Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa
File: 5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa (raw, json)
Hash identifier: roq222r7M6/0A8o7JqCmEv2wjJvS7IIBN08JzHpZiUI=
Subject key identifier: 09:04:57:84:A0:B9:13:CE:4B:A9:84:EB:B9:99:50:49:38:CC:6F:5E
Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial: 010D0C9F4328584975755E0C8F1D0E237F9FA380
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa
Signing time: Tue 08 Apr 2025 14:39:53 +0000
ROA not before: Tue 08 Apr 2025 14:39:53 +0000
ROA not after: Mon 07 Jul 2025 14:39:53 +0000
asID: 21782
IP address blocks: 68.66.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:75:5e:0c:8f:1d:0e:23:7f:9f:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Validity
Not Before: Apr 8 14:39:53 2025 GMT
Not After : Jul 7 14:39:53 2025 GMT
Subject: CN=0f41467a-6bee-4765-bffe-feaf861390b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:11:2e:d0:13:c5:21:70:cd:83:28:89:41:cb:
4c:08:11:c6:71:75:c6:11:d8:e8:90:3d:f9:0b:90:
99:88:ed:36:df:fa:a7:94:41:68:e1:69:3c:03:45:
73:fd:3c:33:93:b3:6c:51:bb:eb:a4:c7:68:cc:82:
80:f7:c5:eb:ba:cb:dd:5b:86:82:40:13:73:80:fd:
42:7f:7c:61:4c:e2:03:84:fc:f0:9d:bb:f2:c0:35:
69:e6:de:d7:08:cf:60:e9:cb:74:28:80:1a:4e:ad:
79:e3:15:d4:84:c7:46:e6:5b:1d:5b:9a:16:27:0c:
b9:3f:7a:e9:d5:19:fb:52:af:af:10:e4:2b:56:09:
cf:17:51:f3:e7:8b:ba:b0:97:22:62:cb:01:1f:37:
4f:d5:c1:be:19:ad:5e:18:4e:25:db:77:51:29:a1:
56:b7:04:20:0c:92:71:5c:ee:3d:b1:d0:77:9f:79:
f5:42:aa:7d:68:94:6e:26:f6:57:a6:49:96:2a:b8:
d0:57:ce:27:ca:07:cd:a4:2a:e2:5f:3e:8d:27:53:
72:55:17:f6:ee:53:aa:e5:8c:98:19:e2:3e:01:bb:
d0:be:e7:c1:e7:8b:ff:d3:b4:49:02:25:78:36:27:
49:76:f4:8c:38:2f:de:12:67:9a:ab:10:d0:ab:ac:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:57:84:A0:B9:13:CE:4B:A9:84:EB:B9:99:50:49:38:CC:6F:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
X509v3 Authority Key Identifier:
keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:7d:92:f2:a1:b7:83:23:b7:94:d0:31:88:1c:ed:96:c3:62:
cc:aa:c7:4f:cd:fb:a2:3a:00:66:41:a2:79:78:2e:99:4c:d5:
e1:11:95:08:43:2a:d0:27:20:61:64:6a:72:89:d2:b2:62:ca:
d9:3a:54:3a:52:a3:70:dc:aa:95:9b:dc:41:a0:f2:9e:92:17:
df:9a:81:08:1a:10:8c:4d:55:81:de:f2:1d:6a:b0:5e:aa:bc:
61:63:6e:7f:36:21:e7:b5:02:2e:9c:a8:d8:ad:3e:6b:a3:a6:
3d:19:40:53:b9:27:70:94:e2:10:61:cc:af:d4:81:a3:8a:b8:
b4:d2:32:d7:e9:4b:28:50:6e:9a:9c:54:f1:36:90:ff:c6:cc:
bc:b2:f8:22:b9:df:dd:4e:e1:43:fb:a1:f6:1e:6e:85:63:7f:
00:cb:13:d8:c7:b2:f4:fb:bf:52:fa:02:c1:f2:56:c8:93:3e:
59:b0:40:15:cd:08:db:58:e7:66:c7:98:35:ed:12:48:87:4e:
15:6a:d0:29:7b:b8:21:3f:3f:57:c6:ac:24:06:41:ed:58:97:
64:c9:77:f5:9b:45:79:e1:83:76:3a:e3:9e:b0:db:06:b5:d1:
a7:58:b8:96:f4:f5:88:38:95:77:d1:36:42:c8:37:dd:91:8f:
87:c2:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:01 2025 by rpki-client on console.sobornost.net