Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f62ed1ac-6d22-33ee-b46b-077e1d87adaa.roa
File: f62ed1ac-6d22-33ee-b46b-077e1d87adaa.roa (raw, json)
Hash identifier: jqVUXSDdfxiEm1h8Q9sbyFtLgbOwFZ/XjjTYwzDv+JM=
Subject key identifier: 64:FF:BC:6E:BD:06:1A:4E:FA:33:27:F6:3C:27:2F:62:E9:76:C7:49
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848E59BD0F54B73E85CA9577A80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f62ed1ac-6d22-33ee-b46b-077e1d87adaa.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16417
IP address blocks: 68.232.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:d0:f5:4b:73:e8:5c:a9:57:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=a20a36e7-b69c-4e39-8b6b-fb79eeb763ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:01:11:96:01:c4:4b:0f:98:92:d0:e4:a5:
98:2b:0a:54:3c:94:ef:32:ec:59:4f:62:21:1f:68:
9a:60:26:12:33:55:91:97:f9:c0:41:0f:25:db:0a:
53:37:85:2c:27:15:35:1a:48:e7:16:6c:48:06:5c:
21:f3:aa:8c:a0:ee:f4:10:dc:f1:aa:02:c9:5f:a5:
00:29:24:eb:19:56:67:b0:33:1a:95:da:77:e1:39:
a6:89:ab:fe:a8:53:fd:d9:12:6a:03:4d:de:3d:21:
86:e0:6e:65:bb:18:99:05:86:fc:c5:ca:2a:46:9d:
3d:f3:9d:3f:f2:7d:5c:fd:24:68:34:9d:fc:df:a6:
54:4b:ba:78:d6:c3:20:39:f3:1e:70:2f:c5:ec:30:
c8:5a:7f:4b:12:28:87:ef:75:97:2e:24:0e:93:02:
11:f4:6a:d6:62:cb:8c:dc:b6:8b:25:9e:13:fa:ef:
cb:6e:2a:be:e3:54:7c:f1:50:28:e5:15:ec:67:7e:
b9:da:42:e8:59:b0:94:5a:19:2c:83:9b:92:6f:52:
03:f8:86:81:90:c3:a4:09:08:4b:2b:24:d5:10:5e:
95:82:bc:6d:ed:8c:54:a3:82:20:ed:08:2a:6e:3a:
c7:4f:ba:c1:2b:9b:00:23:db:27:cb:c7:7b:88:f4:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:BC:6E:BD:06:1A:4E:FA:33:27:F6:3C:27:2F:62:E9:76:C7:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f62ed1ac-6d22-33ee-b46b-077e1d87adaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
68.232.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:05:00:bc:4a:d9:ed:dc:68:a7:cd:a5:9b:9c:29:60:d2:fd:
d0:64:ab:46:bd:52:8b:b7:ac:b9:5c:80:ba:3e:10:57:c4:3f:
7c:f4:91:55:4d:56:bd:51:b4:ee:0a:14:a3:c6:4e:68:da:e9:
c3:07:69:23:0c:a7:2b:b3:94:55:89:45:f6:a1:63:8a:97:b2:
6b:48:e0:7c:62:b0:ad:cc:bb:45:6a:2c:12:68:2a:33:f7:2d:
50:1c:8b:99:62:f4:c1:41:2c:be:3a:ec:03:e0:c8:d1:63:3c:
b2:f3:22:db:92:a2:13:60:5f:ea:bb:7b:f6:97:95:24:d8:b0:
a9:aa:b0:e1:0d:77:74:50:a7:89:fb:15:12:64:3c:51:dc:bd:
e1:fd:cc:27:51:85:76:a5:bd:0d:e8:14:f7:78:a3:ec:8f:8f:
5f:da:36:f3:1e:52:bb:21:82:20:b8:fa:bb:df:af:aa:b2:6e:
fd:77:cc:b4:0f:71:76:d8:9c:83:e7:76:14:7a:a7:76:cf:ec:
09:3e:9a:03:b2:c6:0c:66:5e:c0:44:a5:e5:ee:86:a3:e7:87:
bf:2d:b0:14:32:4e:29:c8:9d:eb:af:58:43:1a:96:34:84:ed:
48:b4:57:de:e3:a1:6b:e8:b5:8b:f9:32:e2:76:e2:a3:57:fe:
1f:0e:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:41:12 2025 by rpki-client