Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa
File: 8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa (raw, json)
Hash identifier: 8kBjSUMdipk6mbMUthNYeFxoDpg/GCUePpKRKmy1GHQ=
Subject key identifier: 99:2E:01:77:9C:1C:11:FF:34:EF:FB:47:1D:26:1E:34:A6:52:75:6B
Certificate issuer: /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928
Certificate serial: 010D0C9F43285848F22C67D4090DA6AC6D895900
Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 68.70.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:67:d4:09:0d:a6:ac:6d:89:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=cd4f3dfb-d79c-46e8-82dd-8722c367eb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:8a:c8:69:3e:37:f4:40:71:f9:36:df:f7:
d0:84:fc:50:cb:e5:e1:23:03:40:2b:f3:11:06:4f:
27:a2:3f:1a:0e:18:e2:d4:27:e9:78:f3:d6:62:2b:
43:71:a6:2c:7e:ca:c1:fc:43:6f:a9:cf:cf:4c:1e:
9b:8c:28:cd:82:19:62:08:08:db:dc:24:74:f1:cb:
7a:b1:03:6c:a5:52:ed:cf:7a:55:86:17:d2:7d:55:
41:90:8c:ae:9c:6c:a2:89:85:15:5f:09:8b:da:80:
99:03:fa:94:ae:c5:8f:34:4b:77:57:48:98:ea:4c:
a4:8d:43:58:18:23:ca:4e:74:70:7f:74:9e:97:ac:
04:70:25:3b:f5:ce:f1:d3:4e:b6:df:4e:6d:60:0b:
5e:73:cf:1b:eb:8d:c3:a4:a0:30:46:7d:18:88:9f:
11:44:15:39:09:94:49:e8:38:ea:38:18:83:c1:37:
fc:f0:21:60:2e:76:3d:19:c1:bb:40:f2:39:11:1a:
01:6a:86:ca:6e:8c:d7:60:ef:ad:49:06:fd:4c:4c:
9d:06:e4:44:da:6c:64:33:60:52:8f:64:76:40:1c:
ca:f2:f6:81:44:38:23:ad:52:1f:ee:6b:74:10:8e:
d3:43:69:fa:32:a0:bf:18:e5:ae:d4:46:eb:2b:59:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:01:77:9C:1C:11:FF:34:EF:FB:47:1D:26:1E:34:A6:52:75:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl
X509v3 Authority Key Identifier:
keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer
sbgp-ipAddrBlock: critical
IPv4:
68.70.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:b6:c8:92:b7:b3:d5:48:40:e2:13:a2:37:a3:1c:e9:5c:e9:
31:bd:20:0b:bb:4d:f9:bc:4c:45:ae:6e:4b:12:f5:7d:77:71:
7c:a1:c0:77:9d:a2:54:40:9a:39:a9:5e:c2:7e:b1:88:ec:9d:
1e:3c:c9:f9:81:33:bd:4b:cc:8a:0b:b2:43:8f:28:53:c1:09:
d4:0e:e8:f0:ef:7a:55:ed:bc:fe:27:f9:b1:18:eb:06:a5:ea:
00:ad:5f:5c:88:d3:e8:07:6a:cc:c3:5d:14:ec:30:76:9c:3e:
ba:30:04:f5:24:94:ad:af:48:62:b7:67:cf:55:d1:12:48:6f:
d6:c9:31:f3:32:a5:a4:8d:35:a2:77:4b:f7:33:49:43:28:f6:
b2:40:37:ff:f3:fd:e0:0e:67:6d:a6:43:b1:a3:e9:5f:b5:62:
ff:20:da:ee:ad:b2:c2:6d:4b:f6:6a:5e:aa:f0:ae:4d:66:01:
c6:61:a3:7e:79:ef:e7:15:37:95:07:f4:70:15:f5:2c:3b:0a:
e8:04:54:10:c1:66:3c:38:2e:64:18:71:b6:a3:19:63:34:f6:
8e:bb:c5:3d:18:4c:c9:e2:b9:87:b7:95:eb:59:14:ac:16:a8:
38:20:c5:23:43:99:91:ee:a1:60:0a:21:c1:e0:4b:7e:5a:83:
68:50:89:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:22:28 2025 by rpki-client