Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/720fe758-0773-30cb-9198-89fb2cfd9468.roa
File: 720fe758-0773-30cb-9198-89fb2cfd9468.roa (raw, json)
Hash identifier: 3uHKXMLIK6oZ26+boD4Otf6h2NXqDr+QcM3sJXBsodg=
Subject key identifier: 1B:84:B4:F4:99:AF:BB:D0:22:15:B4:DE:4C:49:C2:70:1B:DC:08:8B
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F43285848B78B80B1B994A4766525DA8C
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/720fe758-0773-30cb-9198-89fb2cfd9468.roa
Signing time: Thu 30 Jan 2025 14:00:51 +0000
ROA not before: Thu 30 Jan 2025 14:00:51 +0000
ROA not after: Wed 30 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 68.64.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b7:8b:80:b1:b9:94:a4:76:65:25:da:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jan 30 14:00:51 2025 GMT
Not After : Apr 30 13:00:51 2025 GMT
Subject: CN=4ac513fb-7d2f-44f3-a547-46e3a70b9972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:30:8d:30:5f:2e:25:51:cc:e7:64:08:07:
ab:5d:c6:4f:f7:fc:4f:00:ba:60:44:69:da:29:cc:
7e:4f:29:89:b6:45:ec:51:73:22:33:91:65:84:98:
74:f3:d0:8d:6a:c9:ff:e9:b4:70:fb:e2:fa:74:bb:
f7:4d:34:6a:73:c7:9e:81:c3:94:34:da:03:1b:4d:
9b:b1:d5:b7:4f:07:f4:bd:a5:36:78:be:83:9a:1a:
cc:45:0b:0f:a9:eb:a6:a7:39:68:43:81:4b:fb:68:
35:46:5f:9d:83:44:84:66:55:10:db:de:ad:c4:83:
76:63:3c:4d:25:df:59:f6:f2:c3:53:18:a8:76:27:
15:87:30:78:37:17:12:79:98:b5:47:7b:41:1e:18:
09:b2:c8:98:88:66:6b:bb:ab:38:fc:72:53:12:24:
4a:77:a3:02:1d:be:c4:c9:a0:08:40:c7:a8:2d:8d:
16:bc:4b:e1:fc:1f:91:b4:36:24:d5:82:6c:d2:68:
c4:68:21:5e:a9:d5:26:1a:5c:79:ec:67:c3:59:67:
df:ff:db:42:dd:8c:e0:17:fb:0f:c2:ec:bf:de:52:
ec:91:8b:66:ef:ad:d1:e9:63:60:bd:ca:79:66:70:
ef:b4:de:c9:d9:84:95:e8:6b:f3:6f:58:3a:51:ef:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:84:B4:F4:99:AF:BB:D0:22:15:B4:DE:4C:49:C2:70:1B:DC:08:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/720fe758-0773-30cb-9198-89fb2cfd9468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
68.64.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:ee:c2:4d:7f:b8:78:7d:54:26:44:b9:fe:03:c3:bb:07:50:
65:e4:62:99:e4:3a:0a:23:62:5c:c7:80:ae:3e:90:0a:70:9f:
3b:72:b9:25:97:11:59:4d:dd:67:37:77:49:7f:22:69:e8:77:
b5:43:c7:bf:66:a5:34:af:32:7f:0a:12:17:f8:1e:27:58:02:
0a:3f:15:c8:1d:d1:a8:5a:ec:0f:4a:c0:c2:a0:31:fc:c8:ea:
58:d8:25:4a:34:de:9b:82:c2:19:54:1b:bb:36:a9:da:8d:ed:
90:dd:ac:d2:d2:8e:b4:63:e6:9f:3e:06:bb:48:d9:d0:ad:cd:
14:c4:6b:b1:6a:5b:fb:97:68:61:e1:89:83:26:ea:98:1d:1e:
1d:24:d1:23:25:19:dc:07:5a:54:18:07:bc:aa:fd:d7:50:a5:
2b:e6:17:f6:bc:94:ad:c6:a2:1a:c4:0e:ec:95:df:b9:b9:fb:
76:04:3d:a4:dd:f8:82:90:5d:eb:64:c4:3c:c7:96:6b:b1:11:
9a:73:82:da:d2:4f:ff:a7:8d:9c:b5:1d:a6:b4:c2:68:cd:e5:
a9:36:5f:73:ea:b7:be:05:c1:ce:64:a8:7c:71:b2:9f:e9:b9:
41:8e:d0:e2:1a:81:1d:4a:96:a7:5a:4e:fa:c0:13:20:f8:7f:
72:15:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:58 2025 by rpki-client