Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1eb63e5d-4696-39c5-a711-0ea422bf8c81.roa
File: 1eb63e5d-4696-39c5-a711-0ea422bf8c81.roa (raw, json)
Hash identifier: ZMLglB6UuJX9XRm6cU8VLM3unPrPzIOsm8cB8HNTcuY=
Subject key identifier: 8F:73:E6:DA:F0:20:BA:31:DE:D8:E5:00:C5:A1:30:23:DF:BC:BD:D5
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285849254A3859472F59024AFF6C70
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1eb63e5d-4696-39c5-a711-0ea422bf8c81.roa
Signing time: Mon 10 Mar 2025 21:28:17 +0000
ROA not before: Mon 10 Mar 2025 21:28:17 +0000
ROA not after: Sun 08 Jun 2025 21:28:17 +0000
asID: 22423
IP address blocks: 68.182.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:4a:38:59:47:2f:59:02:4a:ff:6c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 10 21:28:17 2025 GMT
Not After : Jun 8 21:28:17 2025 GMT
Subject: CN=1c1552eb-0aba-4176-8813-805442c1e0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:db:a4:0a:1f:c7:46:70:4e:d1:9e:8c:40:
48:be:ca:7e:0e:48:6b:23:4e:95:5c:be:87:21:41:
1f:a9:4d:33:6b:82:13:47:ea:b0:90:6b:c5:5c:5b:
79:af:c9:4e:e6:9d:2e:86:17:55:27:b5:bb:3b:7b:
9b:0e:e8:ba:c1:b5:0a:ed:a9:da:e1:da:d9:15:83:
ce:ad:01:32:79:01:f9:f6:8c:ed:aa:bc:a9:96:e3:
3f:bd:9e:ef:fe:9f:eb:98:d1:8b:44:6d:54:30:98:
2e:27:0f:bf:b3:f9:72:5a:7b:70:5e:ce:90:3f:0b:
75:0b:bf:21:34:a4:81:f2:ce:99:ee:69:b6:b4:d1:
d9:2a:bd:2c:69:9f:f8:13:a6:7b:fd:d3:6d:5e:35:
b4:80:69:3e:06:76:94:7f:c0:71:78:9f:6e:32:e2:
e8:d1:c4:54:f1:00:48:7f:a7:db:2b:ca:f9:54:03:
29:95:62:99:21:e1:df:e2:d7:db:3c:15:de:a8:4b:
b2:56:20:2d:ff:96:92:62:3d:43:e3:69:4b:45:5e:
1b:3d:5a:45:63:7a:a5:b2:7b:6b:78:e1:59:35:65:
57:7a:4b:ba:13:f6:bc:24:54:5a:61:0d:cd:45:83:
68:d8:75:5a:04:ea:3a:10:0b:f3:2d:84:d7:21:b7:
40:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:E6:DA:F0:20:BA:31:DE:D8:E5:00:C5:A1:30:23:DF:BC:BD:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1eb63e5d-4696-39c5-a711-0ea422bf8c81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
68.182.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:a7:c0:14:a0:3c:39:e8:3c:c3:1e:2b:3e:e9:2d:1b:33:e6:
97:41:1f:62:21:e3:b9:a0:15:fd:78:a1:75:63:00:14:7d:ae:
88:e9:d2:b9:75:79:37:99:1f:bf:62:ac:08:98:7f:e4:75:ab:
3c:ff:af:2a:9f:ac:94:9e:7e:b2:0a:97:a3:32:0a:de:fe:cb:
3d:a4:a9:c2:b6:b8:e5:b6:c4:ed:73:5c:7d:da:d3:a4:16:72:
f4:ee:07:18:3a:dc:df:79:4e:34:0b:b0:b6:fc:df:91:cd:6a:
ce:93:c4:80:ff:0e:ea:69:03:86:bc:4d:84:91:31:19:4b:b6:
f8:6a:dd:d2:91:f6:d4:0b:5f:ed:24:e9:fc:98:95:6d:ae:ef:
9a:98:59:9d:01:cc:00:ff:3e:ee:58:c6:9a:be:e7:dd:f4:55:
0e:8f:51:c2:4a:57:4d:fe:52:03:1a:3d:e4:4e:14:38:db:d7:
73:66:2c:8e:43:8b:14:6d:8d:c9:bf:89:2a:46:ed:76:67:bd:
7c:5c:0d:a0:ef:a8:6b:16:0a:11:45:70:12:13:39:0f:48:17:
dd:ad:d0:01:7e:b7:4a:ea:b7:59:1e:7f:44:b0:bb:5b:05:88:
99:a9:0f:1d:9c:0d:f8:67:2b:b8:07:c7:b9:94:9d:4c:50:80:
25:5a:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:41 2025 by rpki-client on console.sobornost.net