Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c8629013-8b6c-35e2-b517-c9085ddd8d98.roa
File: c8629013-8b6c-35e2-b517-c9085ddd8d98.roa (raw, json)
Hash identifier: 5+q4FsPIkoWr2E0snkkh4ww0w0dF+4J0xpnHmYoG2Qw=
Subject key identifier: B6:8A:11:3C:AF:90:DA:E2:55:DB:5B:DB:DF:7C:3E:BF:3B:9A:42:C0
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F43285848748B1E277F51170B54E1D360
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c8629013-8b6c-35e2-b517-c9085ddd8d98.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 13737
IP address blocks: 68.233.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1e:27:7f:51:17:0b:54:e1:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=17343a4b-6eb3-4672-a899-7163a6baa7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:20:b0:15:a8:96:79:e8:ba:2f:33:38:08:75:
9c:1c:c5:52:f0:b0:1e:df:e4:1a:5c:9d:7c:01:79:
8a:dc:ae:f2:15:38:8e:de:6c:b7:b6:bc:a8:d4:6c:
f0:14:7e:22:2f:48:55:2d:ed:b0:97:df:2c:9f:87:
e4:63:dd:3d:a5:42:c5:80:78:1a:63:47:b9:ee:11:
97:83:e0:6f:8f:e9:16:af:7c:ea:07:2c:f2:77:a2:
27:31:9b:3f:98:8d:90:e4:52:ca:01:cd:85:6d:2f:
f9:54:d1:70:6c:32:89:93:37:82:11:50:ce:8c:96:
15:25:72:d4:f3:a1:ee:ec:24:19:fc:b6:35:0e:2a:
b3:87:d3:f3:b4:35:a1:2c:b2:cb:f0:d9:28:7d:4c:
2a:cb:d3:59:f6:1c:5f:27:8f:51:d4:e4:ea:7e:60:
2a:f7:b6:7a:ce:bd:d6:e1:cf:58:ae:65:5c:ee:3a:
d4:0a:93:04:36:d8:11:7a:f8:60:47:95:cf:f9:05:
38:8a:88:fa:20:d1:fb:93:a2:1f:e7:e0:cc:5d:0d:
0f:bf:3c:46:04:8c:f4:9d:9e:7d:b0:81:6f:44:f0:
5c:00:4a:5e:a7:c5:2b:0b:e6:b5:1d:c5:a2:a2:ed:
31:5c:3e:0f:eb:1c:7d:d6:87:29:5b:9b:80:df:b9:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8A:11:3C:AF:90:DA:E2:55:DB:5B:DB:DF:7C:3E:BF:3B:9A:42:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c8629013-8b6c-35e2-b517-c9085ddd8d98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:01:10:78:e3:c3:1d:06:22:a4:fe:1d:da:8d:1f:75:c9:a4:
22:5b:ec:36:2e:95:88:6b:71:56:a8:ff:46:e0:9d:1a:e8:c6:
e2:da:8d:be:da:d1:78:d9:15:4a:18:8e:8a:9d:10:b5:2f:ed:
24:fd:64:33:6f:0e:cb:a7:bc:52:b7:72:0a:52:72:c6:37:24:
4d:32:f6:a2:ec:34:5b:70:8c:fd:4f:8f:c1:00:ea:ec:60:d3:
e4:d2:07:cb:17:c7:75:4a:1d:ff:67:ed:c6:71:f3:9c:57:40:
7c:04:02:47:de:0b:15:40:f3:93:61:dd:72:90:ab:cc:43:17:
07:0d:a3:ff:5c:e5:fa:0d:df:22:1c:cd:cf:aa:ab:f7:8e:73:
a6:07:71:30:14:2d:e2:36:76:cc:a3:b4:b9:22:fc:3d:f4:b4:
d6:41:83:6b:45:29:77:cc:50:65:b4:12:54:4e:85:7a:32:4c:
c7:f6:49:20:5c:66:8e:ed:54:7c:9d:7c:fd:11:53:54:64:99:
5a:02:5d:21:ca:c4:b5:8d:76:1a:35:6c:0b:7b:48:3a:cc:20:
92:6c:a4:6d:33:89:5b:60:e4:95:a8:56:8a:85:7d:15:2c:3f:
f4:68:56:8d:c1:08:27:19:9a:36:d0:d6:3e:f5:fb:56:00:c0:
aa:e7:e8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:23:28 2025 by rpki-client