Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7906bf42-e53a-32dc-b163-36903bc1d1ed.roa
File: 7906bf42-e53a-32dc-b163-36903bc1d1ed.roa (raw, json)
Hash identifier: XBrTtuOB1+ZhEm7evhW5XigLxLG11HZQS8Wfgw2iwgY=
Subject key identifier: CE:36:93:1F:C7:79:79:F3:9C:35:1A:86:9B:2C:E6:FC:93:17:FC:00
Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial: 010D0C9F432858484C101C3CD6FCA4CC7EB7D840
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7906bf42-e53a-32dc-b163-36903bc1d1ed.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 88
IP address blocks: 66.180.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:1c:3c:d6:fc:a4:cc:7e:b7:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=68007505-114b-43d3-bf7f-368ffba5afa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9c:39:cb:6a:74:cc:4e:f9:4a:de:fa:27:4e:
ae:ce:b0:c0:72:35:2f:0e:ea:84:ee:57:68:08:91:
9a:67:d0:5b:3d:29:dd:51:03:68:20:81:b4:07:10:
62:7b:04:1a:46:ba:e8:1a:dc:1d:de:b6:b2:e3:76:
36:d4:8b:a5:46:c0:1c:e4:13:36:95:fa:a6:02:6a:
f7:ea:b8:5e:45:ef:b0:91:09:14:6b:b5:39:56:cb:
1f:d3:c6:1e:bd:64:27:38:be:74:f0:be:23:4f:fe:
28:96:a7:5f:84:75:8e:33:66:ec:af:3a:96:3d:a5:
20:8c:ce:4a:9e:a6:9b:46:fe:8f:d0:f0:de:0e:fc:
47:77:8e:46:67:94:33:8c:90:8c:fb:4e:b3:8d:fa:
8f:43:1c:54:3f:65:1c:17:5d:cd:a9:93:4c:12:cd:
99:c2:6e:06:b2:e0:cc:93:bc:3b:d0:7f:74:7b:69:
f0:4c:b5:3a:d7:8e:7e:d3:b4:48:5f:bf:2e:07:61:
2a:49:c8:9c:aa:8d:d9:26:b2:ab:e3:16:f7:aa:a6:
00:7f:ad:04:c6:7f:82:e8:77:fc:c5:ee:73:81:d1:
51:0d:04:59:2c:36:a5:40:a0:d3:26:35:6b:97:1b:
c4:a0:4a:31:7e:85:20:e5:6e:c1:b1:0d:cb:60:27:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:93:1F:C7:79:79:F3:9C:35:1A:86:9B:2C:E6:FC:93:17:FC:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7906bf42-e53a-32dc-b163-36903bc1d1ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
X509v3 Authority Key Identifier:
keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
sbgp-ipAddrBlock: critical
IPv4:
66.180.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:19:40:6d:f8:47:53:be:9c:34:e3:e4:ed:90:92:f7:60:9e:
a4:5c:91:d9:b1:59:d1:72:ee:53:49:02:45:5d:78:7b:41:f0:
f8:88:47:bd:34:9d:85:58:23:29:97:4d:2e:8e:d3:3d:c9:71:
37:10:9a:42:94:8e:73:ee:1b:2f:39:01:ed:63:b5:3e:90:20:
85:49:a6:99:87:31:a4:44:e5:1d:f7:c4:be:7e:77:3b:71:27:
c0:f1:bc:70:d4:e6:72:70:f6:28:da:92:ec:68:c7:35:18:05:
07:29:7f:c6:c6:3c:72:fb:63:92:fd:ba:af:60:e3:b0:8d:ae:
b2:0d:01:98:f5:e4:11:c7:ed:c9:c6:05:b2:a1:f5:01:3b:d8:
01:02:fd:2a:a3:0b:92:94:f8:84:25:01:2d:c5:3f:94:b9:21:
f0:11:6f:2a:4e:89:e2:2c:9a:9f:d4:b6:a8:0e:13:ff:99:d0:
d8:e4:7e:0c:f7:71:1d:96:55:d0:c4:b4:69:f9:3f:ca:dd:b7:
1f:59:df:b8:74:49:83:0a:08:5b:31:2e:76:6c:95:d8:38:11:
ac:a7:70:00:75:34:30:bf:36:88:72:b5:3d:91:10:25:60:07:
49:fa:2c:69:c7:3f:4e:07:ed:3a:27:95:94:01:bd:2b:5f:3a:
fb:aa:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:39 2025 by rpki-client