Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc8471a0-f131-3040-b269-54577c2c087f.roa
File: cc8471a0-f131-3040-b269-54577c2c087f.roa (raw, json)
Hash identifier: P2rK25f5hKwyzyc+MZibmX/Q4pYrLUSvWGa+FCZyPf8=
Subject key identifier: 66:6A:8C:28:2C:DA:34:33:54:FB:F0:BD:9A:80:EF:65:D0:5D:3D:F8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F798074C794B7132B40800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc8471a0-f131-3040-b269-54577c2c087f.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.55.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:98:07:4c:79:4b:71:32:b4:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=9bc52a2d-e304-486f-9d6c-6344f9bd6391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:01:05:7a:67:b8:a0:0f:cf:e2:5d:7b:e4:bf:
8c:cb:0e:03:de:92:2d:fe:b5:42:c5:1a:e7:96:34:
ff:55:1f:28:ff:42:b3:e0:44:f2:09:af:7c:7a:67:
b7:c9:1d:15:af:03:ee:92:ab:ae:da:c2:cf:33:d7:
cd:48:9e:64:10:53:48:41:77:35:8e:55:da:5b:98:
a6:ce:d9:9d:b5:28:aa:6b:5d:04:ce:90:07:fe:75:
35:52:35:bc:ed:60:fa:38:08:31:2f:65:53:85:3c:
c9:33:a4:b2:37:cf:18:32:ff:f3:01:21:50:ea:79:
83:7d:9b:83:3e:6f:d2:d8:24:19:d9:41:40:1d:d5:
e2:cf:b3:a1:18:63:b1:44:6d:16:1e:80:f7:25:92:
60:ae:8a:db:ab:35:b9:63:2e:8e:17:9f:2b:dd:e7:
03:31:84:e1:0d:53:0e:2e:43:5a:54:23:5b:ef:0c:
ba:32:ed:99:73:27:1a:94:97:8e:4e:18:e7:35:f3:
78:7b:09:ab:d4:0f:fc:9f:46:26:5c:02:7f:86:43:
03:48:67:b0:6d:72:f4:86:99:76:03:de:e2:19:7b:
27:70:19:d6:2a:21:bb:75:ef:9c:fb:de:dc:f8:5d:
e7:29:03:4b:a1:2f:27:05:40:91:82:8d:c7:3c:36:
a9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6A:8C:28:2C:DA:34:33:54:FB:F0:BD:9A:80:EF:65:D0:5D:3D:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc8471a0-f131-3040-b269-54577c2c087f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.55.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:34:91:15:8d:5b:ee:23:e7:29:66:0d:e5:a4:43:a0:83:d6:
ee:9d:86:e1:de:6f:b8:0e:2e:36:c2:88:c0:9f:33:89:5e:c3:
23:7e:bd:fd:1b:68:be:ad:2f:61:ea:3f:11:97:47:2a:ea:ed:
f2:ad:18:e4:61:e6:40:3a:58:4f:33:19:41:83:33:f5:c1:5c:
b8:d5:48:50:15:60:90:ec:a4:c5:78:0e:76:8a:69:6d:8b:62:
cb:29:90:9c:91:79:f9:09:68:73:b8:81:9e:5b:1b:a5:f2:c7:
a6:e9:45:5d:6d:c7:10:b6:25:da:cc:c5:a0:0d:27:92:7a:95:
82:15:84:ca:5d:cd:9a:67:f1:a1:a8:d1:5e:49:4c:f3:26:3f:
36:38:1d:ef:e9:85:e8:10:58:d8:f4:9b:f0:44:97:48:46:12:
3c:57:50:41:53:85:1e:a2:cd:73:eb:7b:b8:dd:0e:90:f0:a3:
ef:ed:05:bd:9b:95:a1:67:8e:1a:3e:8a:de:2b:30:43:7c:cc:
b9:2e:ca:83:52:0d:70:e9:8b:fa:a8:66:d9:55:f8:b9:40:bc:
21:34:3a:ce:84:92:95:33:c2:5a:8e:42:06:26:ad:cc:61:0d:
8d:1a:f2:11:fa:e8:d8:65:9b:e7:45:6f:f9:d5:7e:89:0c:a0:
17:72:19:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:35:51 2025 by rpki-client