ec:97:81:68:04:72:43:42:39:08:1b:93:13:
eb:d5:0c:73:37:ac:85:e4:3e:cf:77:ce:1e:90:f6:db:0e:a5:
02:72:09:c1:28:a2:fb:67:fe:a6:32:21:6e:8c:b6:45:49:cb:
9b:49:51:b9:2e:fe:47:6d:f1:7e:ba:3a:f8:1b:22:0c:26:ea:
7b:24:93:1b:f8:82:8c:59:2f:c8:d4:ec:9a:81:14:df:c7:a9:
e2:d5:e2:c7:62:59:e7:15:5b:4f:0c:ad:4a:28:8d:97:85:70:
de:98:c8:2d:46:57:18:bd:fe:ed:2c:6d:38:d7:94:0e:a8:a4:
91:e2:7d:88:6e:d0:04:d1:60:e8:5f:a2:f3:0a:c6:0c:9a:ab:
a5:e0:f1:53:58:2f:e6:f2:f8:4a:7f:f4:a5:43:17:6d:b0:79:
e3:49:95:c8:51:17:a5:02:cc:f0:9a:49:71:fa:5a:9d:0d:83:
1b:ed:62:b6:92:2e:e9:32:f9:63:df:3f:99:b2:60:ec:27:a1:
73:54:3a:8a:ab:8c:d5:64:77:75:bd:bb:37:55:f1:44:f4:bb:
ba:ed:b6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:00:36 2025 by rpki-client