Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf32697c-c553-3695-ab9d-96e167fbb51e.roa
File: bf32697c-c553-3695-ab9d-96e167fbb51e.roa (raw, json)
Hash identifier: xgF/cVBbvcu7mymH/AsdOP61rQJl1jdHNLOYz/dE6lg=
Subject key identifier: D9:61:DF:C5:0B:3A:4B:12:DD:C4:24:72:17:A2:39:28:5E:F8:E9:78
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F432858494A2A75F0FBAF5DDD207522D0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf32697c-c553-3695-ab9d-96e167fbb51e.roa
Signing time: Mon 24 Mar 2025 02:29:12 +0000
ROA not before: Mon 24 Mar 2025 02:29:12 +0000
ROA not after: Sun 22 Jun 2025 02:29:12 +0000
asID: 6079
IP address blocks: 68.182.68.0/22 maxlen: 24
68.182.72.0/21 maxlen: 24
68.182.80.0/20 maxlen: 24
68.182.96.0/20 maxlen: 24
68.182.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4a:2a:75:f0:fb:af:5d:dd:20:75:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 24 02:29:12 2025 GMT
Not After : Jun 22 02:29:12 2025 GMT
Subject: CN=c5a0c5c5-9d71-464f-bb10-3cd0e1d5900e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:38:ca:10:a9:07:c5:0d:a0:f1:93:a5:f1:
e3:c2:20:f1:10:3c:5e:aa:bc:49:d9:51:9c:17:81:
02:4a:75:10:32:05:5e:5b:cf:9d:b5:32:cd:b4:18:
12:c5:1b:7d:72:cd:f5:e4:c9:1f:6f:ea:26:85:43:
fc:f5:9f:9a:b3:91:80:93:71:94:c6:94:ea:85:78:
9b:88:08:41:a2:12:76:64:4d:73:2c:87:55:ae:6f:
90:4d:dd:5e:30:ae:1a:94:5c:80:a4:80:bc:40:b1:
05:86:c7:2f:22:07:9b:35:20:15:89:94:ad:fe:49:
39:a4:2c:3b:f0:fc:df:d4:3f:94:66:be:c2:61:6e:
4b:0a:59:02:a7:18:54:f1:2f:da:cd:22:be:63:f3:
b9:66:6e:fd:ba:b9:52:63:65:4b:c2:c6:b7:2b:d9:
6b:7a:1f:87:27:1e:c0:b5:c0:70:b1:48:97:60:bf:
bc:11:79:d0:8a:50:43:ac:55:f4:0a:a1:84:09:e0:
cf:94:e6:9f:f1:3f:0f:6a:40:f0:81:59:1c:27:7c:
a4:e2:83:84:d5:7b:c5:79:64:c6:46:0a:02:f9:a8:
89:59:cb:43:e9:47:cd:5a:57:46:41:3f:ff:53:67:
54:f2:a9:e1:65:f0:aa:5d:ba:47:9f:ae:6c:97:21:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:61:DF:C5:0B:3A:4B:12:DD:C4:24:72:17:A2:39:28:5E:F8:E9:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf32697c-c553-3695-ab9d-96e167fbb51e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
68.182.68.0-68.182.127.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:56:45:88:5f:7a:41:8a:1e:f4:52:5f:99:20:c0:1e:96:bf:
6a:2a:db:9e:2a:f6:81:5d:56:45:6c:19:63:5c:71:dd:72:79:
b3:d3:c0:f5:20:f6:3c:47:ea:80:3a:87:e4:df:e9:20:25:3a:
ec:8a:a9:0d:0c:0f:85:c6:fb:48:d6:d3:e9:8a:1b:21:a9:0b:
42:07:95:a7:d0:bb:3d:6a:80:33:57:79:8e:81:78:a8:60:81:
ba:db:5d:d4:8b:52:c4:9d:13:74:50:4c:50:25:63:39:6b:da:
70:e5:63:7d:d4:65:74:61:f0:80:83:1f:32:e6:8c:a8:60:41:
41:ee:cb:e6:37:31:0c:18:46:ee:87:b3:cc:16:19:e5:a5:53:
37:b9:66:49:e3:4a:25:0a:1d:98:60:07:e4:fa:2e:95:d7:c8:
38:45:58:26:28:58:44:de:96:09:4c:b1:ae:e8:21:07:e9:95:
d9:af:8d:82:9a:83:43:11:75:a2:05:23:69:79:53:5e:31:a5:
1d:e8:72:3d:c2:dc:86:30:e3:4f:56:6d:fa:48:a7:af:17:b1:
35:b8:8e:74:d1:bb:3f:4c:ff:93:5a:5b:aa:70:72:26:7a:55:
14:a4:ba:c8:4a:c6:86:8d:cf:7d:de:64:c3:42:82:03:22:58:
36:f0:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:57:26 2025 by rpki-client