Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa
File: 4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa (raw, json)
Hash identifier: 57aEuCejABWlbIH/b1itvXI5ssGPZTVMsk4HMCf/9VE=
Subject key identifier: 29:99:4F:F6:54:6B:30:59:0F:C0:E2:5D:22:09:9E:2D:50:8C:AD:20
Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial: 010D0C9F432858483E1AA35D5A9E929892850340
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 19107
IP address blocks: 68.235.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:a3:5d:5a:9e:92:98:92:85:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=f3d4417f-6ab7-4a64-9080-15e24b1ab906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:12:ee:e8:59:d3:76:22:f3:0c:ab:73:ee:e2:
95:f5:d2:1d:80:17:f3:9b:ac:5a:05:9a:7d:1b:56:
51:f8:cc:0c:3d:6e:a4:39:8c:e7:b7:92:4a:3b:95:
3e:d5:96:8c:7a:07:92:91:30:74:bb:a1:2a:1a:3d:
f4:f5:1a:d1:ba:3a:0a:dc:b2:c5:d0:0a:db:7d:7b:
70:54:6e:c4:8f:be:47:de:ab:16:31:8f:99:b1:af:
3d:3d:b0:2e:16:21:e1:ca:03:dd:e2:af:7d:6e:a2:
d3:17:ee:0c:5a:74:a2:0f:52:ec:dd:ab:ee:08:3e:
19:9f:84:3d:53:a3:6a:7d:2a:62:94:6b:df:e3:e6:
e8:89:3e:b5:08:5f:d4:27:da:37:93:78:1c:f8:bd:
ae:df:2e:17:39:66:2b:9e:1a:fc:2f:a9:88:eb:e8:
4c:af:65:9c:41:88:a7:d3:f5:ed:0d:0a:39:16:81:
28:99:cf:61:d0:3d:e6:6d:b6:a1:e5:58:67:f0:5d:
6d:26:09:f3:72:d1:03:16:48:1d:51:94:d2:21:62:
7b:83:e0:0f:0e:36:ea:12:e0:6f:8b:2d:0f:57:e8:
2c:9b:27:df:07:1b:77:b1:8f:fa:4e:6c:d8:49:66:
91:7c:ea:25:fd:1b:79:38:15:0c:65:78:cb:0f:52:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:99:4F:F6:54:6B:30:59:0F:C0:E2:5D:22:09:9E:2D:50:8C:AD:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
X509v3 Authority Key Identifier:
keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
sbgp-ipAddrBlock: critical
IPv4:
68.235.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:db:51:36:24:34:27:71:13:13:1e:ea:1d:92:64:3f:c3:89:
cc:84:b0:1f:e9:11:66:d8:88:4a:47:60:84:29:e3:7f:e9:07:
06:ca:30:fa:8f:aa:bf:f1:d5:a0:e8:5f:f7:70:13:a9:e0:bb:
01:de:83:ac:06:75:d4:0a:b8:ae:8d:64:e6:43:57:58:c0:3e:
cf:85:a3:a6:3b:8b:c6:eb:9e:9a:4d:e6:bc:93:82:db:8b:c6:
c1:92:cd:25:f1:5d:9c:a1:22:cb:31:72:73:3e:79:20:ac:5e:
d1:d9:2a:ca:4a:b4:04:29:a6:80:01:22:8e:8f:29:00:f0:6d:
51:bd:09:d5:14:54:ed:54:02:b4:2e:20:66:48:11:d0:02:08:
f3:80:d0:75:38:e6:b0:51:48:85:09:41:bd:01:78:9f:f6:4f:
24:4c:ce:90:29:6e:45:69:54:47:34:f1:6c:6f:fb:62:a9:38:
47:5a:52:e2:3c:00:ce:30:1a:db:a9:1a:1a:10:ef:57:c5:33:
a7:31:87:b2:bb:4f:a4:21:80:f1:85:43:e7:95:bd:4c:b3:de:
f0:2c:2a:bc:f7:5c:ef:67:61:78:b5:3e:2f:18:09:29:64:e2:
36:98:5f:8a:d0:32:07:39:b9:30:47:7c:c4:3e:2c:d9:e3:fe:
7d:4a:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:15:16 2025 by rpki-client