Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70b71694-f202-3611-8d09-c6df6edddbb0.roa
File: 70b71694-f202-3611-8d09-c6df6edddbb0.roa (raw, json)
Hash identifier: cp25g/4psEPJYur/WQh60DTee2+qJ744MWGll7UO9q4=
Subject key identifier: D0:AE:06:0C:A1:AC:A5:DE:A7:13:42:3A:0D:0B:D1:3C:43:5C:DA:B2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0DB4F1C6ED2E66B61BF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70b71694-f202-3611-8d09-c6df6edddbb0.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 68.57.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:db:4f:1c:6e:d2:e6:6b:61:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=7c82eb76-2d3d-4f64-b2a6-e59359346ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:41:4a:19:aa:ff:08:07:3a:d9:c6:e8:37:96:
56:9d:9b:57:02:82:79:9c:92:ff:6a:3c:f1:8e:90:
5b:c2:96:39:91:28:70:48:89:9d:98:b0:44:7f:47:
16:fa:61:a9:46:9d:bf:6d:da:24:df:cf:f2:42:e4:
a0:e0:c2:85:f2:82:26:7e:30:ea:d8:de:2d:bb:1a:
3f:73:82:e9:80:19:d1:08:b7:79:33:1f:fe:be:b9:
92:75:5e:50:19:24:7a:46:dc:4f:5f:87:a2:65:52:
e3:71:7d:11:28:4f:bd:28:7c:cb:ed:09:eb:84:0d:
9b:7c:1f:44:10:f0:f5:21:2a:1a:a0:49:96:49:7d:
83:db:d7:83:84:4c:24:76:df:0b:98:71:87:c0:ad:
57:b6:a4:df:4f:c3:33:16:3d:6f:6a:b4:a1:6b:13:
bf:44:62:84:22:b1:64:f8:68:2f:b0:56:15:de:b5:
18:78:c2:2e:e9:86:32:fe:02:ad:b4:f2:4e:3e:a4:
db:47:c4:0e:99:cf:ce:4f:aa:c2:ed:49:ce:56:fc:
a5:9c:e9:7a:80:9c:a9:62:d0:3d:05:84:8a:f8:90:
f9:7d:5c:8e:2e:ec:30:24:08:56:ce:65:48:1f:2b:
fb:d1:68:14:07:43:d0:e4:d5:c5:2b:3a:a1:09:3f:
58:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AE:06:0C:A1:AC:A5:DE:A7:13:42:3A:0D:0B:D1:3C:43:5C:DA:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70b71694-f202-3611-8d09-c6df6edddbb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.57.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:ec:7e:6f:08:81:0a:bb:84:c8:b1:a1:72:c7:77:ae:73:73:
3f:7e:4d:67:43:85:aa:01:a1:f2:8c:5c:07:66:c7:6a:bf:39:
ba:b9:49:53:ff:9a:95:60:89:01:99:37:62:77:9b:d0:1a:95:
86:35:40:b9:77:2a:71:5b:26:41:05:b8:74:56:a8:18:0d:5e:
46:c6:84:14:82:c8:9a:1c:10:00:69:aa:4f:c6:6d:9a:02:b5:
fa:cf:60:e6:9c:a3:d3:52:46:59:e7:25:e4:02:f0:40:76:be:
28:05:b2:4c:36:54:37:52:bb:85:b1:03:91:a1:8f:5c:7f:37:
fb:69:73:16:34:42:f5:ec:ba:a7:fa:6b:e9:b7:b8:2f:e1:3b:
52:78:36:0c:8a:62:d8:f0:cd:6d:a5:8b:71:8d:6f:fb:f8:65:
d2:f6:ca:5e:56:b1:25:7e:e2:2c:55:92:fb:f7:4f:2a:05:58:
d3:79:38:7b:cd:00:18:11:6e:65:4a:50:88:f7:ad:ad:08:a9:
66:41:1c:36:03:b5:fc:69:e1:41:ad:90:77:49:91:ea:c4:27:
8c:16:b3:b1:89:03:13:dd:ee:cb:50:9f:e4:f3:34:76:68:d4:
0f:25:0f:53:4f:ef:65:0f:fa:2a:47:d2:66:06:91:4f:79:2d:
a6:32:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:07:39 2025 by rpki-client