Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa
File: d3144be4-dbb0-30da-85fc-0254be5834d1.roa (raw, json)
Hash identifier: Ey4NGoQ8f6Y4b9eSZ0arbHlghyiMCvrQ91wk41pJFwM=
Subject key identifier: B0:83:7B:00:2C:7E:B8:A8:4E:55:32:A8:39:4B:0F:FE:5F:90:97:8F
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F43285849393E7655E0EC8356372F4300
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 31898
IP address blocks: 68.64.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:76:55:e0:ec:83:56:37:2f:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=15c6ae03-2f7b-46ef-9e41-ebdbf5bc535a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:7c:a9:7b:db:38:83:4e:a6:29:a0:4d:23:
47:b6:a6:25:02:69:d2:47:1e:0b:07:d3:46:25:61:
11:ad:54:7a:db:5c:03:16:bd:c5:04:bc:1c:ba:3e:
cc:75:ae:0e:3b:f8:cc:77:14:d8:c7:db:14:a5:d8:
5f:59:0d:9f:3b:eb:d3:64:0b:bd:d3:20:d9:17:d1:
24:9e:be:61:66:3c:cb:e4:8e:db:42:7f:15:a8:53:
5c:00:b9:d8:09:99:49:87:28:9b:82:da:33:5a:56:
71:fb:f1:23:9f:b8:9c:dd:98:c6:62:72:67:78:1b:
ba:a2:30:cb:dc:f0:30:a8:be:56:05:de:e5:bb:2d:
58:64:9e:25:66:a5:ac:b6:c8:7d:92:16:1d:8a:f6:
45:f2:87:53:12:3b:68:13:98:2d:b9:58:db:f5:fe:
33:a9:fa:76:12:f4:e3:f6:25:6d:d0:99:4e:7c:fd:
e4:c4:cf:af:6d:01:79:4a:a3:5d:e0:49:85:40:68:
c2:5c:dd:fd:37:ec:af:69:1d:19:e9:33:86:c4:81:
8f:66:03:5c:be:bd:0e:89:53:c2:4b:54:a7:90:99:
16:7e:87:f4:18:e6:e5:2a:48:47:1d:8d:cf:69:9d:
01:40:0f:42:bd:d7:f3:5f:52:7b:c7:83:d7:9a:f0:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:7B:00:2C:7E:B8:A8:4E:55:32:A8:39:4B:0F:FE:5F:90:97:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
68.64.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:06:a0:31:60:47:80:48:4c:ed:f2:d8:80:e2:2b:47:ec:ea:
d8:ca:0e:e5:e0:3e:6a:62:cc:e0:c6:f4:84:90:d3:91:b8:8b:
f7:e7:8a:4e:fd:61:da:62:e1:09:12:1a:06:09:ef:78:38:fc:
bf:6b:8b:f3:75:30:46:7f:98:e9:2e:50:99:b8:5d:59:8e:42:
59:54:0e:a0:82:5e:00:8d:70:73:af:bd:e5:b6:53:e1:4e:99:
6b:1a:26:75:98:15:40:70:9f:5c:82:85:95:e4:7f:e7:bb:77:
24:22:4c:30:16:4b:69:40:91:5e:97:80:49:84:11:44:9e:d1:
2c:6b:1c:93:cf:d7:55:85:2f:f7:d6:fe:10:c0:04:c1:35:da:
cd:cf:a8:c8:7f:35:0f:9c:7b:23:00:1a:56:7d:9a:32:1b:6f:
43:49:64:22:bd:ef:46:57:cf:89:f3:c0:da:b2:e7:80:08:17:
fd:29:ae:12:03:48:bb:3e:a4:7f:b2:44:9e:1a:c2:b4:ec:05:
2f:52:75:77:17:c4:43:1f:2e:13:93:c2:2c:74:2a:24:81:a1:
a8:a6:69:84:91:ab:55:64:5f:84:5d:d6:a7:38:61:c3:69:60:
5c:28:8b:49:95:1f:c7:33:c4:16:01:44:8c:23:cd:87:7b:c9:
2c:56:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:15 2025 by rpki-client