Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3efe1dce-ae4f-3f54-83aa-c92016ae6bc7.roa
File: 3efe1dce-ae4f-3f54-83aa-c92016ae6bc7.roa (raw, json)
Hash identifier: QtUfx+C5elCHYuXipgmMfGWLzj6t9YE1TGoSjyfRyV0=
Subject key identifier: 21:BF:5C:05:9B:B7:E0:0A:FD:44:DD:7C:8F:E3:29:CF:21:2A:6C:36
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB089E8BDBB5FF3F9C82F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3efe1dce-ae4f-3f54-83aa-c92016ae6bc7.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 68.83.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:89:e8:bd:bb:5f:f3:f9:c8:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=87674fa5-3e33-4551-afe0-9d854e0dbce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:2a:67:15:6c:e5:20:5c:30:a3:61:bc:bc:
b9:5b:73:8b:5b:8a:f0:1f:8d:7b:50:86:94:a6:7d:
83:df:87:c2:4a:78:d7:9c:b5:48:23:1b:27:64:8f:
b7:e9:89:79:76:e8:b6:c7:75:70:bb:cd:58:ec:46:
d2:58:c1:11:9f:fc:b6:83:01:1f:d9:15:62:b5:04:
4d:82:34:ea:a7:7c:b4:f4:82:f0:7a:f1:c0:49:5c:
2d:f5:b9:fc:56:7e:9a:38:60:33:17:7f:93:4b:23:
9f:72:40:76:1c:c7:e7:ae:d8:23:ce:5a:de:2e:92:
ad:36:af:3f:29:99:8b:db:1e:0a:d4:a1:52:38:10:
66:12:82:06:0b:ba:fb:df:b2:2c:ec:9a:16:c0:59:
73:52:24:78:3f:2c:d8:e3:d3:8b:0e:00:8f:0e:12:
96:28:da:85:d4:45:b6:6e:23:40:5a:6e:20:e0:95:
12:23:92:a6:1f:5b:a9:f6:b9:41:d8:fb:a9:43:66:
65:ce:02:9c:9a:92:af:13:d1:2e:e3:3f:cd:45:6b:
58:df:39:12:19:89:20:bf:28:4d:77:4a:e9:07:f6:
c2:97:a0:cb:6c:64:55:48:fd:b5:24:79:6a:70:d4:
64:0b:d1:fd:3b:60:84:35:06:13:1d:e7:f4:35:cc:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:5C:05:9B:B7:E0:0A:FD:44:DD:7C:8F:E3:29:CF:21:2A:6C:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3efe1dce-ae4f-3f54-83aa-c92016ae6bc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:44:78:5a:17:29:58:91:e0:13:46:54:47:2f:7d:d0:51:93:
14:f1:7a:1b:22:b1:b5:91:e7:55:f5:f3:b9:19:9b:f2:d0:c6:
1a:bc:bd:48:9d:62:d6:17:03:5d:41:f4:d1:41:da:71:3b:47:
6d:63:9b:c3:07:b2:9b:31:74:bb:07:63:42:19:53:52:c0:9f:
08:9a:7c:41:2e:67:4d:8c:58:96:e5:1b:fd:61:fa:a4:82:bc:
5e:93:96:21:a5:53:26:e4:d5:bd:44:1d:71:1d:21:5d:7d:2d:
05:cf:57:92:10:52:af:6d:a1:8a:f8:fe:31:5f:1b:ad:10:eb:
ad:b2:3b:62:90:c4:dc:33:5a:8e:e3:51:42:7d:e6:c4:19:56:
8d:df:f1:07:46:af:37:13:15:f0:51:6b:1c:f0:d8:df:17:01:
69:0e:32:1e:82:f4:65:64:e0:3f:1e:27:77:d7:56:21:ea:15:
b5:91:4b:78:af:5d:6e:d5:31:f7:4f:3e:67:6e:e8:a4:67:6d:
85:93:94:15:3f:fe:6c:ac:02:4e:42:fa:2e:63:ec:23:dd:77:
a0:16:cd:db:b2:fc:61:16:9f:a2:37:2e:3a:34:3f:6d:78:cc:
5a:ae:26:69:4b:e5:f3:74:32:fb:3f:24:e5:7c:fd:fc:1b:d2:
31:53:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:36:58 2025 by rpki-client