Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a3dfe1-3ec4-3494-bab9-647d46b1a0a8.roa
File: 68a3dfe1-3ec4-3494-bab9-647d46b1a0a8.roa (raw, json)
Hash identifier: hLp5i0BFZ0idt1DHzUvmO2WnPI3pmN3ajxbJhjORLJk=
Subject key identifier: 73:5A:D8:E5:AD:CE:8F:5D:7A:76:D2:23:EA:AC:BF:D3:64:A2:B0:09
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D4549A20A1099EFAD9410
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a3dfe1-3ec4-3494-bab9-647d46b1a0a8.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 21508
IP address blocks: 76.123.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:45:49:a2:0a:10:99:ef:ad:94:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=6ca278dd-14bf-48d0-9f95-1f10629c6454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:b5:f8:79:47:4b:eb:74:d9:b4:5f:d1:bc:
e6:3b:01:26:b7:36:86:f1:8e:69:8b:be:5c:5d:ed:
c3:58:1c:ce:ea:30:8c:a2:00:7f:d1:75:0a:dc:5a:
1c:cf:ec:c3:eb:ba:4f:da:78:2e:34:95:89:83:81:
5e:84:01:2e:98:89:89:ad:fb:45:62:7a:11:76:71:
10:3a:62:37:d8:f5:9d:aa:84:5a:45:d3:4a:56:57:
d4:a2:72:27:a0:d1:84:b2:c0:df:3c:9e:41:fa:da:
8a:85:9e:1c:de:1d:7d:a0:77:f4:1b:2c:58:7c:93:
92:39:46:a2:97:96:c7:70:be:42:28:ea:b2:c1:d7:
a0:fa:ab:b7:d3:23:65:62:52:7b:ad:ed:08:5c:0f:
57:57:e2:f5:68:1c:40:6a:34:b9:f3:81:94:36:e7:
b3:de:6e:fe:75:92:e9:9d:c4:42:bf:e6:6e:1f:e7:
71:9c:f7:d5:7b:e0:57:f9:b6:92:61:0a:69:3b:0f:
44:eb:4e:86:18:20:b7:d0:80:ee:1a:77:6d:e2:45:
dc:10:31:cc:50:31:c3:bb:dd:5c:0a:14:87:e7:8f:
62:66:4b:dd:fe:c1:5b:f3:41:49:0e:6f:8f:0e:36:
30:dc:39:df:51:6a:24:4d:11:f9:44:6f:88:f1:d0:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5A:D8:E5:AD:CE:8F:5D:7A:76:D2:23:EA:AC:BF:D3:64:A2:B0:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a3dfe1-3ec4-3494-bab9-647d46b1a0a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.123.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:f4:41:6a:2a:89:66:a7:46:cb:95:8c:eb:e0:62:ba:75:54:
73:40:54:a1:72:65:1c:1f:b6:64:d8:36:06:70:65:ce:b2:03:
19:14:71:59:44:34:26:3c:5a:e6:ed:f8:14:df:d7:0c:c2:60:
f4:b1:08:40:7e:f4:8e:49:38:60:c9:a5:34:54:8b:e5:dd:44:
28:cf:33:c4:2a:01:6c:27:d6:51:3d:79:09:98:6c:29:0b:43:
4e:3e:46:d2:01:da:23:7e:26:34:6d:0a:b8:bc:b6:6e:3f:31:
35:40:2e:bf:38:e5:c2:99:06:72:61:f4:60:b4:b7:0d:6e:6c:
2a:67:62:c1:35:05:d4:00:ea:88:cd:83:34:bf:84:f0:36:68:
c5:e5:6c:04:1a:b4:6a:e0:6b:ab:b8:3f:57:81:ce:7c:65:73:
cc:71:ba:6b:b3:6c:a5:8e:58:91:69:58:9d:12:58:ef:57:7d:
cd:cf:e1:69:b5:e4:f3:61:5d:e7:c0:95:38:24:01:e6:c5:c1:
58:09:97:9b:ee:f5:70:6c:cc:b0:d5:91:6f:46:56:82:e2:ac:
b5:59:b9:07:78:7d:26:c8:d6:a2:6c:5f:79:2f:dc:8f:7b:dd:
ac:8f:0f:4b:b5:cd:05:e2:65:34:2c:fd:ff:9b:dc:6c:9a:5b:
e4:9b:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:42 2025 by rpki-client