Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa
File: 5e44192e-f545-3343-9375-5f961aee2b74.roa (raw, json)
Hash identifier: itgVOWiis5vFZrdAq55UZzJrxkPg0xEux21mEe3+2uY=
Subject key identifier: 9E:92:FD:B4:F2:D2:35:D5:A2:CF:35:C4:87:F3:F7:A8:57:71:4C:D4
Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial: 010D0C9F432858491D718A12B0319F10DB3F5440
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 19107
IP address blocks: 68.235.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:8a:12:b0:31:9f:10:db:3f:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=e3b7258b-ecbd-45d5-a3a7-767d12c190d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:3a:1c:47:47:99:e5:0b:a7:a0:80:07:21:
c8:78:d4:b5:a0:cf:a3:64:7b:6c:e7:82:29:ee:cd:
51:a7:96:a5:a7:60:9c:4c:f1:53:1e:26:62:1f:8e:
3e:6f:9e:46:27:38:79:3e:e1:54:10:64:4b:9a:5b:
b0:92:5d:63:3f:6e:42:92:6a:3c:56:90:24:6f:1c:
87:ce:a1:55:5c:49:cd:a8:e8:10:95:36:be:57:e7:
c1:50:39:a1:18:ff:7f:25:55:bf:2f:6b:13:57:85:
3a:9d:ac:c7:d5:ce:da:9c:35:5f:de:aa:7d:5a:4e:
f4:69:45:ab:d0:45:1c:c2:20:f2:dd:b1:cd:16:67:
33:bb:e7:00:5d:ee:bc:fd:41:05:35:1f:de:35:4a:
c3:64:11:40:dc:21:25:bd:08:40:3f:f6:cc:91:c5:
4b:0a:27:a4:ec:05:89:91:fb:d8:13:74:04:43:8d:
a7:eb:75:6f:ec:ab:88:0b:15:93:bd:a5:cb:03:cb:
ea:06:75:ae:6e:9a:13:17:2c:df:e6:f5:2f:f2:29:
b0:28:d9:bc:bc:e1:97:d3:95:cd:3f:17:90:e2:d1:
a9:25:ad:91:bc:c7:6f:d9:73:d2:dc:c0:c7:a7:b8:
72:84:b3:33:ea:00:11:1e:15:6e:8a:81:a9:14:94:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:92:FD:B4:F2:D2:35:D5:A2:CF:35:C4:87:F3:F7:A8:57:71:4C:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
X509v3 Authority Key Identifier:
keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
sbgp-ipAddrBlock: critical
IPv4:
68.235.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:ee:13:60:49:75:81:11:3b:e0:90:7b:0b:c1:55:d1:18:ff:
61:cc:7e:4c:a5:fb:07:f6:0f:31:bf:ed:20:42:3a:90:4a:69:
b8:10:60:17:d1:25:0c:db:6b:27:72:ed:38:2e:1e:be:d3:8f:
21:c0:5b:b3:f9:4a:59:64:e0:6f:4d:87:8e:66:76:56:76:22:
68:8d:08:74:88:a8:f8:91:49:2b:2f:53:31:a8:35:11:c9:ac:
18:ce:10:b5:23:9f:00:77:7b:65:ee:8a:95:bf:60:a8:bd:88:
7e:24:52:3f:9c:32:4c:b9:82:16:c8:0a:9d:8d:b2:b1:fb:00:
ce:71:3f:ca:36:f5:0e:e3:6d:27:84:41:e6:65:83:32:65:92:
d6:c1:68:35:2d:cc:74:4e:7d:fb:5d:cf:fe:f9:28:8f:dd:00:
c3:c5:cf:01:5c:d5:08:ee:05:5b:9f:a4:b9:65:21:d9:85:86:
6d:4d:68:5c:c0:f0:5b:99:1a:41:a8:82:44:b9:da:6d:38:82:
a4:d9:6e:5c:e5:ba:61:7e:68:15:a6:49:c2:d0:72:43:9e:ed:
c2:a7:ad:9e:89:5a:c0:4b:71:52:c5:88:8d:c4:10:5b:04:34:
84:62:68:ae:bf:cd:94:3c:33:8b:0c:6f:b4:62:96:7c:06:05:
b4:0b:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:05 2025 by rpki-client