Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ba80c1c9-6012-3f86-9683-d36a1f6bc607.roa
File: ba80c1c9-6012-3f86-9683-d36a1f6bc607.roa (raw, json)
Hash identifier: EuVw4xfAc7a5A1Ru8wBoE7qsgQvqcnElfZKZ0d57M4c=
Subject key identifier: 44:38:14:0C:47:D0:00:E1:B7:73:A2:2B:7A:73:2A:B1:5B:EF:34:F9
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285848CB16529E6BE977CADFA4A800
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ba80c1c9-6012-3f86-9683-d36a1f6bc607.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 55293
IP address blocks: 68.66.212.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:52:9e:6b:e9:77:ca:df:a4:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=fb68e606-78f3-4200-87fe-5f01442f35f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:3b:4d:cf:77:94:69:b8:1b:34:c6:e9:5e:
28:1f:a9:4f:31:20:22:37:dc:e5:3d:07:5d:f5:a1:
8b:ae:d7:d7:29:ca:ec:de:be:68:d7:54:cc:d4:4d:
52:c3:15:02:54:7c:9e:49:39:db:66:69:f8:66:b4:
dc:5b:aa:98:bd:50:bb:da:25:dd:e4:33:33:1c:c0:
57:a3:43:24:a7:4d:95:ac:30:55:42:c2:63:dc:a7:
d6:f8:74:2e:d6:8e:13:6f:95:57:ef:e3:ed:5d:6f:
04:38:ca:01:a3:73:fe:9e:91:ec:1d:90:49:c3:65:
7b:c2:5b:a7:1e:04:6d:22:7c:4c:dc:f6:a1:f9:b0:
d4:12:21:d8:ed:2c:39:cf:3e:09:5c:d4:ef:a7:0c:
26:78:34:37:13:cb:ed:60:f9:cb:7b:f7:8d:f1:5d:
fb:1b:45:48:aa:2b:07:56:1d:ee:c8:bc:a2:22:93:
6e:af:eb:3f:08:55:f6:df:ef:89:12:b1:b3:27:ae:
9b:ee:a4:f5:1c:1c:62:aa:1c:e2:37:4d:21:e8:af:
45:7b:b5:70:b3:2a:a2:38:1a:d7:ad:cd:d0:52:77:
1b:87:62:01:44:b9:cd:e8:93:52:42:f6:28:9a:ec:
5c:41:5b:77:ad:c0:64:6e:1a:66:39:e5:4e:52:b9:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:38:14:0C:47:D0:00:E1:B7:73:A2:2B:7A:73:2A:B1:5B:EF:34:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ba80c1c9-6012-3f86-9683-d36a1f6bc607.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:b1:98:3b:77:9f:95:9e:23:fc:6b:22:6c:d9:40:3f:ac:81:
37:e5:e9:b1:a2:a5:77:49:1e:62:90:20:7e:38:1b:6d:2a:75:
54:8c:86:d0:7a:36:06:ec:06:d2:3c:19:cc:be:34:44:7f:7f:
1e:fe:5c:52:d2:0f:c4:f6:86:54:4f:9c:2f:c7:44:a7:e6:47:
21:0a:de:6b:bc:f7:2f:03:bc:6d:e8:df:04:b2:a2:99:5c:71:
c3:e6:a8:b8:bb:62:1c:2a:b6:84:af:14:5a:ba:7b:3e:43:5a:
b5:5a:6b:f9:92:91:1c:13:e3:d9:f7:07:44:7f:b4:49:c6:1f:
b8:03:00:b1:20:9f:0d:c1:4d:13:4b:3e:ca:da:fb:91:76:64:
7d:cd:07:26:60:aa:7e:be:ce:29:de:fd:3b:a7:8b:a7:bb:f9:
71:87:55:78:76:0a:7b:67:59:14:5b:4d:52:bc:77:8c:81:3c:
71:fa:78:b9:79:e6:b1:48:1f:ad:aa:43:4d:65:d5:b6:c5:20:
6a:e6:65:2e:c7:66:ec:98:67:8a:57:ef:9d:63:35:5d:f5:a2:
0f:91:89:01:cc:bd:cf:6c:9a:e1:18:13:6d:e4:f5:d2:92:49:
b8:ff:ed:74:16:12:ae:8d:47:fd:36:7c:b4:5c:c8:e4:54:88:
49:ae:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:53 2025 by rpki-client