Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4359fd18-170f-351a-9ffe-5f0ec5437908.roa
File: 4359fd18-170f-351a-9ffe-5f0ec5437908.roa (raw, json)
Hash identifier: j54bbUOPIIBqYxhcJQRkaJx4TSSfE0DX+h/ldlymyVY=
Subject key identifier: 94:23:52:A3:09:37:52:95:53:AE:46:C5:DA:05:47:E2:E9:2D:0A:54
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C358A7C7225679D7FDF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4359fd18-170f-351a-9ffe-5f0ec5437908.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 68.34.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:35:8a:7c:72:25:67:9d:7f:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=b228096a-bd62-4267-9b70-5a60fab1af69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:b0:b0:b7:5e:eb:24:c5:19:3b:0f:7b:cf:
63:05:76:26:3f:9d:1b:d7:df:90:28:15:a9:1f:a7:
c2:95:72:54:86:d1:ff:75:03:ef:bc:45:f4:28:15:
ad:c0:0b:e4:26:ad:08:19:c0:b5:26:70:6b:a1:25:
42:23:3f:a9:be:71:28:a2:95:dc:16:4d:75:6c:00:
7e:18:4c:09:60:0f:a6:1f:1d:99:b5:9d:e5:34:d2:
b8:03:71:5c:a2:41:9a:1b:ed:58:31:aa:15:dc:8c:
5f:b3:e3:fd:35:4b:1e:c6:dd:42:5a:e4:ed:6c:d7:
0a:28:82:d7:7b:7e:e4:f3:5f:79:88:b0:ab:b5:52:
5a:c0:8f:c9:e8:30:5f:6c:54:85:15:66:bc:08:b4:
30:67:69:03:24:86:b5:be:4b:ea:95:50:19:11:7b:
f0:0c:a7:63:c7:cd:d8:0a:3e:fe:cf:3a:90:24:c3:
d9:0e:c0:c3:81:7d:eb:9c:5e:2b:87:53:f0:4f:ce:
c0:c6:16:32:c4:39:9b:24:3f:ff:b8:0e:fe:8a:1a:
de:c8:94:f7:09:5a:7f:0a:e8:0d:2a:4e:2f:19:fa:
f1:71:bb:fa:b0:77:6d:8d:4b:1e:09:f2:af:bc:d6:
7c:eb:6c:85:4e:9d:56:a8:a0:0f:13:c7:e8:7a:7b:
cb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:23:52:A3:09:37:52:95:53:AE:46:C5:DA:05:47:E2:E9:2D:0A:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4359fd18-170f-351a-9ffe-5f0ec5437908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:17:28:c4:96:70:82:4a:75:01:74:ed:a7:47:9e:c2:42:7f:
73:b1:02:a1:83:e3:19:b3:3a:33:92:02:3f:b6:87:95:7c:51:
29:6e:37:5c:69:15:8e:5e:9f:e5:28:1c:1d:0e:cc:6a:ab:18:
c3:f9:aa:5d:e8:b5:79:ad:7a:33:8a:d8:22:0f:65:73:e6:1a:
38:29:cf:9b:70:45:8b:d0:44:57:73:25:7d:aa:bc:b1:5e:d7:
b5:cf:7a:96:2f:d3:48:11:a3:8a:51:6f:4f:4a:93:9b:64:3e:
03:d5:1b:66:11:a7:87:26:2e:48:cc:07:f4:16:41:e1:82:8c:
c6:ff:fc:70:7d:9e:56:5e:56:e8:0e:e5:24:9d:b9:73:e1:dd:
74:3f:52:6c:64:8d:cb:b6:e6:91:1a:a6:ac:17:17:02:30:cf:
cf:b4:7d:5e:05:77:3d:32:f7:c1:f8:d4:9d:97:80:37:4a:d4:
55:47:6d:1c:0c:8f:d8:e2:00:67:ab:c3:73:16:93:37:01:99:
5b:14:ec:02:18:82:4e:25:38:bc:de:6d:2f:94:76:28:19:8c:
c8:d4:db:82:04:3a:31:e0:0f:19:5f:42:b2:83:27:43:d8:55:
34:e0:b1:72:26:1c:57:e9:7e:95:3b:06:8f:a2:a1:a4:a8:64:
02:66:99:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:35:53 2025 by rpki-client