Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/393b5342-d91f-3957-85e4-8f1f81d1effe.roa
File: 393b5342-d91f-3957-85e4-8f1f81d1effe.roa (raw, json)
Hash identifier: ov08SdOum7OAOtb8JIuW+MqHWIt4qgRwT91zRaO8nQU=
Subject key identifier: C9:00:6A:24:17:C2:40:D1:BC:25:44:43:F7:27:92:AC:12:5D:01:EE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0DA76CF3A6CAA1E3DD200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/393b5342-d91f-3957-85e4-8f1f81d1effe.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 68.54.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:da:76:cf:3a:6c:aa:1e:3d:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=67f6faa1-8520-4030-b0ac-9a77494db0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:b8:c7:f9:35:3c:41:9d:1e:d5:d4:11:7f:
bd:80:54:29:77:a4:14:4b:70:81:5c:5e:b3:48:3c:
11:f0:51:42:67:78:a2:0f:8e:95:c6:5d:98:49:bc:
46:5e:91:dc:b0:cd:68:4f:6d:d0:26:48:2e:44:61:
d7:76:c0:a6:47:ca:d1:e7:5d:eb:1b:cd:f5:64:35:
04:13:15:2a:33:b0:5c:5a:21:44:38:da:12:62:1b:
bc:2c:99:ed:79:01:f3:77:88:71:65:af:9f:71:e9:
7a:1b:04:6f:e4:a0:d0:11:eb:ba:f4:17:36:54:05:
47:73:0d:24:5d:0b:37:ca:b5:9e:a9:90:b7:04:20:
f0:b2:18:62:98:f7:64:c5:3c:0c:64:ba:a5:c5:64:
c7:46:3d:b8:38:d7:7c:ac:8b:28:47:ba:91:a2:a7:
77:23:fe:28:1d:25:12:89:81:09:0c:af:f1:f1:a7:
e1:2e:45:e4:91:59:3c:e5:a5:84:94:4a:b8:50:00:
26:6e:88:c1:b5:93:b6:cf:e2:e9:4f:96:49:c6:ef:
00:6d:45:7d:b4:63:e1:b7:78:ad:ff:72:81:22:5f:
bd:18:65:4e:92:eb:0b:4a:0b:ef:b4:ae:78:f6:9a:
07:f7:58:18:ac:0d:ab:66:3b:87:e8:0a:80:ce:b0:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:00:6A:24:17:C2:40:D1:BC:25:44:43:F7:27:92:AC:12:5D:01:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/393b5342-d91f-3957-85e4-8f1f81d1effe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.54.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:74:6a:2a:14:1c:9a:04:f1:de:6c:6c:81:88:02:37:c2:7f:
86:f0:60:6b:45:5f:2c:2c:d1:93:85:9b:b7:3f:e4:23:83:87:
72:1a:ae:a7:3b:16:e2:33:7a:44:c5:d7:11:54:62:4e:95:d6:
44:94:36:65:e3:44:e0:80:13:52:ee:8a:91:47:2d:9f:bd:1f:
b8:39:06:65:d3:5a:05:1f:4a:ec:08:dd:ce:50:cd:10:db:f2:
c0:99:34:bd:c4:5e:21:2f:8a:89:00:05:bb:fa:c4:ea:79:de:
b5:73:06:ce:81:e3:e6:db:d0:d8:de:ae:cd:50:18:0d:05:fc:
54:01:10:ab:b3:c8:9c:7f:0e:76:67:f8:fa:7e:09:94:28:a0:
39:a7:3c:3d:f9:37:1d:41:e3:20:5c:c0:cf:a8:fa:ff:28:e8:
45:32:85:7d:79:6b:c6:83:cb:d5:64:c4:67:cc:59:3b:a9:bc:
e0:4d:05:80:3f:0a:7a:a8:71:0c:6c:3f:41:f4:67:46:e9:6f:
06:4e:7f:25:e8:57:05:73:14:72:3d:fc:0c:d2:d6:eb:36:c1:
11:91:36:19:64:b3:6d:e9:6c:47:ef:54:f6:91:1f:4d:29:22:
28:18:2c:75:73:22:92:21:29:2b:6e:f0:11:c9:d8:2a:d9:68:
62:57:aa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:09 2025 by rpki-client