Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6f935e-7c82-3217-a012-099b49550d0d.roa
File: 8b6f935e-7c82-3217-a012-099b49550d0d.roa (raw, json)
Hash identifier: HgO4S7G0CAHLMOTXqsLyJuccSFUNqvhTdDoV5svGTVM=
Subject key identifier: 5C:02:BD:B0:9A:3A:7F:5E:15:1C:58:B5:1A:CB:02:4A:C1:E4:86:CB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF49FA7EE6B81ABEBDC700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6f935e-7c82-3217-a012-099b49550d0d.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 68.45.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:49:fa:7e:e6:b8:1a:be:bd:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=3b840ea2-9284-4f55-8a43-981ff025bee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:6a:78:e3:cc:e0:f9:34:4c:ab:de:f2:65:
f9:bc:33:0e:29:ef:6f:39:e1:50:d8:ae:3d:a2:c8:
ae:13:cb:ad:35:fc:dc:46:88:4e:64:7f:eb:6b:3b:
59:93:9f:71:91:76:6d:f2:14:49:dd:db:c2:2e:21:
44:6e:7d:db:4d:08:72:a7:78:05:0e:a9:22:f8:a6:
fb:d2:0e:eb:12:d3:a5:bb:26:59:9e:09:29:37:8a:
bc:ab:0e:ea:99:c0:4d:10:a5:d1:87:40:a8:9d:79:
57:fe:94:66:c1:13:e1:73:be:91:65:73:c8:83:e1:
a8:da:cf:95:3f:df:c8:54:bf:2b:c9:e1:fa:26:9f:
97:01:44:06:a8:7f:79:19:f5:75:59:e3:2c:5f:b0:
18:3e:42:85:f9:a2:87:4f:a7:94:9a:a7:73:fd:f3:
52:19:45:c6:d4:1b:2c:ba:65:8a:e2:5e:a3:25:9a:
07:1b:79:7e:65:be:a3:22:d0:83:be:58:06:62:5b:
87:bb:83:9b:fb:d6:97:2a:96:b9:8c:68:59:b3:82:
08:c3:75:d6:1a:5b:fa:0c:5a:9f:f4:61:53:c5:31:
d1:65:83:81:10:50:a6:ba:ac:07:31:8a:bd:60:eb:
88:ec:58:49:35:4a:d3:aa:74:0e:15:a6:49:9b:de:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:BD:B0:9A:3A:7F:5E:15:1C:58:B5:1A:CB:02:4A:C1:E4:86:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6f935e-7c82-3217-a012-099b49550d0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.45.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:d8:f0:66:70:2d:f2:15:69:a5:66:79:f6:a8:5e:8d:02:4a:
af:98:d6:8a:9f:0f:38:ab:2f:d0:d1:89:ad:24:ed:de:b4:fd:
d8:1c:5f:83:99:5e:40:76:0c:a5:b6:bf:cd:35:78:1b:95:33:
8b:bc:1b:60:53:6e:23:a7:aa:f6:6b:87:eb:e3:a9:da:22:08:
ca:22:3c:a9:25:a4:de:04:13:b1:62:38:61:30:0f:37:0d:0c:
45:87:24:f7:6d:06:78:c0:15:90:aa:9d:cc:b9:9f:5a:37:fe:
82:ed:35:fb:a0:97:d6:24:ba:d4:0c:01:a1:f4:47:74:01:11:
11:bc:6b:02:ed:bc:bf:9b:6f:11:28:93:b9:9d:1d:c8:57:de:
72:a3:e5:a5:33:e0:f8:76:01:85:47:05:a6:e0:c4:97:de:6c:
f4:56:72:6a:ba:4f:37:d3:0d:ec:2d:6a:c2:2f:e2:c4:28:ee:
ed:0b:71:1f:53:a6:ac:a4:49:64:b4:53:90:87:f7:93:c5:3f:
bf:44:dd:4c:9e:d2:8b:96:5d:73:7e:a4:29:9c:1e:c0:e0:88:
f6:96:1d:0b:f6:59:ef:df:3b:0c:e3:18:ec:dd:b0:dc:8e:39:
09:2c:50:2d:28:57:c3:1f:ee:cc:2e:cb:16:8e:b6:5a:3d:e9:
e2:d9:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:44 2025 by rpki-client