Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa
File: 52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa (raw, json)
Hash identifier: ZZFfoMH726uP+RWE9b82dvXEisWaLSeDp0AGWuH8JOY=
Subject key identifier: D9:AE:98:B2:B6:B3:C2:0B:56:D7:09:20:4A:DB:9E:AB:45:A7:7A:1D
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F43285848D64105D3C07471B8046B25C0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 834
IP address blocks: 68.67.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:05:d3:c0:74:71:b8:04:6b:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=f4f89b5a-258a-4f08-9451-628c0284b2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:00:12:e5:a1:c3:a1:09:48:da:31:b9:f5:
71:c7:20:59:79:c9:b3:4a:48:c7:a1:08:de:ed:13:
05:49:bd:2b:a2:83:07:f2:f7:a7:80:03:0f:56:4a:
e1:d4:cd:7d:a7:d4:66:6d:8e:b0:38:03:8a:1b:5d:
85:02:98:10:cd:2b:c2:1a:89:ac:7a:3e:68:bd:47:
d7:b6:7b:b3:fb:39:cb:7e:c3:af:81:a5:31:b2:ad:
af:a3:e8:89:72:a8:a7:2c:79:5b:8b:41:12:9b:ea:
0d:57:50:1a:af:d5:25:d5:85:0b:77:18:2e:b4:17:
b1:af:83:29:51:c5:0a:8a:2e:51:a3:12:32:b2:b9:
a2:7d:c5:3c:35:e7:2e:8f:89:22:f2:e4:1e:1c:58:
d5:24:a6:aa:fd:3b:5b:49:b1:39:9a:82:b0:fa:7b:
98:d8:87:2f:dc:b5:e4:63:3a:07:d8:30:5b:1b:c8:
82:7b:9e:55:9a:19:8d:13:21:a9:64:fb:de:91:fd:
c8:f8:75:8f:f3:64:eb:e9:01:03:74:ea:75:f4:f2:
7b:e3:09:5a:1d:8d:50:7c:f5:2d:72:d1:87:57:43:
5f:d8:71:42:27:e1:33:dc:01:bc:f3:b2:37:8f:96:
80:a5:35:a1:47:8e:d6:d1:de:1b:38:7d:7c:04:56:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AE:98:B2:B6:B3:C2:0B:56:D7:09:20:4A:DB:9E:AB:45:A7:7A:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
68.67.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:82:21:90:ca:eb:8e:70:4b:77:ce:82:b5:4f:60:da:e4:d0:
a4:48:f7:7d:d4:37:72:4d:d5:1a:40:d2:0a:80:6a:8b:30:7a:
ab:b8:3a:86:04:b9:ad:66:75:87:a0:b1:77:91:90:cb:8d:b7:
8e:ef:48:ba:de:be:1e:44:c8:b8:cf:73:db:7b:a2:b4:72:cf:
35:67:0f:53:dd:34:6f:f5:91:48:68:7a:b4:2f:ac:68:3e:51:
8b:62:f1:76:c3:1d:12:bd:2a:9e:61:b6:74:f9:a9:08:ce:e6:
48:45:cc:81:80:f2:92:ef:c4:f8:24:1a:e3:db:e0:b6:35:81:
20:7e:e6:d8:2b:12:93:9c:c5:01:5c:36:4d:3b:61:6e:80:90:
a2:1f:d4:d2:f8:28:16:d9:56:d0:4b:f2:52:3c:d1:74:33:3c:
69:43:e3:5e:2f:41:91:0f:3d:66:89:f2:7b:d9:3f:37:25:3c:
6c:22:8b:79:a2:fb:2e:f0:e5:d4:98:99:47:fe:09:54:a9:1c:
df:73:0d:43:a1:2c:16:2b:be:2a:67:15:8f:82:08:60:f4:3d:
df:a1:5b:3f:3f:57:94:1b:40:7b:28:1d:14:7f:2c:97:db:9f:
45:90:8a:94:33:88:33:1a:3b:c3:8a:c9:c4:dd:bb:30:35:a1:
a2:0c:d3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:04 2025 by rpki-client on console.sobornost.net