Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22d8d883-c850-39ae-a5a9-03dc26edc22a.roa
File: 22d8d883-c850-39ae-a5a9-03dc26edc22a.roa (raw, json)
Hash identifier: oeEt9qd76wOx+VHf8Ssic60Z5pj2uDAbm3WDGeJeWnk=
Subject key identifier: 41:A3:2B:C9:DA:1D:54:CC:BD:37:1A:20:41:75:54:52:A4:4B:36:DB
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037ABC7F0B651B80A7CF77C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22d8d883-c850-39ae-a5a9-03dc26edc22a.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 68.190.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:bc:7f:0b:65:1b:80:a7:cf:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=3b1c1491-d6ec-4f6d-a66d-258bbd75e615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:62:b1:26:8f:35:49:d3:c1:dd:b1:e2:eb:
c3:10:9a:2e:10:09:47:61:cd:f2:bb:1a:95:cd:9f:
e0:87:5c:77:bc:64:fc:90:ed:8f:e5:8a:5c:c9:c7:
66:2f:13:e6:6e:28:99:12:f7:6c:4c:6e:90:87:6c:
83:96:3e:cb:89:a4:bb:9b:8a:68:2f:6c:a2:46:74:
aa:3a:9a:3a:18:f5:4a:d6:3d:91:60:3a:75:ee:25:
ac:60:fc:39:6e:7b:60:ae:1c:f6:c7:9c:81:39:ed:
d6:66:44:42:7a:d5:c5:f8:36:d8:13:e7:58:1a:44:
a8:32:f1:8d:a3:c0:b4:a1:be:db:2f:45:49:ed:5c:
b1:27:7a:38:2a:40:56:22:d7:9c:e3:68:64:71:fd:
3a:8e:0f:2d:43:c9:c1:64:dc:3d:2b:5e:3a:86:d5:
79:27:b0:d5:bf:49:81:a7:c6:9c:3b:4d:99:5f:a6:
b3:8d:2c:6f:32:4b:b5:b1:3a:a7:fd:96:d4:88:7d:
7d:db:b1:45:2a:43:25:66:8b:1f:7d:d6:2c:c7:ef:
0e:07:a9:fe:89:d6:53:30:bc:49:97:e5:a7:47:b8:
80:e0:85:12:c0:0f:af:15:e6:fe:80:43:3a:34:f1:
20:2d:aa:8d:01:79:32:fd:71:ce:77:d0:64:b6:b8:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A3:2B:C9:DA:1D:54:CC:BD:37:1A:20:41:75:54:52:A4:4B:36:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22d8d883-c850-39ae-a5a9-03dc26edc22a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.190.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:0f:73:e7:f9:dc:66:8e:59:2d:75:fc:8e:2f:5e:c9:df:5e:
08:cd:2b:a0:a3:05:75:cf:eb:b9:16:1e:f6:a5:4b:5d:ec:cc:
5a:3b:64:0b:3b:7a:48:f8:93:6d:26:93:c6:b1:06:f1:69:51:
31:3a:80:f9:1a:7e:65:59:34:d8:45:2f:25:b9:53:2d:d2:37:
11:4e:46:96:32:54:b3:e8:d9:f6:3a:5d:bb:1e:06:44:77:4e:
70:96:1b:52:5f:c5:71:02:fc:9b:fa:d2:0f:ef:0e:72:11:a3:
fc:c6:27:d6:c6:db:8f:56:ab:55:a1:ab:97:22:fb:ab:ae:90:
22:4c:ad:cb:9c:42:12:b2:54:9b:cc:2d:95:c2:4e:c8:6d:32:
98:b7:89:d2:a9:2f:48:fb:dc:94:58:49:04:a2:0a:21:ff:cb:
1f:84:e6:58:6c:07:08:d3:a1:43:9b:99:f5:1f:36:05:da:7e:
b4:d2:72:c0:4a:19:65:bb:62:4e:5a:ee:cd:96:fc:56:0f:83:
cd:6e:27:0a:8e:90:ea:ea:91:52:be:3e:1d:93:67:7a:26:1f:
4f:b7:f9:59:0b:40:02:98:7b:6f:a5:de:21:67:1a:04:d5:39:
ac:75:76:af:11:b2:de:be:97:b6:42:7d:46:55:07:30:ec:77:
d6:03:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:41:47 2025 by rpki-client