Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa
File: 88ae5900-93cc-3311-a858-b4a65a1fbe39.roa (raw, json)
Hash identifier: zR1kRIqViALe6DlM6wFuupPvjx58fGhDrLVW4bMKG0c=
Subject key identifier: CD:28:E1:B7:D6:A4:B1:3B:3F:7F:4F:D4:F6:3E:3C:8D:E4:13:B8:A9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF569198D5A8EC316FFD940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.238.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:69:19:8d:5a:8e:c3:16:ff:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=a3aee521-44e8-49db-a14e-cba8929e76fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:85:52:c2:5d:bb:bf:ed:f8:c0:85:1a:2d:
90:f8:dd:6b:21:3d:74:03:c0:4f:09:11:47:bc:d2:
e4:3b:a1:dc:b4:17:75:ac:57:e4:0c:f9:1a:47:1e:
56:2d:b9:c3:2e:7d:cc:d2:78:e6:d5:0f:67:d3:f8:
fa:20:86:16:f2:41:81:ea:cb:bd:55:02:24:d0:3a:
66:72:f6:3a:10:7f:fd:3e:31:25:59:9e:e7:af:5e:
96:cd:c5:eb:a4:4a:a3:6f:eb:91:74:83:43:dd:c6:
19:29:ce:7d:41:dd:f9:1d:81:cf:2c:e4:56:68:00:
9b:5b:01:ad:4a:19:67:a2:c7:d6:1d:95:a9:58:ad:
53:ad:6b:17:ca:24:9c:10:3f:cd:99:d1:45:a9:c4:
fb:10:4c:eb:b2:ba:e5:1b:d9:d9:12:c0:d8:f1:62:
d5:09:7f:08:da:7f:bf:9d:2a:8b:1f:13:52:49:dc:
06:f4:cb:72:af:28:bf:42:c2:7e:af:33:c0:f3:3d:
19:73:aa:70:4e:3a:73:10:c9:5b:22:08:69:3d:41:
99:32:3f:46:bd:46:ba:01:b1:05:95:63:bc:c2:f5:
0c:5a:df:7c:b5:d4:cd:ea:47:16:00:f7:52:df:8c:
95:20:1d:52:67:71:e0:d5:e9:e8:38:ea:c2:71:af:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:28:E1:B7:D6:A4:B1:3B:3F:7F:4F:D4:F6:3E:3C:8D:E4:13:B8:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.238.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:39:05:ab:6d:5f:1e:3e:e3:ed:b0:25:f7:aa:bd:4b:98:7d:
c1:1b:52:a4:53:fd:be:f5:e4:46:9e:dc:c0:6e:b7:4c:16:20:
0a:14:86:09:b5:e6:e9:fd:0b:b6:53:2b:4d:d6:bf:82:13:32:
06:46:eb:65:58:ff:b1:b8:bd:d5:c1:97:f4:e6:25:e0:b2:41:
a3:ed:af:af:97:7c:43:90:15:a2:d3:dc:a4:c9:44:23:09:cb:
70:8c:58:eb:31:44:ee:94:34:50:76:43:f7:e4:32:bd:05:0d:
fd:76:1c:57:02:f6:d8:d9:b4:97:a6:b8:46:52:5f:ab:ac:c0:
cd:ed:8a:25:0b:61:73:13:f1:a0:a4:76:cf:6c:f0:07:f3:f4:
a6:0d:cd:d4:ef:74:89:8e:7d:30:33:ef:a2:60:56:ad:68:ae:
f1:bf:a5:d6:02:a6:3d:10:a9:88:f8:2e:49:ff:83:ba:6e:14:
44:38:6e:a2:e3:cb:af:32:2f:94:be:4d:aa:ad:42:d8:9f:04:
ae:ab:aa:5c:e3:ed:cb:e0:2b:09:de:e3:c2:ef:03:d1:d8:72:
99:55:a8:3a:6f:f9:ff:fd:4f:fd:a0:1b:b6:22:41:15:e4:19:
f3:fb:60:af:71:ff:fe:fc:76:1b:a7:3e:9c:ba:4c:e2:58:8a:
d0:69:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:26:09 2025 by rpki-client