Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa
File: 48529b48-e02e-3ba6-87a0-38a733adde1c.roa (raw, json)
Hash identifier: XlQPa7yVFxXY7B9EV5chjGqC/6TQHCadmHh2kPvyPNc=
Subject key identifier: 56:2D:C1:6D:CB:16:1A:CD:98:86:0F:D9:41:43:B8:18:66:6B:D5:5D
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F020F914FE628690A26480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 203
IP address blocks: 168.87.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:20:f9:14:fe:62:86:90:a2:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=aa57e1e7-44d0-4db9-8b90-01bc492c6220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:24:52:53:95:e4:c9:15:64:d2:6c:fd:65:
2e:47:f4:03:54:10:32:8d:0c:fc:5e:24:68:d4:c7:
06:2b:d5:19:57:eb:06:a4:2a:45:48:54:17:3e:db:
25:ba:d8:c9:d7:b8:04:cc:f9:22:a7:3e:fb:a9:0b:
43:4e:74:9c:9d:a4:54:6e:a5:06:6d:5b:af:44:da:
b2:19:53:24:9d:9d:e0:be:a7:bd:7f:35:47:57:f3:
4a:05:16:f3:29:90:00:2b:8e:e4:bf:94:b0:0a:7e:
6a:80:be:2d:82:bd:c4:c9:16:06:25:26:95:31:01:
80:62:2b:c9:a2:3e:a1:73:36:de:00:41:db:d2:f4:
3b:c8:5b:9a:9e:9e:22:00:c2:d0:6a:ff:f0:d5:9c:
0c:5d:82:8f:a7:7b:a6:ea:31:e8:af:55:5c:f2:43:
c0:82:ca:d7:73:f6:52:86:97:10:05:2a:d9:75:6b:
04:3f:78:7c:d3:67:9a:90:e2:8b:d6:3f:51:ec:00:
2d:44:98:70:1c:67:94:de:eb:de:cd:da:aa:67:51:
26:1f:56:87:69:07:d3:b1:d7:81:c2:cb:ed:95:e5:
f0:a2:47:9c:a9:83:d6:60:52:55:30:05:1f:0c:f5:
50:ee:69:e1:39:40:2f:40:1c:9f:c6:e3:4c:25:1e:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2D:C1:6D:CB:16:1A:CD:98:86:0F:D9:41:43:B8:18:66:6B:D5:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:4f:bc:96:53:a3:d8:6e:7f:78:74:12:1f:34:1b:ed:1c:62:
b6:91:71:6d:e9:ec:09:3a:91:79:e9:cb:11:85:f8:54:7c:da:
4f:7c:a5:d2:b5:9c:ca:28:f6:a5:2a:84:e5:00:38:2e:21:96:
9f:43:4b:65:80:f0:3e:c2:2d:d8:48:18:f2:23:81:ff:59:91:
ee:87:24:b5:c1:41:4c:e3:91:22:bd:e4:f5:3e:9c:c8:55:ef:
be:08:8c:08:4f:d1:fe:f8:4b:ba:b8:31:8e:64:7f:8f:8b:b3:
9f:bc:ee:61:98:a6:58:f5:97:79:30:3f:2f:62:ec:91:38:3e:
ac:8d:69:a8:44:69:f8:2b:a3:d6:61:d1:7c:b3:69:05:2a:80:
b6:14:5b:37:8d:e1:75:d8:74:c0:7b:8e:80:03:7b:66:fc:a5:
9c:b0:d8:83:50:26:00:2b:88:af:94:35:ec:c6:d1:7c:dd:3a:
87:ac:ec:cb:51:5e:0e:72:55:78:74:83:78:5e:7b:3e:77:53:
55:ef:68:d2:e8:28:b6:86:03:30:f8:fa:2d:9d:d8:16:74:ba:
3f:7e:c7:7d:4e:08:72:77:51:04:40:16:59:0e:82:c6:e7:49:
24:16:fe:e3:41:d0:fa:0a:0d:60:a2:b3:a5:95:03:b4:a9:d1:
ac:d0:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:44 2025 by rpki-client