Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebe6a8bb-5348-329b-9758-260b6d23a81f.roa
File: ebe6a8bb-5348-329b-9758-260b6d23a81f.roa (raw, json)
Hash identifier: tKsrFxDiqESiI5a4i+28fCDvAP6Z3DMolu6JRNL68WU=
Subject key identifier: 27:D8:EF:1B:15:0E:70:E8:E3:7F:88:DF:4F:4D:5D:3A:48:D2:71:D6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8E3A799B5FB793ADCA700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebe6a8bb-5348-329b-9758-260b6d23a81f.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.41.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:e3:a7:99:b5:fb:79:3a:dc:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=24e8a44d-aa7a-4056-a227-e7e625051068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:40:fb:b2:09:79:ca:24:38:97:0f:18:08:
04:18:12:cd:e5:9f:4b:bf:75:0d:95:64:d4:f3:79:
23:e7:85:29:08:d6:2d:ca:7d:4e:7a:61:7b:50:55:
2f:79:00:0e:e1:59:84:f2:c7:84:b2:ce:33:31:2b:
d6:8c:6f:5d:2e:35:0b:f0:4e:d3:7e:c4:38:a7:b2:
4f:1e:f5:66:28:58:1e:4a:a2:be:13:82:f2:23:04:
26:c6:84:b7:5e:08:46:7e:8a:5c:0b:3d:dc:fc:9d:
97:4e:43:5b:90:2c:62:c3:8e:aa:4e:21:64:77:5b:
c0:6b:73:2b:0d:15:1a:cc:1b:10:a1:21:46:c1:af:
60:f8:95:ee:2a:da:96:b4:ce:f8:56:b0:22:44:24:
ce:f4:8a:6c:a1:18:e8:f1:f0:5c:87:59:a6:ed:77:
ed:81:8c:99:a1:82:16:39:13:6c:90:69:65:57:da:
6f:1b:8a:de:87:20:0a:75:0c:82:ea:08:b9:82:fb:
6a:64:24:34:2c:b1:6d:5e:3d:ec:b5:d6:33:d3:3a:
54:0e:f6:e5:ad:71:0a:6c:8a:ca:a5:81:a4:af:e1:
c1:88:d0:d7:90:fd:8f:26:f8:3b:fa:2f:49:a7:63:
ea:22:08:2d:2c:ed:1e:f8:fa:40:f8:89:07:64:dd:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:EF:1B:15:0E:70:E8:E3:7F:88:DF:4F:4D:5D:3A:48:D2:71:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebe6a8bb-5348-329b-9758-260b6d23a81f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.41.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:92:64:d9:aa:a7:14:af:ae:b6:1b:3d:91:32:8e:ad:50:6a:
28:33:1e:d4:d8:cc:59:8f:56:d1:ae:06:05:86:53:84:ef:13:
9e:96:71:8c:8d:e7:ae:06:d6:a1:cf:58:1a:93:9b:8d:b3:13:
8c:5e:aa:21:88:f5:25:a7:73:0a:a2:ee:09:50:64:00:d6:9b:
9d:a5:53:15:ea:5e:e6:31:1a:53:52:53:9c:ee:10:c1:37:3b:
f0:07:85:b3:40:03:4a:9b:ed:ae:d4:a7:3f:b7:ee:af:70:47:
b8:ba:07:17:23:b3:67:4d:71:03:22:c9:34:02:99:46:cf:08:
00:c1:f5:24:2a:a3:95:ed:8b:bb:0e:69:56:a6:ec:ce:da:af:
72:70:fa:59:7b:90:04:30:50:8e:1a:0f:17:d7:53:c1:02:ca:
d4:c2:6a:f6:9b:98:93:6c:73:9e:d5:c7:16:3d:7e:72:36:78:
7d:78:9e:24:81:de:a2:55:c2:67:49:06:1d:46:00:c9:17:91:
bb:6d:c5:cf:dc:ae:d0:5b:6f:63:5d:dd:3c:87:3d:ea:da:68:
0b:e8:25:6e:18:b2:dd:a4:0d:b1:40:15:d8:a8:94:a5:69:fe:
f9:22:4c:b3:3a:33:d9:18:d3:ec:f8:a9:e9:d2:a9:7e:79:cd:
ce:b1:4c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:41:57 2025 by rpki-client