Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/340f2c3f-9c84-3a98-9a45-9eec0ee2e366.roa
File: 340f2c3f-9c84-3a98-9a45-9eec0ee2e366.roa (raw, json)
Hash identifier: esqlq82eBpg9VNw63oGLfF2itlAY5Jrclf4wjk/h26E=
Subject key identifier: D3:3E:EA:EC:32:FA:5E:5B:38:15:F7:45:DC:22:04:E9:DA:58:CC:1B
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858486695BE2C67181CC4B50518F0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/340f2c3f-9c84-3a98-9a45-9eec0ee2e366.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 3356
IP address blocks: 206.164.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:be:2c:67:18:1c:c4:b5:05:18:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=40842d01-b7b4-4204-97a5-962744fe63d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:09:4a:da:3f:e0:cb:79:02:a3:86:23:bc:
e8:ee:86:83:e5:0f:08:9b:25:5f:3a:7a:99:97:b1:
22:43:7e:e9:47:9b:90:40:20:f1:6d:f9:0b:9b:59:
8e:a0:fb:ff:91:4b:0a:f4:e5:46:5a:0b:05:64:49:
44:df:23:07:2e:a1:2e:d3:ab:13:11:41:a1:4b:f8:
a5:a8:89:4a:29:87:b7:92:4d:0b:7d:14:83:d3:23:
c8:6d:77:6b:bc:9f:83:17:f6:72:85:e7:3a:a0:4d:
08:44:e7:b2:06:be:2e:4f:c0:a9:af:1d:ca:65:b0:
be:4b:ad:29:1a:0f:52:fc:1e:1e:27:cf:b1:db:cb:
65:6b:89:eb:f9:73:87:45:0a:de:2c:28:1e:67:06:
5d:ef:9a:52:7b:28:de:53:bd:43:25:e9:56:a5:fa:
05:ef:f0:d8:c4:2a:45:b3:4d:14:3b:d4:ac:c8:df:
7f:bd:56:c3:ea:81:a2:45:5a:2e:6d:45:87:1c:f5:
c0:db:f5:06:89:e3:ca:24:7e:fb:14:7c:d3:32:da:
49:e6:f9:05:70:cd:06:cc:f8:5c:99:16:d5:f2:ef:
d3:fc:f0:f9:dd:8b:c5:8c:94:d5:dc:3f:ab:33:96:
8b:16:37:e6:70:af:eb:1b:27:fa:b5:5a:cc:41:98:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3E:EA:EC:32:FA:5E:5B:38:15:F7:45:DC:22:04:E9:DA:58:CC:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/340f2c3f-9c84-3a98-9a45-9eec0ee2e366.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
206.164.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:3b:5f:53:0f:e9:2f:26:ed:e6:06:85:ec:2e:18:86:08:42:
e1:f0:bb:df:f0:14:55:e6:72:5b:3f:07:e3:b7:bd:6f:6d:50:
26:24:7e:6f:af:df:3c:3a:21:9c:39:55:8e:1e:82:56:b5:74:
0b:a9:1c:e2:db:f5:81:bb:b9:53:8f:46:86:94:04:09:d0:78:
e4:2f:53:7c:d0:bb:26:fa:31:9d:f4:8d:b4:1d:89:51:58:ec:
e9:e1:ee:79:42:61:1e:5c:12:b7:34:0e:44:f0:ea:cd:f3:28:
6a:6d:76:8b:ec:91:78:ed:32:4a:d4:2d:5e:93:a6:a8:d1:28:
90:46:66:88:d5:1c:4c:84:52:73:e8:1d:51:fe:21:2a:36:d1:
10:4d:fa:9c:cf:a6:1a:8c:43:4b:87:b4:3c:6c:24:57:4d:8d:
84:2f:0e:40:e5:c6:6d:75:ef:ff:97:84:ce:ba:f9:23:a9:3b:
3a:b5:49:92:84:73:e9:cb:e6:06:86:68:87:17:28:2b:97:be:
0e:e6:5e:c7:47:7e:f3:12:c2:4d:f5:ac:ba:45:ad:81:be:a9:
8b:10:84:62:78:2c:2b:5f:36:8b:4b:97:5c:4a:01:d7:e7:05:
ac:d8:d1:21:90:b9:c2:36:71:b3:a5:55:7a:2a:fa:b8:c0:21:
0c:b1:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:55:59 2025 by rpki-client