Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
File: 02fc3568-a294-3f7b-a040-efba2cd76305.roa (raw, json)
Hash identifier: jslV6IXAqpq6q+ZidcsUlNwaYs4ex0WyCqTh9D2KvGM=
Subject key identifier: ED:83:26:3D:E1:94:9B:42:30:AC:93:94:C4:DA:2A:E0:23:69:C4:D5
Certificate issuer: /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial: 010D0C9F4328584819CFDFBC21BCB6354ECC6780
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 8075
IP address blocks: 67.210.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:df:bc:21:bc:b6:35:4e:cc:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=a879e684-cbb6-4673-a032-5426b88e45ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:dd:4f:75:e5:b5:08:76:8f:85:49:ed:53:
e6:8c:8b:31:e8:d7:b0:f7:5b:c5:24:e7:ea:f3:7a:
c4:68:c1:2f:08:9c:d8:0e:92:16:82:16:96:4e:7d:
68:86:7d:79:0b:d0:27:0f:ed:59:95:a6:8e:28:a0:
71:38:31:a7:1e:be:a0:64:b3:32:95:00:b2:4b:b9:
42:f6:c6:28:48:a8:8f:6f:da:ef:2b:ec:a2:9f:b3:
41:fd:2b:7a:3a:20:86:66:1d:9b:48:b7:e7:91:4c:
78:e8:21:4b:60:e7:ed:30:93:36:86:4b:3c:2b:e9:
b0:73:90:13:d2:82:6d:ae:e9:49:8c:14:cf:a1:0e:
05:4b:44:bb:d5:ce:04:5a:96:7c:a5:38:b0:e8:aa:
c9:6e:41:b7:b6:31:10:86:fd:54:21:c2:e2:12:cf:
9c:7f:47:25:00:15:f8:19:cb:8a:cc:99:17:54:a4:
a3:78:8b:af:cc:ce:7d:d7:f0:24:f1:16:1d:79:f2:
f5:76:c6:8f:5a:f6:8b:09:31:be:b5:bd:44:a1:1c:
0c:00:ae:01:c2:12:d3:cf:03:be:d2:54:5f:32:06:
df:05:eb:40:52:c6:6f:a6:cd:ee:12:da:95:14:ed:
84:ef:87:9f:c2:41:16:05:c6:83:87:d1:33:07:f9:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:83:26:3D:E1:94:9B:42:30:AC:93:94:C4:DA:2A:E0:23:69:C4:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
X509v3 Authority Key Identifier:
keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
sbgp-ipAddrBlock: critical
IPv4:
67.210.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:83:25:93:7a:f2:a5:3d:09:40:5f:b6:a3:f7:0a:7f:7f:1e:
9a:78:3b:5f:f1:b6:60:3e:ec:c3:0b:88:b4:ba:3c:71:67:bd:
a9:ca:42:b9:1e:17:21:92:05:bb:35:d8:4f:65:6d:ba:1d:a5:
89:4c:c0:2c:40:b4:8b:2f:10:62:1c:cc:11:20:67:75:d1:a3:
0f:49:d0:a9:ca:1e:f3:52:a0:33:53:0e:a2:57:15:b1:d6:07:
de:74:25:ed:2b:9f:e5:97:17:82:f7:37:cd:4c:d7:cb:9a:af:
74:da:8e:8b:a2:42:c5:e7:3a:59:c5:30:ed:95:13:b5:e5:8d:
bd:5d:c2:ba:16:7b:7c:b6:a2:72:04:0f:e1:6b:df:87:19:68:
4e:7d:9a:7d:ce:f2:0c:23:bf:96:fa:3f:6e:0c:7b:23:bc:d6:
66:d4:1c:ed:1f:56:f1:b0:97:b5:f3:6e:a5:4f:b5:ce:2e:8d:
25:09:87:6d:c4:f3:a4:f3:ea:11:36:c9:dd:aa:d6:2c:b7:ae:
c3:a4:8d:58:93:2e:ca:a5:23:9a:36:a8:08:5a:82:65:d1:9c:
e8:1c:15:cd:28:33:ff:c5:c0:ac:ee:4f:c4:52:63:bd:af:6c:
d9:2b:55:be:f3:b7:27:37:76:19:f3:84:04:d7:25:4c:9e:7c:
56:4d:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:27 2025 by rpki-client