Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/67379256-b2cb-38cd-af15-f5e21e776b07.roa
File: 67379256-b2cb-38cd-af15-f5e21e776b07.roa (raw, json)
Hash identifier: DpjRFYJGcEptn5QxA69vAL2LZNZeOTegXZkFh/klkQU=
Subject key identifier: FD:AC:6B:2D:A8:E6:01:72:13:E1:A5:1D:88:16:96:68:F8:18:C5:19
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865303FDAE894958ACF07E000
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/67379256-b2cb-38cd-af15-f5e21e776b07.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 204.111.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3f:da:e8:94:95:8a:cf:07:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=5f2dfffb-4f49-4b50-ab69-14cd77b933a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:19:98:92:ee:34:d9:97:ff:45:3b:be:49:
d1:cf:65:d3:1c:ad:2f:24:63:d0:d5:0b:0a:28:43:
55:75:d7:9b:27:19:7d:b0:33:1d:dd:ad:a4:b5:03:
7c:43:a0:d8:b9:46:6d:a5:50:bb:d9:db:5b:c7:bf:
f5:a9:5c:87:a0:5d:32:a7:b3:62:a5:dc:b6:b1:c4:
9c:37:71:54:ea:73:72:8d:13:91:28:bf:96:37:97:
ce:81:36:47:e3:d3:fb:ce:44:ab:52:9e:8b:fa:fc:
ea:cc:b9:81:de:04:37:ca:d4:a3:05:83:21:7e:19:
e2:56:e9:fe:8c:fc:7a:ce:5e:80:bf:a0:57:17:e9:
e7:99:67:a0:8e:f1:52:d6:88:25:e8:d4:56:c8:9e:
8d:48:07:00:ec:8f:e4:c0:c2:84:71:03:b2:cd:e1:
f1:1b:8f:64:7e:be:61:ae:d0:ac:77:19:9c:3b:89:
4a:2f:21:30:4c:57:26:c1:53:ff:2b:b8:9c:61:0d:
b9:14:0b:a6:2a:e8:d2:00:ac:68:1b:98:01:5c:4b:
a1:83:32:05:8a:e3:b4:86:07:e4:7e:79:56:24:82:
ca:51:3c:64:8b:3b:62:b8:40:93:bc:70:01:0b:8f:
40:2b:0b:b1:bf:6e:03:37:5b:94:5c:4d:99:f4:02:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AC:6B:2D:A8:E6:01:72:13:E1:A5:1D:88:16:96:68:F8:18:C5:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/67379256-b2cb-38cd-af15-f5e21e776b07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
204.111.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:c6:38:58:14:41:33:14:a2:72:fa:27:ff:8d:e1:bc:83:ba:
10:5c:44:c4:c1:24:54:a0:4d:fe:2e:68:88:35:1f:d4:06:ec:
a5:87:0b:58:2c:0d:03:5b:24:8a:09:81:cf:6e:a0:9b:cb:e3:
48:3e:1f:3f:9c:a5:52:ed:c7:4b:56:dd:3e:5d:7a:7a:0c:b0:
6a:e5:b4:85:b5:ab:42:7a:41:f5:50:8d:75:dd:b6:1d:d3:41:
91:08:c1:9c:c3:d8:24:fa:c1:61:b7:17:b7:5a:5d:f6:75:4f:
a1:c4:07:28:49:45:e9:0c:ad:d5:40:5b:94:ff:9e:3e:56:c3:
e4:29:17:ed:4d:a0:f7:87:f0:56:e8:6a:78:3b:96:a4:0d:ab:
c9:2a:29:ff:4a:55:97:3e:a3:0a:96:84:5a:51:1e:ce:fe:78:
1c:13:fc:62:08:61:5b:5b:59:8a:40:ae:50:da:40:85:c5:aa:
42:54:f7:5f:61:96:aa:f2:32:84:17:5d:90:94:07:dd:48:97:
66:10:e7:89:25:74:45:59:04:a2:78:2a:58:4e:3d:3c:30:3a:
9c:0c:3b:ea:42:c0:c1:64:34:a4:9b:5c:16:fe:ab:c7:97:07:
1a:a9:b7:1a:8a:ed:df:78:f0:d8:15:90:3b:1e:56:81:28:55:
5d:98:fd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:50 2025 by rpki-client