Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa
File: 70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa (raw, json)
Hash identifier: vTl6uyLN5heVnCDmQ9pmws/t5ae7FbBUvjyG38N2cf0=
Subject key identifier: B7:A3:D3:A2:62:FD:8F:20:57:39:1C:B5:E8:83:FB:F9:40:51:7C:49
Certificate issuer: /CN=b6e29f76-f782-45f9-8ad8-791d08e6d174
Certificate serial: 010D0C9F432858482D5A88D1438D4356505B6920
Authority key identifier: 58:B0:7A:20:A8:11:53:07:D0:43:5A:E0:05:03:20:53:A3:74:9F:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 30192
IP address blocks: 167.88.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:88:d1:43:8d:43:56:50:5b:69:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e29f76-f782-45f9-8ad8-791d08e6d174
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=5d154eda-09cb-4811-9156-30eec6e13c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:55:42:5b:19:78:1e:2e:3c:5b:94:ef:86:
2b:29:74:ea:ce:4e:33:cd:3d:af:d0:c4:60:de:37:
79:a2:af:08:58:f9:2b:db:b6:1d:c5:6a:f5:3d:42:
f0:04:a1:0e:a0:ef:8d:1d:d5:31:fc:73:07:00:7a:
82:13:fc:f0:3b:32:d7:3d:85:10:dc:81:13:23:5b:
cf:20:ee:f8:2f:a1:2b:2e:88:46:37:b6:5d:48:e3:
9b:18:c8:48:00:fa:83:32:16:4c:ae:d0:a1:e0:cf:
24:e5:18:91:c9:e8:ec:b3:8a:d2:31:9a:42:c7:d3:
6a:84:82:dc:e4:d8:f6:43:9e:af:fd:e1:0f:9f:c8:
7c:ee:ff:32:50:17:93:2b:2e:f3:8c:7f:37:3a:f9:
a6:9c:e5:5a:94:6c:ad:05:9c:f1:19:8a:32:79:1e:
44:af:75:6f:ab:78:86:56:93:71:e5:39:cc:04:1f:
fd:86:18:ed:55:e8:d1:2c:b7:a1:bf:7e:31:9a:ec:
46:05:3d:92:4e:82:51:3a:76:69:01:f5:7d:ec:91:
a7:85:78:bd:80:9e:eb:1c:5e:bf:58:a3:6a:c6:7e:
ea:f8:f9:54:88:30:fc:7c:ac:c9:ce:fb:33:3f:38:
76:2c:bf:e5:fa:a2:f0:c5:ac:0e:13:c8:ed:a5:a1:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A3:D3:A2:62:FD:8F:20:57:39:1C:B5:E8:83:FB:F9:40:51:7C:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.crl
X509v3 Authority Key Identifier:
keyid:58:B0:7A:20:A8:11:53:07:D0:43:5A:E0:05:03:20:53:A3:74:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer
sbgp-ipAddrBlock: critical
IPv4:
167.88.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:19:e3:9f:83:e5:dc:8f:9e:f0:d5:2a:06:6b:6d:62:21:35:
f2:17:aa:5d:8b:27:a6:4b:27:61:83:47:fb:04:a4:0f:99:ab:
ba:06:e4:07:e0:17:8e:22:ec:a3:2d:26:35:86:84:a6:eb:a6:
c7:e6:64:a6:d0:b0:d3:a9:7e:a8:dd:82:dd:96:ba:a7:4c:c7:
cb:6e:0d:b7:05:9c:b6:dd:8a:a8:d7:ec:e2:d6:82:1c:3f:22:
c4:06:e6:ab:21:fa:43:9a:1b:0e:f5:8c:04:d5:b9:d9:19:3a:
a0:0f:2c:ae:bc:5c:ba:ad:97:0a:6f:7a:1f:02:a4:1c:8a:35:
42:f7:b5:56:c5:c8:8b:3a:1d:80:7e:e6:01:97:98:ab:da:45:
90:87:1b:a1:72:39:d2:ab:35:4c:d0:dd:40:37:dd:b3:d1:db:
69:f5:d8:58:73:a7:b5:d8:16:9c:19:29:cb:ea:00:9e:42:2a:
57:81:7b:4c:c8:0c:b7:65:93:c9:94:3f:cd:c4:06:3b:bf:16:
59:5f:10:07:58:66:66:fd:55:fd:58:55:2a:a1:20:15:eb:2b:
a8:15:84:45:13:22:f1:b5:90:c7:ad:d4:a8:59:7a:22:ab:0c:
46:d8:ae:1f:6d:8d:0a:34:9a:30:54:57:b5:f8:8b:b8:d9:fc:
91:dd:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:26 2025 by rpki-client