Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa
File: 94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa (raw, json)
Hash identifier: 2RgBjQTgmwS1IHF1skK9Pzr/6RPeBPTddrT47WSWB+4=
Subject key identifier: F0:D0:2E:81:2C:EB:4A:D3:1E:3E:5B:20:41:71:35:D3:15:D7:D9:A2
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F432858486695C00BA6BA5F7ACC7B8D00
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 62563
IP address blocks: 68.233.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c0:0b:a6:ba:5f:7a:cc:7b:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=1d80c782-d249-4344-a7ff-ff2a554fbd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:79:09:6e:b9:31:b8:bf:b0:66:1c:07:2a:
5b:44:ff:22:fa:48:91:78:2c:d8:b1:5c:a8:19:b6:
32:8a:cd:1f:d3:f0:25:3c:96:fc:eb:98:d5:da:91:
75:66:fa:0d:85:57:ed:51:d2:07:7f:b5:ce:69:fc:
5b:2e:f6:57:a1:3a:36:5c:88:f2:9a:c3:23:fc:e2:
96:04:a6:0f:eb:1f:68:80:dd:49:0d:09:95:bb:75:
e9:62:2c:2d:08:16:04:48:07:64:3d:b9:fd:de:c2:
c1:96:aa:10:7a:60:f5:8b:44:74:62:7b:46:13:fd:
e5:d1:0b:ce:58:b3:b4:48:4e:ca:3d:7b:2b:8c:3a:
f6:1e:bf:b2:35:bd:5d:4b:ed:6d:63:64:5c:c2:84:
7d:49:3f:d4:ec:a7:2a:6b:7e:93:c1:62:dd:90:c4:
d9:4b:c9:11:6e:49:d7:1c:b9:83:63:9d:7d:04:cd:
3e:67:63:f5:ac:a3:ae:12:85:fd:57:5d:00:ef:da:
da:d4:6c:c2:a2:9d:0f:36:26:98:e6:87:ca:f0:d6:
84:e0:e8:e8:51:85:09:e0:d4:a8:fc:46:b5:e6:8d:
8e:aa:b9:71:bb:18:ce:03:bb:dc:3a:f5:9b:71:ac:
58:ad:9d:98:7e:a6:61:e7:d0:63:9e:94:38:bb:ff:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D0:2E:81:2C:EB:4A:D3:1E:3E:5B:20:41:71:35:D3:15:D7:D9:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/94c403e1-5d7e-3162-8aa9-8d82174dfd4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:72:7d:f5:2d:d9:5e:72:36:25:44:7b:09:f1:5a:7e:db:f3:
78:2c:5d:c2:03:77:35:95:66:02:24:e7:af:0b:ba:eb:2c:6c:
b8:87:8e:22:cf:e6:4b:ca:d5:32:4c:65:7d:98:f8:b6:47:a9:
c8:80:f1:57:f7:4b:86:b0:d7:ff:8b:3c:3c:24:14:d9:69:32:
8e:84:dd:be:e6:d4:f2:8e:70:b6:ab:5f:16:07:72:2b:7f:81:
a0:08:43:47:a6:ff:dc:4c:9a:e1:13:80:7f:98:e7:6b:50:36:
e2:03:07:d6:75:b3:44:a5:20:7c:a3:fb:f1:eb:ae:ba:4a:c6:
73:25:df:a0:a9:db:41:19:bc:53:3e:e2:de:04:7b:09:6c:0f:
7d:2e:a6:bb:35:2c:dd:73:f7:69:02:23:9c:75:08:33:29:ae:
ff:88:be:9b:ee:a8:b2:93:8d:de:73:b8:32:1b:8c:2f:1a:1f:
06:0e:d5:79:2a:c0:81:5e:a6:c8:e4:02:00:05:ac:d1:86:0b:
e8:16:f8:43:a1:d8:30:89:e1:20:7c:18:66:7f:7c:6b:a2:c1:
e6:7d:40:0a:84:80:67:f6:d2:3e:47:a5:73:ab:d7:d9:d2:a0:
f8:1b:b7:74:37:c7:67:97:27:65:69:7a:e6:d1:4c:29:40:35:
02:85:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:11:02 2025 by rpki-client