Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436a2f02-617b-309a-a15b-7d9578f4f892.roa
File: 436a2f02-617b-309a-a15b-7d9578f4f892.roa (raw, json)
Hash identifier: QNQXpao6iFUau1E6lRbqIbMrSXo84tn9iHoOYS5mcbU=
Subject key identifier: 67:2A:6C:FA:4E:8E:1F:A8:8A:EE:B7:F1:92:AC:9A:7B:87:78:44:17
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEFCC1B13E5D209549CA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436a2f02-617b-309a-a15b-7d9578f4f892.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 68.81.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:fc:c1:b1:3e:5d:20:95:49:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=16fb65b7-6c3c-4386-9b2a-91a56c2b91c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:55:cc:41:6c:bf:21:13:de:37:b7:40:5b:9f:
71:d3:9b:18:ba:25:ef:53:51:a4:5a:92:d1:d5:c4:
4b:b7:77:e1:f5:5f:02:c2:c3:2b:b3:b0:c9:75:a4:
a4:ef:57:16:d1:82:6f:d2:c3:af:df:e5:b3:ee:b6:
f0:96:90:96:90:88:13:27:af:83:eb:ee:e8:11:9b:
f4:8f:9e:40:d7:4b:d2:97:f3:de:b6:e5:87:c1:2d:
e5:e4:4e:03:1c:bc:1d:42:17:f9:65:b4:f0:35:be:
62:16:24:bd:42:a4:5e:c3:e3:68:56:59:60:39:9d:
f1:1e:59:37:ea:eb:c7:0b:74:7a:7d:2e:73:5e:f6:
cd:bf:62:3e:67:c1:1f:82:49:41:54:3c:30:d1:f4:
bf:5d:bb:dd:6f:d5:7a:13:06:f7:3f:3f:73:8c:4a:
01:87:66:90:0f:c6:c3:65:ce:fd:6b:fe:67:4e:c5:
2c:d0:ed:4b:25:37:a6:4e:7b:14:f6:aa:71:d7:e3:
6f:b4:5b:bd:dc:24:aa:4f:1b:15:6e:fe:88:d2:48:
fa:ad:1b:0c:09:85:9d:4d:31:5f:f2:43:98:a9:07:
0a:8c:b8:43:6a:2f:b2:ad:fb:71:31:f2:16:26:db:
aa:d3:71:ee:03:24:6c:17:b2:15:b5:13:b4:13:43:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2A:6C:FA:4E:8E:1F:A8:8A:EE:B7:F1:92:AC:9A:7B:87:78:44:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436a2f02-617b-309a-a15b-7d9578f4f892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.81.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:3d:b8:12:68:1f:37:05:8f:02:99:97:f7:11:a4:ee:63:92:
99:3a:0f:6c:4d:cd:81:3c:da:3b:d5:59:fe:7e:e4:db:23:97:
81:90:4f:1e:42:68:6c:29:0b:4f:d2:84:46:3d:61:23:b2:bd:
44:bc:b0:5f:f9:8a:61:1a:fe:dd:52:e0:06:50:70:1b:ee:d4:
ba:4b:29:7a:1d:c6:09:f6:04:16:9e:a6:a2:71:ac:ec:de:ae:
2e:19:b4:5b:ea:38:ce:3f:94:77:35:8b:0b:4c:eb:36:49:eb:
7e:97:95:66:87:a2:33:48:7e:6b:bc:3a:2b:2e:5f:5a:4a:a2:
dc:f6:48:5b:95:02:dc:1e:99:1c:82:cf:bd:32:ee:cf:da:44:
1d:fe:61:98:48:65:03:3e:b5:e0:90:56:9b:d2:25:b7:d5:10:
e6:04:ac:8c:19:63:3d:e2:7f:f1:8c:2f:28:31:22:d4:13:98:
b0:a7:1d:74:ac:4b:53:4e:4d:09:b6:3f:a6:32:74:a3:84:43:
0a:98:48:c7:62:13:89:85:f4:61:4f:19:3d:28:95:71:54:4b:
4d:e0:cc:d4:42:c7:a0:14:6f:31:4f:46:fb:d4:be:f4:d4:46:
c5:77:0e:f7:2a:26:be:51:f2:fc:15:fa:64:95:57:33:ff:f2:
28:cb:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:18 2025 by rpki-client