Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dad47d1-b446-3cda-a4cf-527d5e8233e1.roa
File: 7dad47d1-b446-3cda-a4cf-527d5e8233e1.roa (raw, json)
Hash identifier: 0ODud1ohD4XmV/BcZm2Z6EyR6LV1Kxaq9s1Phszrux0=
Subject key identifier: 80:2B:32:AB:5D:9B:26:61:B2:29:68:DA:A5:B9:B8:D3:C2:D6:A4:C9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CDE964CB997B446807480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dad47d1-b446-3cda-a4cf-527d5e8233e1.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.52.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:de:96:4c:b9:97:b4:46:80:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=5d0229ec-bc6f-4992-9ee0-a0574a019a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:75:93:1a:43:e0:88:07:cd:d1:44:33:f3:
46:0f:a6:80:0b:36:b5:3f:54:c3:6f:7d:36:67:54:
5e:e6:02:cc:ef:1e:41:ca:a4:0d:8d:fa:0e:a6:27:
e8:a6:30:7d:c9:9b:77:78:ed:fc:3b:d4:5e:0a:61:
9d:39:b7:90:ef:62:d9:df:ea:6f:55:af:8d:cd:58:
c8:dc:f4:9c:f7:51:d4:de:29:3a:dd:34:cb:53:d6:
87:da:6f:0f:b9:40:b7:6c:76:66:7c:9a:07:d0:59:
4c:05:0d:7b:13:0a:bf:cf:35:34:fe:28:a5:a9:28:
e3:83:89:d1:d2:4b:ab:a7:d2:8e:de:43:3a:79:15:
ab:c5:f3:81:8c:8e:e6:fc:82:fe:54:92:7e:9a:4a:
7a:53:b1:e1:c0:51:69:e5:e1:fb:44:19:78:0e:42:
ea:c2:93:27:0a:0b:11:ec:41:2e:3f:52:49:1f:a7:
bc:13:a4:4a:33:a1:e6:ec:4a:29:51:5f:da:20:66:
6f:e7:32:87:28:04:a1:fb:77:cf:78:36:2c:ec:f1:
99:bb:a1:d9:f7:f7:2b:67:a7:07:f7:da:1e:c6:d6:
38:b4:d0:60:9e:1d:e3:32:91:91:48:ed:39:91:fe:
8c:dc:a6:c8:36:61:4e:32:8d:3d:cf:da:d4:fb:cd:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2B:32:AB:5D:9B:26:61:B2:29:68:DA:A5:B9:B8:D3:C2:D6:A4:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dad47d1-b446-3cda-a4cf-527d5e8233e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.52.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:58:0e:53:f2:63:ed:d2:e0:66:8d:bf:68:1e:76:a3:c3:69:
4a:7b:c6:88:12:7c:a3:51:3a:fb:ff:0e:dc:0c:27:be:97:df:
18:93:c4:a5:b7:11:48:a5:97:44:68:cc:05:89:af:0e:4e:02:
ea:37:1f:7b:c6:5e:d0:09:36:7a:90:00:e7:e9:83:38:ae:a1:
0c:71:06:08:89:08:01:1d:92:3c:50:b7:a5:15:26:a9:8c:47:
53:fc:9a:be:46:ad:94:db:ed:9b:75:9c:27:23:08:41:70:16:
5f:c1:ff:d3:5a:5f:c0:2d:66:b6:ee:fa:75:d6:9f:a2:73:61:
9f:61:c4:48:b7:fa:32:ee:cb:83:b8:b8:14:75:25:75:62:97:
ba:97:10:ae:c3:7e:38:34:0d:a3:c6:a0:21:73:64:2c:a2:9e:
2c:27:11:a5:da:90:af:65:8a:8d:d7:7d:37:e3:75:bc:69:65:
a1:7a:98:1a:72:56:e8:38:ba:c9:17:66:80:0c:8d:7f:96:e2:
11:ef:80:87:64:2b:7b:fd:3e:55:d4:1c:c3:91:a1:b4:f1:68:
30:7d:fc:44:d9:0a:cb:b4:49:73:81:06:eb:56:d0:78:25:fa:
5a:aa:33:28:40:e5:48:92:c7:68:27:65:f2:34:69:0a:fe:60:
b0:57:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:16:03 2025 by rpki-client