Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa
File: 643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa (raw, json)
Hash identifier: 2XDbJSbZLQjL20+VYyAMx31ROPZZDzJLUbOGlUmdy7I=
Subject key identifier: E9:D0:58:92:E9:5A:75:02:6F:B8:07:A8:0E:69:B8:40:84:42:18:43
Certificate issuer: /CN=5402024b-7d23-4041-8713-daddd547282a
Certificate serial: 010D0C9F43285848116FBC82AC65B27FC2AC7B00
Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 5650
IP address blocks: 68.170.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:bc:82:ac:65:b2:7f:c2:ac:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5402024b-7d23-4041-8713-daddd547282a
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=4881c387-a124-4d74-9774-9d69929f0e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:b9:2e:94:f6:70:00:1e:5b:6c:c1:e8:98:
70:07:b0:88:ed:0a:d7:fd:9c:a0:f4:0d:b0:6c:18:
3e:5e:b5:1a:dd:27:6c:bf:a9:9a:31:a4:91:0f:a8:
76:c8:77:e4:b0:da:47:57:a1:dc:eb:8e:2a:b0:c5:
90:7f:ac:60:c7:36:c2:9f:a3:26:48:95:c1:08:db:
4e:b9:84:2f:03:ff:5f:02:d7:21:cd:2a:15:af:b3:
30:b1:cb:25:fd:b5:6c:1a:55:ff:8f:b4:6c:3e:f6:
39:33:bc:82:67:2d:5f:98:04:fe:fd:bc:44:5a:4e:
a1:30:32:20:a9:fc:38:f6:70:28:fc:54:35:8c:68:
5e:ae:80:9e:fa:30:1d:d4:69:87:d0:c3:d2:13:20:
16:f3:1b:12:bb:2a:ee:77:8a:e4:b6:f8:05:73:8c:
cb:23:fb:37:11:8c:f7:e9:3f:64:fd:e7:a2:34:54:
2f:58:f2:d3:5f:1b:fd:ef:12:d9:f7:f0:35:ab:53:
e6:6c:45:19:dd:39:4b:85:7e:70:19:ce:38:29:f3:
3c:96:04:f2:50:58:96:10:b7:21:9a:97:ab:f4:cb:
7b:66:1f:29:5b:d9:dd:d7:0f:e1:50:78:d9:1e:02:
13:cb:8a:c9:6c:23:d0:52:87:fb:6d:3a:8f:19:75:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D0:58:92:E9:5A:75:02:6F:B8:07:A8:0E:69:B8:40:84:42:18:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/643c2a6d-6ccf-3d48-8c16-3bbd580aa4c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl
X509v3 Authority Key Identifier:
keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.170.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:5c:b2:f8:32:fa:f1:e5:9d:97:9a:37:95:09:0c:3e:5b:86:
30:c2:51:a2:df:d2:9c:dd:d1:4b:04:01:47:f3:12:21:85:a5:
f1:78:36:ae:6a:bf:68:b8:d5:6a:c3:39:c7:e1:44:38:3b:a4:
1d:d5:1c:a5:d9:78:cb:02:de:a2:39:3c:98:41:b3:15:88:64:
39:97:23:47:5f:fc:a8:14:a2:b5:5c:fa:8b:3c:b0:73:74:df:
83:48:93:a2:76:f9:a9:e4:7e:ed:1f:d2:c5:99:56:18:00:00:
b5:22:39:31:84:1d:0e:fe:7f:e5:9e:9a:b0:86:3c:c6:88:ab:
f9:41:54:dd:31:d3:c2:a8:b3:cc:76:1e:9d:fe:c0:f2:80:2b:
6a:0f:68:db:b9:b9:d3:0e:a1:a8:7c:9c:3a:18:6b:d4:a3:af:
df:d9:5e:f5:52:7a:86:8b:59:c3:ab:81:a7:59:c8:00:c8:9b:
af:ac:57:a2:e9:a8:7d:65:1e:8d:5b:1a:93:b7:b4:b4:f9:c3:
61:40:cd:94:21:80:a2:d1:a6:fc:3e:af:80:df:6d:bb:bb:9a:
3e:39:20:49:15:7c:1e:dd:17:00:b4:19:27:70:2a:dd:87:23:
83:a3:02:60:f0:ba:d0:1c:77:82:a2:11:40:3a:32:fa:32:9c:
7d:df:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:06 2025 by rpki-client