Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b351298-f2f6-3b47-a818-67e38b893ea8.roa
File: 5b351298-f2f6-3b47-a818-67e38b893ea8.roa (raw, json)
Hash identifier: Lb2hX9SM0ayJO5nRlGxKQHV+wwo4YOC79Pwt3Fhl2vc=
Subject key identifier: B7:24:08:5E:D9:8C:DB:80:39:C7:CA:F1:43:85:5E:63:D1:C6:5F:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B7F6474F2BB650EFE3500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b351298-f2f6-3b47-a818-67e38b893ea8.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.53.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:7f:64:74:f2:bb:65:0e:fe:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=5e795e7c-5e28-4db1-b381-571cd59ef71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:24:a8:53:de:88:aa:f3:ee:ef:9f:54:58:d1:
7c:5b:96:12:37:12:a0:bb:94:2a:be:72:2f:a4:e5:
72:e3:d8:95:8c:52:80:4e:09:4a:a6:16:ed:eb:57:
c7:d7:f5:1d:14:97:c8:5f:d9:89:0e:17:54:b9:c0:
fe:92:0a:05:7d:2a:d1:cc:07:5e:c1:39:18:de:ef:
1c:08:38:fc:c1:c9:f2:a9:8d:a0:e0:1c:4a:14:9f:
f1:5a:27:fb:e8:44:2f:fa:06:7d:89:97:e5:eb:18:
12:35:42:af:7f:dc:17:06:c9:b0:10:fb:64:f8:8b:
39:ec:b5:b3:7b:0d:60:44:59:a2:c0:48:d0:77:bc:
bd:88:10:cc:e2:07:69:07:ae:05:50:04:82:ff:dc:
4b:2a:41:10:77:58:fd:d4:97:50:75:aa:e4:15:0a:
73:17:7c:11:5c:d6:71:c3:73:06:1e:e0:4e:d2:07:
bf:12:a7:65:bc:e9:7e:25:1c:cd:bb:ee:f1:a7:a4:
08:b1:b7:b9:9f:dd:9f:eb:28:f8:ac:1e:e7:0e:70:
e3:cf:3b:2e:5f:82:53:f9:40:a1:17:0d:2e:2d:eb:
92:a7:cf:76:27:dd:12:45:66:7d:a1:81:75:48:08:
c0:d3:59:82:ef:aa:65:5d:20:4d:9b:d5:e0:b3:da:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:24:08:5E:D9:8C:DB:80:39:C7:CA:F1:43:85:5E:63:D1:C6:5F:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b351298-f2f6-3b47-a818-67e38b893ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.53.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:fa:6a:f7:32:f7:e5:b6:24:a1:95:ea:b1:99:23:4b:03:b3:
79:20:a3:06:13:7e:ff:39:5f:0b:94:7a:1c:ac:63:bf:75:0a:
b0:83:2d:97:8c:bb:c5:1f:8e:97:62:41:84:19:16:68:7f:35:
60:68:27:37:93:e2:36:f0:46:c3:10:0d:55:22:9f:f3:fb:33:
d0:05:e5:a6:2f:4c:a5:a3:f7:a4:f9:56:df:01:1b:6f:34:dd:
47:6e:db:06:62:c8:46:83:99:0c:d3:ab:eb:64:6a:de:ff:76:
4b:68:b7:91:12:94:95:e2:69:6e:89:35:18:96:e5:2f:c0:71:
82:91:6d:32:98:bf:8d:a1:cc:73:e7:94:64:48:35:fe:0b:0c:
6d:fa:48:29:7b:b8:d8:08:c1:d3:7d:b8:b5:16:97:4c:0e:78:
19:ef:19:76:f7:b6:ea:78:77:d0:bf:cf:a6:70:f7:50:d2:af:
10:ac:fa:35:aa:f2:19:64:67:77:9c:70:68:92:46:0e:94:48:
32:a8:56:44:a8:f3:06:38:ff:55:60:ef:71:30:0e:f0:0e:32:
24:e7:5c:48:93:4c:bd:85:12:71:ba:58:f4:bf:b0:f5:fe:03:
34:c3:31:93:45:c6:39:c0:15:0d:ff:18:9e:51:9b:74:7f:58:
0d:22:b1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:16 2025 by rpki-client