Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bef063c-ab40-38e8-9dc0-229e6e8e7797.roa
File: 5bef063c-ab40-38e8-9dc0-229e6e8e7797.roa (raw, json)
Hash identifier: 8EHGaOMlcd/DYoNk+IS7RrxI/gm+M5LtjdPzegxYTjM=
Subject key identifier: 86:38:6E:DE:AA:5F:F8:71:41:A4:47:AA:27:0F:6C:BA:57:EF:FD:AB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA5BCE07EABC93F867BC380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bef063c-ab40-38e8-9dc0-229e6e8e7797.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 22909
IP address blocks: 68.34.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a5:bc:e0:7e:ab:c9:3f:86:7b:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=f04f24e7-b8e3-49ac-9a4b-2ab16a0e8c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:16:8b:c9:e7:27:9b:09:e8:55:f8:87:78:18:
5e:2c:a0:c6:85:3f:35:b2:f0:f8:27:76:cb:30:b2:
20:71:76:91:d5:36:c5:65:54:05:6e:4d:74:28:b3:
25:31:d0:de:2b:25:93:28:6f:ed:3a:92:1a:6c:75:
03:14:d0:7b:29:72:83:08:91:55:77:10:1a:8e:cb:
57:85:dc:9e:43:8b:39:1b:16:6a:4a:4f:75:31:3a:
9d:92:bc:5d:4e:86:2c:73:f3:62:65:ea:03:04:49:
cc:d0:4a:d1:ef:21:99:aa:bf:cc:f6:dd:82:6e:4c:
60:fb:9e:49:76:1f:35:55:55:de:19:45:d8:3c:af:
e8:73:c5:77:4b:42:21:32:e4:7e:e4:36:c8:91:57:
2a:fa:b8:1a:42:8b:2b:ef:e1:33:a6:5f:de:f9:19:
fe:54:aa:6e:9f:73:9e:1c:cf:a8:4c:00:2a:de:0d:
18:f8:03:28:4f:60:7c:5b:64:09:be:e3:6a:2d:c4:
c4:e6:f1:ba:25:44:f3:e4:15:1e:10:45:b5:d4:88:
ad:9b:c1:b4:fd:19:ff:29:a5:fc:35:62:df:02:15:
2f:f4:a7:f4:72:53:ea:46:f2:b8:65:15:34:e9:a0:
3b:11:3d:40:d2:01:79:b5:2a:53:c5:40:6a:60:5f:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:38:6E:DE:AA:5F:F8:71:41:A4:47:AA:27:0F:6C:BA:57:EF:FD:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bef063c-ab40-38e8-9dc0-229e6e8e7797.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:8b:66:73:69:10:a1:dc:8d:d4:f0:5f:20:59:1d:bf:a6:f8:
b6:7d:13:15:ac:8b:fa:8c:6c:10:62:58:38:4e:e8:21:b7:a2:
45:89:dc:8e:c1:e2:21:05:c1:01:9d:4a:23:53:3f:e4:54:46:
a7:cd:ef:56:9e:d1:59:9d:15:67:cc:58:e4:5c:64:61:3b:44:
79:b0:59:56:6e:b3:dd:ff:22:36:c2:3e:31:b1:ab:a2:cc:0c:
0f:e6:16:7e:65:07:83:3e:46:cc:8b:4b:5f:b7:18:2a:fd:d2:
5f:0f:2a:3d:1c:a6:e7:4f:e3:ff:6e:e3:53:87:94:d5:f5:82:
20:be:57:52:38:9e:9e:5e:a5:a8:05:60:7d:14:83:1b:73:aa:
87:e7:83:2a:42:ad:14:6e:95:47:6b:e7:e0:da:f3:4c:50:ba:
96:d6:47:73:03:c3:fa:59:cb:0c:b7:36:44:94:12:38:85:30:
da:e0:b5:cf:a4:51:42:ba:a1:f2:9a:78:60:01:45:fe:e4:e2:
4a:af:8a:5b:8f:15:0a:91:cc:35:72:5d:c8:49:01:dc:2f:d6:
c4:d4:0c:ad:22:85:0f:6f:1c:3c:4e:cc:06:6a:40:e6:7a:53:
a7:7f:27:2d:df:b0:e2:24:0a:0d:b0:23:d9:ff:ea:a0:10:45:
c3:0c:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:46:04 2025 by rpki-client on console.sobornost.net