Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03dfddf3-76a4-339f-a554-8b6cd2ba7482.roa
File: 03dfddf3-76a4-339f-a554-8b6cd2ba7482.roa (raw, json)
Hash identifier: qTHF2Kjs8dVqzOpZ9j5JLH8LdkwQ1QxmQbmCYpoH8dQ=
Subject key identifier: C5:0B:C6:5E:36:6A:5E:6B:1A:2D:F5:49:95:C1:5F:C2:96:35:A5:6A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7A5F0E1B7E1C8E2F0DDA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03dfddf3-76a4-339f-a554-8b6cd2ba7482.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.61.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:a5:f0:e1:b7:e1:c8:e2:f0:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d1ae9467-acc4-4f82-ad6c-37e46fd6c53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5d:74:57:2a:44:c3:a6:3c:b0:5e:e5:a8:3c:
07:be:56:8c:d8:a6:50:22:f1:e3:20:4a:88:8c:a9:
e4:2a:06:60:51:bd:fe:3c:96:96:e0:2f:86:d3:34:
31:d1:82:35:6e:11:aa:55:e7:57:8b:05:b7:13:4f:
c0:08:34:c7:4e:56:2e:79:c6:09:47:86:63:63:a8:
b1:31:4f:8d:39:b4:e8:0d:66:80:28:dc:b9:7a:17:
e9:11:71:e5:a5:60:c6:77:33:32:e0:5b:b2:12:2e:
5c:81:60:5f:25:6d:7f:b7:e0:96:8c:64:ab:aa:06:
0d:41:d9:c0:3f:d5:b3:3c:16:ba:8c:8a:6b:e2:96:
6b:de:cb:cf:6d:39:49:22:c9:d2:1f:ce:41:b2:88:
03:e5:19:22:20:93:df:0b:1c:74:ab:bf:08:f3:87:
d3:ce:56:7c:10:ff:28:f6:58:b4:fc:5c:be:ef:02:
4a:3c:34:05:f3:24:23:58:54:8f:71:cb:9d:f2:c8:
47:79:ab:35:ad:df:5a:a4:84:49:ec:25:c1:b8:71:
05:39:9b:0f:7d:0e:3e:79:16:80:7f:26:d9:d0:d4:
83:77:e5:0b:a4:7f:90:a6:8e:a1:63:36:30:46:0c:
dc:b3:98:cc:28:fc:fb:18:07:0f:c9:0b:a4:e0:2e:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:C6:5E:36:6A:5E:6B:1A:2D:F5:49:95:C1:5F:C2:96:35:A5:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03dfddf3-76a4-339f-a554-8b6cd2ba7482.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:da:f2:14:13:1f:c3:d0:41:b2:eb:18:a5:7a:2a:eb:6a:08:
4b:36:1d:17:be:ff:10:2d:98:a6:ed:78:c2:3c:d8:79:94:a4:
38:ee:c8:26:b5:8c:ec:e5:01:ee:36:dc:84:1d:e5:a9:4b:e3:
b4:70:1b:d5:5b:90:aa:95:2b:6f:58:37:a8:b5:18:17:78:eb:
0f:70:c7:01:ec:c3:32:fe:76:08:c4:54:10:82:b6:53:b9:43:
18:00:55:9a:2c:57:4b:c0:dd:c2:16:34:41:8d:c9:e1:8e:cb:
f2:ec:5b:cc:5c:ea:00:9b:ff:f9:90:f7:5f:be:0e:0f:de:6a:
9e:cb:d9:84:d2:f9:a6:b2:2f:ec:1b:4b:7e:55:ed:40:f7:f8:
c7:c4:f4:98:c0:e9:b3:7e:63:8e:c2:69:8b:c0:58:0e:d6:ee:
ea:8a:83:4f:9f:07:e2:a6:9b:b6:19:60:20:f3:7b:43:9b:8e:
56:c7:27:fc:88:8b:fa:59:5b:e2:5e:68:57:f6:b6:49:a5:a8:
ce:b2:5c:9c:9e:1e:77:55:a2:75:dc:7a:da:7b:66:b8:78:ed:
f3:e7:87:c6:35:37:89:cb:96:93:ac:34:ac:5b:36:90:7c:fb:
d0:dc:a7:24:91:d5:bc:e4:b9:30:6f:bb:2e:0b:1c:f1:8a:5b:
e2:d5:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:31 2025 by rpki-client