Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/7758bdee-f27e-3fe3-8549-992578523e6b.roa
File: 7758bdee-f27e-3fe3-8549-992578523e6b.roa (raw, json)
Hash identifier: JZKuOexp0zJKEXpsvmYE33caPou2oGF2X3kkE05PQ3A=
Subject key identifier: 17:12:9A:16:EA:9D:55:16:32:1C:00:D2:9D:E4:FF:41:C5:A4:BF:FE
Certificate issuer: /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial: 010D0C9F4328584855D59E9DB942467D7253C6A0
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/7758bdee-f27e-3fe3-8549-992578523e6b.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 14618
IP address blocks: 167.253.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9e:9d:b9:42:46:7d:72:53:c6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=2e24aecf-c087-4b83-8f6c-04bed8dc308c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:47:5f:74:e4:bb:47:cd:65:1c:15:da:6d:
f9:0f:07:99:16:c9:4a:6a:cf:1d:b6:39:0e:80:db:
4e:4e:37:89:cf:85:10:06:a7:4e:3f:b0:b7:dc:b2:
4b:c6:d0:e2:4c:b2:c0:aa:d4:d6:7b:09:95:7e:aa:
ea:10:b7:30:4a:4e:15:2b:03:89:f9:96:6f:4e:5f:
4a:d8:14:89:f1:51:83:96:1e:92:be:39:aa:4d:4d:
5f:e2:3f:e6:dd:a2:4f:35:ec:ba:37:0f:67:6b:78:
68:cc:33:17:79:3e:ea:5f:8a:47:a1:4d:a0:83:90:
a1:9f:16:ec:a7:13:64:6d:a4:df:ee:d4:f8:29:9b:
50:e4:1d:b1:96:c3:50:7e:cd:f7:2a:d6:ee:37:75:
6c:b4:28:4a:a1:ee:30:e0:bd:93:4b:69:6b:d1:8e:
8a:21:fa:e2:c4:eb:6c:c4:dd:a7:e3:ce:f0:c7:89:
e1:2d:fb:c7:db:c6:11:5b:bf:f0:44:d4:83:61:35:
fa:b2:60:a9:01:b5:df:f0:a4:52:74:87:17:c0:19:
10:c2:e4:43:51:f3:3d:27:8e:79:9a:4e:cc:a1:63:
f6:3c:6f:e7:eb:27:b5:86:ca:79:c8:de:64:58:30:
cb:e8:37:ea:34:ae:af:f8:43:9c:82:2f:68:df:13:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:9A:16:EA:9D:55:16:32:1C:00:D2:9D:E4:FF:41:C5:A4:BF:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/7758bdee-f27e-3fe3-8549-992578523e6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
X509v3 Authority Key Identifier:
keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:1d:45:5c:ba:1b:13:3c:5b:6e:0f:15:27:20:02:1d:ff:84:
4a:45:ff:10:52:c7:b0:b8:d6:e1:a6:a9:74:f0:ce:e1:f4:b9:
0c:8d:3e:56:b7:9c:95:54:b8:ff:f1:af:6a:9b:5b:44:17:de:
8d:3a:63:88:35:fd:90:43:42:7e:3a:ba:df:e5:47:93:75:60:
1f:1e:5c:f5:62:5c:8e:6d:14:d5:d3:19:4f:79:07:e7:c9:ae:
e1:92:62:3f:db:44:f4:04:d0:1b:a3:35:ab:4b:c3:87:c8:23:
5d:9b:bb:4a:16:79:ab:19:2d:ea:e3:52:b6:7d:47:a1:b9:45:
fa:2d:c2:7f:22:cb:03:47:a8:c2:e4:84:70:a7:51:b5:25:8c:
e6:98:8e:de:b6:f6:97:bb:24:b1:13:f1:78:be:24:04:30:06:
30:ff:79:94:38:5f:1a:64:3f:ec:db:f6:37:8a:71:fa:25:fa:
72:94:fa:69:d7:70:b6:46:5a:23:23:13:ca:ce:ac:be:55:e6:
af:6e:ab:21:7b:87:f8:2c:97:c8:7c:2e:35:32:56:1a:d9:cb:
35:84:53:71:37:20:96:11:2d:cc:ce:dd:92:e9:8a:d4:34:d3:
e7:79:ba:ed:af:a6:84:14:b7:5c:7c:ca:72:df:f4:4b:ec:72:
26:ca:fb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:04 2025 by rpki-client