Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b6c3295-5eaa-3f9a-9d34-865685245fae.roa
File: 9b6c3295-5eaa-3f9a-9d34-865685245fae.roa (raw, json)
Hash identifier: 4oJP41B8Xn+m5XCOODiG/HbC4zOB6GotcQEZF8W90bI=
Subject key identifier: D2:46:13:A5:14:A1:41:11:09:17:51:90:42:02:ED:A9:B1:89:7B:98
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DBDFABA62CBD1644C7580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b6c3295-5eaa-3f9a-9d34-865685245fae.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13367
IP address blocks: 68.47.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:bd:fa:ba:62:cb:d1:64:4c:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1d194854-4fd5-43ad-95ca-58aa62823c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:39:c2:9e:b8:85:12:7c:53:cf:3e:92:2d:
b1:59:37:50:7d:be:d1:4e:fe:cc:72:ba:d0:78:51:
bc:0b:67:52:9b:b9:9e:88:8e:87:70:63:cc:a9:cd:
d4:6f:18:69:ab:eb:d0:b7:d1:cd:31:58:03:31:ce:
38:54:de:9b:5a:12:94:72:2a:68:76:3d:f4:5c:6d:
2c:7c:49:db:a0:a6:22:11:ef:df:5e:04:15:b8:e5:
df:14:d8:db:91:db:ea:a1:fa:be:ce:c2:9c:64:40:
0b:27:8e:55:bb:fa:7e:01:05:75:88:07:50:27:9c:
ef:1a:ce:8d:fb:27:dd:8d:4e:a6:75:17:cb:d6:29:
a6:18:0a:1a:d6:d2:10:bd:63:25:a8:b9:68:04:a4:
3c:92:72:1a:7d:a0:74:78:67:6d:9a:eb:71:a6:f7:
01:96:64:cc:20:84:1e:34:5e:8d:94:04:44:9c:d9:
26:de:83:39:ca:28:8c:69:f5:63:af:dd:cd:81:c1:
58:c4:d9:59:7c:aa:c9:b9:ef:44:c7:26:9f:da:88:
21:c3:d2:9e:06:6b:1b:1c:32:30:04:79:81:8a:b5:
48:56:d5:f8:ad:40:2e:54:8d:f8:2e:b9:49:a9:3d:
f2:41:4c:df:eb:19:41:2e:31:3d:ae:b8:e8:f3:b3:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:46:13:A5:14:A1:41:11:09:17:51:90:42:02:ED:A9:B1:89:7B:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b6c3295-5eaa-3f9a-9d34-865685245fae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.47.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:d0:e7:49:65:aa:aa:a2:75:92:14:fe:4d:8f:07:c5:cc:e7:
ba:64:c3:d5:6f:63:b6:0e:bd:c6:1f:32:31:71:b7:0a:c6:6c:
a0:21:c8:08:82:e9:cb:d8:ab:cf:da:e1:3f:c7:4e:65:e1:5f:
b4:54:ca:7e:1d:ab:fb:ea:d1:c8:f9:6a:4d:5b:d6:05:08:11:
e0:30:a2:1f:48:fd:82:55:78:75:1a:b1:9c:7f:ec:00:75:61:
07:2a:48:31:d4:ee:3c:e8:71:9a:ea:5c:01:53:ff:ce:f7:75:
3a:a7:b1:15:4a:33:14:ac:c7:0a:e3:1c:8d:62:c6:1a:af:cc:
87:c4:45:d4:6c:05:68:61:41:d0:fc:dc:5a:26:d7:94:4c:49:
07:7a:74:51:e4:b2:92:f0:ff:9a:6f:ff:87:73:ee:bd:82:92:
ed:14:ec:3c:eb:c5:16:23:07:97:fd:35:82:fe:da:ac:4b:73:
ae:c4:95:92:3f:7c:9b:42:91:af:8e:18:cb:43:13:02:9e:8f:
bd:00:2f:51:0f:d0:98:bf:e9:31:63:63:b6:8b:b5:9e:fe:54:
9a:2a:39:52:bb:7b:be:40:80:27:30:21:78:3d:24:09:0c:7d:
e1:c9:34:80:0f:9e:73:91:3a:e6:7a:79:84:dd:53:9a:65:35:
c2:3f:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:59:15 2025 by rpki-client