Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa
File: b7677b23-569f-3269-882c-0cdb2f1c8cad.roa (raw, json)
Hash identifier: xE3o26GRYkdGtvmyLoyqc+yu+Z/9eJwJCX/eW64t8mk=
Subject key identifier: ED:BC:A4:F1:0B:EF:EE:36:D8:C7:29:84:AF:38:25:EC:1E:28:27:7E
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F432858487755CC4FCDE9A1BE5D6C1B80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 31898
IP address blocks: 68.64.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:cc:4f:cd:e9:a1:be:5d:6c:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=8a56a1ea-2ab9-48c7-882d-b42ab5f26213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:ed:bc:7b:ab:32:38:3e:70:59:2d:68:d6:
ed:8a:e2:09:05:2e:ef:df:1b:e1:9b:e1:ae:80:00:
e8:f3:8e:64:20:47:65:69:02:76:58:e9:b1:ef:0a:
45:a7:f5:f4:67:1e:9b:73:08:cd:eb:db:39:bf:81:
11:d6:00:81:20:01:06:35:98:b0:f9:9c:78:cf:48:
e6:46:7d:1f:67:6d:b3:40:5a:84:fc:80:49:63:44:
da:a1:66:32:d4:26:fe:ea:0a:4c:93:b0:16:12:47:
49:c6:39:61:a3:84:94:7f:8e:c4:c1:c9:b2:3b:16:
9f:c5:9e:6d:11:3c:a4:d1:44:b6:c1:96:a1:54:4b:
2c:c2:eb:33:67:d6:1a:35:d7:6f:fa:9f:6b:61:85:
2f:b5:b3:ef:27:26:20:9d:f4:66:4b:a5:29:cc:d3:
9a:76:69:0f:e4:c2:cd:68:2c:d0:d9:eb:e8:14:49:
77:d9:86:25:b3:23:07:92:e8:49:d1:dc:82:1a:c6:
16:82:5d:45:9a:d0:80:63:52:4e:36:89:ea:d1:60:
6d:e2:ed:f3:12:5d:05:ba:84:69:57:8f:e5:a8:29:
01:22:81:d5:4c:8b:40:f1:74:61:c6:6d:34:db:7d:
34:17:a7:8c:94:0c:43:07:07:88:3a:a9:4c:64:34:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BC:A4:F1:0B:EF:EE:36:D8:C7:29:84:AF:38:25:EC:1E:28:27:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
68.64.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:92:d2:b0:80:d9:f4:1c:81:bd:c3:11:55:7f:91:dc:d8:29:
fd:e0:22:f5:af:a8:ab:4a:71:53:0b:c2:1d:6a:53:23:45:c4:
bc:5a:99:04:e5:56:21:30:99:29:46:3e:68:c5:66:79:77:4b:
07:98:75:4b:89:2d:a3:89:4d:43:70:a5:fb:c3:78:7b:18:c0:
f7:c8:42:4c:99:2b:36:64:bf:31:bc:db:03:bd:d0:08:79:07:
bf:f9:f9:dc:0c:8f:29:16:ba:3f:58:26:59:7b:ef:ce:c8:43:
29:1d:80:f5:20:a6:58:10:14:1c:02:94:d6:c4:53:1f:4f:cf:
dc:c3:af:e4:d6:8a:2f:f9:31:43:78:29:02:1e:6f:f6:82:cf:
28:49:43:47:97:22:a4:bf:7a:42:cb:76:c2:55:bc:81:7b:02:
d8:85:67:98:24:3c:5b:ae:d9:1c:1a:77:c2:c0:85:5c:44:e1:
b1:5a:44:61:78:2b:c5:7e:83:a0:a3:d3:b7:0c:04:47:3c:dd:
4b:b4:6b:e5:a9:1a:9d:80:42:4d:0f:2f:67:ec:01:cf:84:89:
63:43:51:f2:b3:26:f6:dd:96:05:0f:b7:07:5e:21:33:cf:5a:
ff:08:af:53:ef:da:5a:57:49:4a:21:41:41:45:63:14:cd:ce:
ad:ab:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:16 2025 by rpki-client