Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c71c261-2d47-36da-bc06-d29d9ea41cc2.roa
File: 8c71c261-2d47-36da-bc06-d29d9ea41cc2.roa (raw, json)
Hash identifier: 1x/C+lpnQYx6tQWuOtIR0Marpmfc3XpjHVDNDIO6BUk=
Subject key identifier: EE:26:BB:4B:D5:5B:D1:0D:B3:9A:A7:5B:BC:32:BA:81:A6:FB:3F:C3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C37537A73F68EBC8CD160
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c71c261-2d47-36da-bc06-d29d9ea41cc2.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 68.35.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:37:53:7a:73:f6:8e:bc:8c:d1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=713f1b4b-f16b-4be2-8c80-6352cf673b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:2d:8d:8e:5f:08:49:16:17:63:ba:46:ea:
a3:86:b4:67:ca:34:d6:fe:9d:e3:35:e9:6f:cd:dd:
27:7a:39:8f:84:ed:37:f8:a9:ac:f4:a4:d3:ff:ae:
ef:28:d5:fc:72:9b:e0:84:f9:bb:55:bc:b0:e5:cb:
86:c0:64:cc:c5:5d:7a:58:83:db:28:f1:c9:1c:60:
28:5b:74:a5:5f:4b:05:53:62:18:f0:04:88:77:b4:
74:58:9f:60:e3:c0:d8:84:a5:13:79:3a:e2:92:d6:
29:df:83:06:0b:de:62:82:8e:41:f6:6f:69:ce:52:
bf:e5:37:f9:64:e9:08:0a:bb:89:bf:25:5c:74:44:
92:ca:f1:ab:1f:00:1b:3e:f0:ce:6c:dd:0e:9c:42:
16:d5:0f:0c:2c:4e:42:c9:5b:b4:9a:78:61:0a:4b:
fd:e1:54:2e:36:40:c9:c4:c7:4d:cb:95:f3:f7:27:
9f:fa:69:81:3e:df:62:42:59:3d:c0:c5:fc:d2:a4:
f7:a8:f4:1a:1d:7b:c1:70:85:a3:3c:b2:a7:4e:33:
00:03:bd:19:70:60:8d:23:36:b9:84:4c:f6:32:32:
dd:84:42:12:fb:79:14:33:da:17:d6:68:86:27:95:
de:a5:02:22:92:90:97:ed:da:13:e6:25:9b:ef:75:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:26:BB:4B:D5:5B:D1:0D:B3:9A:A7:5B:BC:32:BA:81:A6:FB:3F:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c71c261-2d47-36da-bc06-d29d9ea41cc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.35.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:7f:63:c9:fe:d8:6d:5f:e3:73:fd:05:13:ff:af:e3:c5:92:
1d:95:17:06:05:0f:6b:86:31:6c:ee:a2:2f:b3:17:cf:c4:31:
ad:bb:11:a9:f8:17:75:fd:d5:f8:bb:a7:77:4d:48:77:92:fb:
01:1e:12:d5:79:97:b1:64:7c:87:73:07:04:e7:7f:2b:8c:2f:
88:8a:a6:b8:88:34:f4:06:67:32:59:f7:1a:d7:8a:71:e8:b4:
30:3f:bc:28:42:3c:ed:cd:57:11:57:af:13:7b:27:80:db:5e:
3a:41:44:52:05:15:0f:15:91:87:ac:0a:f9:74:50:9a:25:77:
cd:99:58:77:8c:92:40:11:f2:52:e1:97:d4:c2:b8:ba:ad:f1:
06:7a:8b:4e:4a:22:9f:0d:b8:30:7e:c5:67:e9:47:67:4d:94:
f2:c5:99:89:f6:1a:c3:e0:d3:1f:29:7e:0a:c1:be:a0:f9:39:
81:0b:d1:49:70:1f:b6:f7:14:77:3a:0e:bd:77:09:22:17:06:
3e:7f:65:2d:e9:b6:67:f2:a2:5d:4e:4c:b6:36:03:7f:f4:68:
66:7e:ea:08:3a:a5:5a:83:eb:3b:16:fc:ac:dc:67:f9:97:1f:
ec:a5:50:7e:df:3e:9f:3c:c1:6d:7c:6d:3e:5d:d7:74:05:b3:
05:f3:8c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:09:47 2025 by rpki-client