Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa
File: cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa (raw, json)
Hash identifier: mMgbd3iDJLuzobpV+ZcdqIqM/0P/LyiNSWkY681Nl34=
Subject key identifier: 9D:04:D7:F6:DA:73:71:E3:FB:9E:BB:11:58:76:40:FD:7A:D7:07:22
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858497DA61ECF961C80B1CDF05E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa
Signing time: Fri 11 Apr 2025 13:01:00 +0000
ROA not before: Fri 11 Apr 2025 13:01:00 +0000
ROA not after: Thu 10 Jul 2025 13:01:00 +0000
asID: 33489
IP address blocks: 68.85.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7d:a6:1e:cf:96:1c:80:b1:cd:f0:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 11 13:01:00 2025 GMT
Not After : Jul 10 13:01:00 2025 GMT
Subject: CN=5b42effd-2df3-4598-b471-91b54408a163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:97:d0:5c:af:27:68:45:bc:e7:10:f5:d2:
79:79:05:21:ba:8f:e2:31:77:c0:c9:4d:87:b0:fe:
40:f6:a5:17:6e:62:98:c0:73:9a:f3:b7:38:91:9f:
d6:48:86:cb:66:00:bb:b0:74:7e:4b:bc:51:cf:56:
c3:47:d3:72:79:ee:b0:9e:d0:b3:30:65:47:f8:6a:
4a:d6:c2:7d:c2:5c:d1:3b:69:28:54:23:b2:56:d3:
d4:bc:45:c6:67:bf:fd:ff:c1:1a:92:da:00:22:1e:
6f:71:04:b0:d2:d2:77:fa:70:46:16:56:9d:00:a9:
1e:ac:15:05:42:db:19:23:24:48:a0:d1:e5:5c:e7:
11:16:ce:9d:6a:d5:89:a2:ba:47:41:eb:8e:85:6d:
cc:b1:fc:fa:fa:e8:6e:da:e3:b7:72:17:6b:dc:ed:
8d:07:c7:00:b2:2d:cc:72:92:23:f1:e7:5e:e0:e4:
eb:cc:89:43:79:0a:b7:d8:b5:67:08:32:f1:ea:98:
13:0f:96:45:d2:06:33:4d:39:02:c4:72:4a:4a:e4:
95:2e:d3:73:3b:55:b0:8e:8b:68:1d:0f:32:1d:53:
0b:f0:ed:0f:02:e5:ef:be:f6:95:fd:ab:53:38:44:
97:08:01:1a:cb:7e:41:be:a2:df:e3:4e:0b:9e:ed:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:04:D7:F6:DA:73:71:E3:FB:9E:BB:11:58:76:40:FD:7A:D7:07:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.85.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:85:e4:a5:6e:0a:7e:73:d5:0c:3c:55:c5:f0:20:d7:ae:b3:
ed:d2:61:51:74:57:42:16:29:f5:c0:ff:ef:b9:89:19:43:cf:
c5:0f:45:f4:1a:a5:56:b2:57:1e:10:1e:4a:e3:8d:6d:8a:9b:
1a:64:07:67:db:12:68:7f:65:91:0b:ae:b1:33:87:cb:15:25:
1c:b0:7d:f2:1f:0c:b5:31:80:30:6d:a6:44:82:57:46:0b:c5:
7a:7c:5c:e4:d7:df:07:99:95:de:ba:c6:80:f0:cc:4e:65:0d:
83:fe:57:e6:a0:ee:d6:26:1a:0f:cc:ad:d5:b9:3b:fd:be:51:
85:db:dc:a1:05:f8:16:35:7c:17:a4:f9:f3:44:32:ad:0f:96:
3d:ed:af:9c:27:4f:bd:63:f2:63:f6:60:9f:31:65:6e:86:0e:
be:87:41:47:3d:50:ee:fe:99:71:24:7c:8f:40:58:10:d3:5d:
35:31:80:8f:60:6f:c1:bf:d6:be:b7:aa:e7:49:91:ea:a7:62:
0d:37:0e:8e:67:7e:08:8d:61:51:f3:6a:68:b1:ee:c7:fe:12:
27:fe:f5:b5:09:01:c1:9b:8a:fb:bb:6a:48:3f:8f:08:a9:24:
e2:8c:7a:87:74:27:7e:92:93:84:ef:bc:4c:a8:11:3f:66:35:
85:4b:84:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:14:02 2025 by rpki-client on console.sobornost.net