Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/78268fec-2d74-3b2d-b220-eb20428f1a7a.roa
File: 78268fec-2d74-3b2d-b220-eb20428f1a7a.roa (raw, json)
Hash identifier: xgmch4DK/odBgzFd+UJbhAwcdB5+zvU4Sy2TWD+tcCI=
Subject key identifier: 30:74:6B:3D:1B:42:BE:5C:91:48:1F:B7:DB:4D:00:4F:5A:56:7A:87
Certificate issuer: /CN=3ce5ae55-06df-4120-8c12-2f433ba85d4e
Certificate serial: 010D0C9F432858489BA0AEBB2780846E2B8C0D48
Authority key identifier: 85:74:1E:A9:02:9B:74:DC:DC:6B:9A:67:89:1A:E7:5A:F3:32:32:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/78268fec-2d74-3b2d-b220-eb20428f1a7a.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 167.88.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:ae:bb:27:80:84:6e:2b:8c:0d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce5ae55-06df-4120-8c12-2f433ba85d4e
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=5d101f88-ff3b-428d-9100-e4d1bd05d765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:62:8c:70:8f:e6:c0:ca:58:7a:cd:45:b6:
4f:98:d1:74:d9:fa:d7:28:22:41:53:61:dd:19:84:
bc:ae:a5:a5:c8:eb:4a:19:4b:8b:5b:7d:d0:9a:cc:
07:0a:f6:a9:e5:8d:72:6d:46:fd:18:ca:5a:88:5c:
e8:fa:d3:a4:96:20:3a:6d:e0:6a:d1:95:ca:94:5e:
8a:8a:98:cc:52:b9:a1:32:bd:30:32:fc:04:1c:70:
ee:6a:75:50:2d:9a:4b:48:6b:14:d9:3e:48:d0:e5:
ca:d0:e4:12:e8:e7:5d:7c:28:af:cc:14:5b:72:23:
cb:03:1f:d3:8c:80:27:a9:42:4a:1e:5b:27:16:60:
e4:ab:bd:5e:35:a5:16:88:27:28:d8:99:5f:50:88:
52:42:32:b2:4f:ef:13:33:50:b7:92:3b:1b:4d:5d:
a2:b8:7d:1b:d1:91:0f:37:20:9f:21:5d:8b:2d:2a:
1b:45:a4:04:7e:a7:12:a7:10:2c:a3:e2:03:f3:2a:
9e:ee:89:00:47:81:eb:ad:77:bb:c3:5b:c6:96:6e:
36:82:37:5e:7c:eb:38:51:d6:2c:12:4d:03:73:52:
d2:ba:12:a2:38:b5:5a:b5:45:3e:f7:da:a8:f3:2c:
3e:52:26:8a:a3:6d:17:cd:c9:db:ac:60:dc:43:b9:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:74:6B:3D:1B:42:BE:5C:91:48:1F:B7:DB:4D:00:4F:5A:56:7A:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/78268fec-2d74-3b2d-b220-eb20428f1a7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.crl
X509v3 Authority Key Identifier:
keyid:85:74:1E:A9:02:9B:74:DC:DC:6B:9A:67:89:1A:E7:5A:F3:32:32:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer
sbgp-ipAddrBlock: critical
IPv4:
167.88.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:b4:8d:d0:6a:ad:20:d0:69:f1:dc:18:15:3c:22:c5:b0:be:
b7:f5:1e:1e:69:58:cc:08:f3:3d:a1:db:18:b8:68:d3:94:c9:
15:5d:87:42:36:49:61:40:98:20:55:30:c6:c8:a1:c6:a2:9d:
30:02:f1:4a:81:2a:86:57:54:c8:6b:56:7f:f5:7d:1d:b8:4d:
f1:ce:ce:18:35:6a:5f:27:5e:ba:90:88:32:31:4e:8d:ab:7c:
f7:fe:b6:7d:02:99:0d:21:b5:d9:b6:a3:17:03:80:54:16:ac:
0e:0e:49:3d:03:c6:79:37:0e:01:8b:0d:d3:0f:37:45:9e:b1:
ce:1d:ff:82:a1:4c:bb:b7:41:85:89:b4:c2:d8:5f:8e:77:7f:
b0:f7:31:68:57:e4:13:9d:52:2a:24:24:fa:ab:6c:a4:e0:31:
02:76:81:8f:74:56:7c:79:f9:52:d1:2e:0b:53:e3:13:3d:e6:
72:fe:0f:b0:55:3c:c6:78:57:82:26:91:ed:20:ab:5f:7b:cb:
b9:d0:2c:2e:44:d5:a3:91:bc:d2:b4:1a:84:9f:a3:6f:f0:c8:
78:67:5e:a8:30:0d:42:34:14:cb:48:83:3f:5c:16:4d:55:77:
48:c5:c9:4c:b1:51:30:09:c9:28:31:04:9b:e5:5a:3d:95:c7:
71:b5:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:08 2025 by rpki-client