Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa
File: 9208bdf5-d639-308d-9352-7b93ba2bc9db.roa (raw, json)
Hash identifier: QFucBBbnvM+6bpgG1WDYsOgypBoX5ysxrMjxvIhHyTQ=
Subject key identifier: 02:DE:59:27:A1:CB:C3:90:07:CD:70:D7:D0:D8:44:05:46:66:E2:A2
Certificate issuer: /CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
Certificate serial: 010D0C9F43285848C150D35FD44B93AF0FB39800
Authority key identifier: BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 3580
IP address blocks: 68.234.48.0/20 maxlen: 32
216.220.80.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d3:5f:d4:4b:93:af:0f:b3:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=348da9e7-b64e-41f1-8650-6d0d4d317880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8f:c3:42:44:f8:30:3c:e2:e2:bd:ff:81:5e:
a3:e7:b5:d8:c9:dc:2a:50:fd:35:c4:68:da:9e:79:
7d:40:02:16:48:84:6c:7f:40:fb:eb:d9:0e:5c:f6:
f6:de:6f:b2:73:12:b6:ee:d2:84:ac:85:cf:42:b5:
49:5d:4a:5c:b5:00:9d:2e:25:5b:bb:c4:cf:2e:06:
77:78:a6:02:97:d9:c4:7b:f9:db:17:1d:1a:55:1b:
18:63:b9:d3:2e:9c:1b:35:aa:6e:f6:e8:26:dc:7e:
a6:fb:10:f0:27:53:87:d3:76:25:cd:25:8d:8b:f7:
24:f3:96:b6:a0:dd:8d:f3:9f:48:a2:99:2c:68:6b:
94:02:4b:10:f8:a1:d1:ad:29:6c:73:d4:ca:76:02:
89:f9:a0:40:20:22:1d:a6:3a:dc:44:14:39:47:9f:
c8:c4:5c:70:79:13:5b:b8:75:c6:e2:c4:4e:ef:29:
98:42:2b:6c:09:4b:fd:d3:0c:c6:5d:de:23:d2:c9:
1f:31:93:3f:14:53:26:35:96:1b:0b:a7:3c:6b:1e:
d1:11:7c:a7:dc:40:78:53:0b:86:25:5a:3d:d3:41:
17:aa:12:4d:ae:b8:47:5f:8b:2f:c5:5f:7f:8e:54:
8d:ce:1d:d5:be:b8:36:0d:2f:6e:d0:ad:e9:81:c4:
07:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DE:59:27:A1:CB:C3:90:07:CD:70:D7:D0:D8:44:05:46:66:E2:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl
X509v3 Authority Key Identifier:
keyid:BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
sbgp-ipAddrBlock: critical
IPv4:
68.234.48.0/20
216.220.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:56:45:20:ac:3d:00:7f:6f:a0:91:00:21:24:94:47:8d:fe:
a1:5e:88:f9:d5:29:ce:9e:b7:fc:3e:5f:f9:f0:0f:49:2b:20:
78:18:79:f8:ba:a4:c3:3a:58:89:d4:2b:53:70:0c:d9:fa:d0:
7c:77:fe:22:6b:8f:e9:97:74:61:31:aa:a7:e5:da:38:3b:a4:
05:bc:a7:66:b4:e9:69:80:10:b5:d2:ec:1a:0e:1d:b4:98:c5:
cb:00:8f:47:ca:3d:5d:2a:6a:02:63:9c:b6:36:b3:92:bf:ef:
3e:8a:5a:95:80:1d:55:e9:3f:60:4e:e6:3d:8f:b6:4c:e9:0d:
a9:10:de:31:ed:9d:8e:9b:c3:48:08:79:de:ec:71:d1:35:be:
b4:a1:a3:b3:f5:2c:e5:3c:fb:b2:42:00:33:d4:f0:5a:bd:8f:
f8:54:b3:39:b1:cb:f9:d9:14:75:46:86:9f:4f:8b:22:0b:7b:
70:c9:a7:6a:d0:ef:6d:67:67:1d:b0:e7:27:cc:94:48:a2:5b:
83:23:20:1c:63:32:a9:5b:5b:7f:ad:d0:18:47:7e:12:d9:93:
b1:fc:54:63:d3:1e:fb:69:ae:97:c9:93:fb:f3:14:67:1d:a1:
f8:14:b8:e9:49:9a:47:f2:92:61:42:bc:b2:b7:87:ad:40:59:
df:92:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:53 2025 by rpki-client