Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/c3e32abb-4a25-368d-85a3-0ebd423c7e3f.roa
File: c3e32abb-4a25-368d-85a3-0ebd423c7e3f.roa (raw, json)
Hash identifier: K63p91RuovdEUuQqZm0H3WiQdNzlU7xWJtgRJ+vxuWs=
Subject key identifier: 40:95:E7:6F:60:BB:78:9E:3D:B4:CF:7D:0F:5D:3C:86:AA:01:51:CC
Certificate issuer: /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
Certificate serial: 010D0C9F4328584863CAFCD2856E7FDE1C9B0FE0
Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/c3e32abb-4a25-368d-85a3-0ebd423c7e3f.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 6327
IP address blocks: 68.144.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:ca:fc:d2:85:6e:7f:de:1c:9b:0f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=0c7ce486-50e8-4a5a-87d6-18eed17da07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b1:eb:7f:24:22:02:e6:1b:6b:53:e2:48:af:
59:ce:e4:19:70:c5:cb:82:f7:cf:4a:ed:47:23:4f:
04:d1:93:42:72:bf:e8:bf:03:aa:9a:32:88:e2:b5:
6f:7a:5d:5c:19:32:e7:f6:e9:67:4d:b4:35:7d:7f:
fa:64:c5:b0:f4:4e:b5:9e:49:e4:70:9e:56:74:90:
99:da:b9:06:2a:5a:eb:3e:ff:8d:2e:4e:e5:6a:52:
55:7d:0c:4e:d1:14:20:c9:e4:6b:03:31:4d:43:0c:
13:8f:2b:0e:63:a9:2f:4b:84:d7:f5:aa:e0:92:77:
c9:9c:6d:60:49:7d:66:c4:da:92:83:05:e1:00:b4:
70:52:01:40:de:45:7b:94:ab:e2:7a:fd:b2:0b:10:
05:28:e3:8b:9e:11:67:7f:94:44:7a:a8:ac:06:77:
c3:6c:2a:cd:45:24:7e:2d:eb:2b:bc:d6:39:47:0a:
2b:03:88:cc:12:0f:a2:0a:96:02:a3:64:8c:27:90:
73:56:0a:22:2d:eb:b0:c2:d7:33:c5:25:ff:f1:2e:
b4:a5:95:9b:c0:c9:b7:9d:68:21:77:e3:ba:97:64:
b9:47:ca:e7:1d:5b:f6:11:c1:a6:78:25:c6:e7:a4:
7c:10:eb:b5:de:7f:f9:f0:f5:4f:08:0c:8b:a9:6c:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:E7:6F:60:BB:78:9E:3D:B4:CF:7D:0F:5D:3C:86:AA:01:51:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/c3e32abb-4a25-368d-85a3-0ebd423c7e3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl
X509v3 Authority Key Identifier:
keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
sbgp-ipAddrBlock: critical
IPv4:
68.144.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:16:e7:40:8c:db:71:73:ee:2d:fd:ab:8d:bf:ee:49:d5:2b:
d7:71:80:e0:5a:e1:e6:a1:34:be:42:01:98:45:0f:c7:8c:95:
1f:f3:30:a1:48:ca:d9:30:f5:7b:7b:4f:48:e5:0d:d2:44:5f:
c0:11:c6:65:6b:9c:47:34:83:10:c0:ce:8b:20:6b:ed:30:29:
ed:cb:82:0b:ed:ed:78:d6:f5:80:12:f6:bc:65:9b:53:8d:69:
17:48:bb:48:d3:6d:3e:df:b8:17:4c:16:cf:2a:81:f7:55:a7:
85:5b:72:b1:62:25:96:92:9a:53:1e:29:e4:63:1b:e6:e0:9f:
58:cb:df:1c:3e:c5:f9:ac:e5:6f:1a:2f:bc:9f:49:15:e9:42:
76:5b:b1:75:20:79:8a:43:21:3e:3f:64:dc:f7:15:be:11:fd:
37:8e:90:34:37:81:ba:db:b0:af:8f:22:dd:db:bd:81:69:a9:
2e:a2:af:2c:16:b7:55:e8:7a:9f:a1:21:38:ff:be:83:d4:aa:
66:76:70:52:80:3d:89:bb:94:5f:bf:15:55:4c:ff:8d:39:2e:
06:e5:3b:3a:04:c9:ac:25:e1:d2:de:6b:1a:ed:94:a2:f9:23:
60:c3:db:ad:37:e1:95:b3:25:72:82:71:85:ba:c6:74:02:a3:
da:18:e3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:08:38 2025 by rpki-client