Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa
File: babed18c-2177-38a5-9603-73cb0b55a6ec.roa (raw, json)
Hash identifier: bkkWKp5Ei3hgstL5XzTlnGyVmBttA7WsXp0emdUDJYE=
Subject key identifier: A6:21:5F:34:57:3E:D2:5C:0C:7B:BA:C6:ED:FD:E3:5E:6A:97:CA:82
Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial: 010D0C9F4328584812D533F2F18775B6A95D1080
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 11650
IP address blocks: 68.235.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:33:f2:f1:87:75:b6:a9:5d:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=a54d4572-5c6f-42e3-9024-0ddaafa75880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:51:5f:d6:19:b5:ea:25:ce:2c:35:c1:89:
18:25:b1:7b:7e:9a:fd:40:c7:43:79:8d:9d:24:2b:
80:fe:46:8f:5f:bd:e6:2f:b1:5b:7e:3d:8a:45:73:
c0:73:19:e6:e3:20:d9:ea:9a:c5:36:a0:af:aa:17:
2d:b2:c7:38:57:7b:4b:95:33:c5:6b:fe:19:57:54:
09:57:a1:d9:04:a9:6b:20:0d:4e:71:40:4a:6c:99:
fe:08:01:46:24:25:7a:3d:38:cb:e0:cc:1c:ac:ce:
c7:73:90:e3:b1:a1:b2:25:ed:26:04:25:12:26:2a:
15:c5:ab:40:a9:c8:d6:73:a9:e3:b6:c4:65:98:a8:
cd:58:b8:da:b2:76:ac:09:7d:02:1b:fe:44:9d:88:
15:c6:cd:bc:54:8d:30:80:cf:54:24:e7:20:9b:f3:
48:f2:d0:6a:b2:f6:2c:3c:50:38:6a:a2:ad:e5:02:
90:fb:e6:e0:e5:79:e7:6c:5e:fd:20:f4:10:e1:76:
d0:65:e1:97:13:8a:58:82:0b:43:e7:d1:ae:40:ad:
b5:a2:15:23:63:ed:b5:4f:00:a2:60:7f:df:51:a5:
5f:24:4d:51:f8:ea:02:67:d6:4a:fd:35:4b:11:66:
b0:0f:4b:3f:f4:5b:4c:83:81:b5:fb:d7:2f:96:e5:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:5F:34:57:3E:D2:5C:0C:7B:BA:C6:ED:FD:E3:5E:6A:97:CA:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
X509v3 Authority Key Identifier:
keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
sbgp-ipAddrBlock: critical
IPv4:
68.235.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:00:a2:71:73:02:fe:75:a9:f6:cd:5d:69:94:1f:ae:23:c6:
3c:97:9d:eb:02:4a:f2:a8:fb:ac:3e:a7:ff:44:71:7a:d5:51:
bb:2c:81:4d:26:28:c7:33:0a:1a:e8:ed:7e:3f:af:37:e2:83:
fb:13:c7:ac:6c:50:36:80:7c:a9:72:e0:4b:45:83:f6:10:99:
96:74:35:ca:1f:5c:a1:ad:c7:d3:6c:ca:23:8e:81:03:b0:63:
ae:0e:c7:91:2c:09:b7:77:63:b2:55:d6:09:e2:77:62:6b:56:
20:78:4b:54:ad:ad:25:f6:90:34:7c:8e:88:74:0c:0a:0a:a8:
53:62:4e:a3:b5:20:1a:9d:d7:2b:d3:c0:c5:73:c4:e1:56:4b:
f8:fe:ff:21:dc:9d:d5:2f:e1:d4:c9:1c:db:d4:d4:3f:38:f0:
ed:31:58:0b:bb:6c:e9:06:d6:26:95:9f:ae:ba:43:3a:6d:88:
ae:af:0a:51:6e:1c:81:7b:7f:1b:87:da:01:10:4c:6c:a5:01:
b7:5a:cc:57:75:e4:48:fa:0d:b9:e3:b8:81:10:0e:02:e6:89:
0f:c1:ed:84:b5:09:06:98:e7:9d:27:c8:42:76:0f:cc:0e:37:
54:26:29:42:2b:4c:4a:15:1b:61:47:da:76:22:96:5c:2d:88:
ea:45:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:53:31 2025 by rpki-client