Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/529295ef-e763-3afa-988c-316f3418f79d.roa
File: 529295ef-e763-3afa-988c-316f3418f79d.roa (raw, json)
Hash identifier: kvEAjV3qiRSSI+adV7uYB4SusQT9AdMGXtESa7lMFyA=
Subject key identifier: 09:99:36:0B:9F:87:99:AB:C4:8C:E0:50:5E:DB:96:64:BC:64:18:17
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832EFE7EC4D66D8372C42F920
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/529295ef-e763-3afa-988c-316f3418f79d.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 203
IP address blocks: 168.87.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:e7:ec:4d:66:d8:37:2c:42:f9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=c8aa4b60-7173-471c-a5c2-556bca16d935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:ec:e4:ee:f7:e3:25:01:9c:cd:05:bc:70:
e5:cb:f4:7b:01:9e:f3:62:45:bd:71:e9:66:ee:f1:
a8:ef:7a:bc:e1:8a:30:c5:d8:24:2e:49:c5:f8:02:
81:7e:0e:14:04:c0:0a:d2:e0:f9:ad:f0:76:cd:dd:
73:9b:88:b3:9c:78:f1:72:f6:30:b7:01:84:10:50:
60:d4:1b:58:0e:32:2f:67:98:3c:3e:7d:22:ec:c7:
e3:e4:fe:94:d1:67:f0:e5:32:69:08:12:d3:eb:a7:
b1:d9:bb:eb:3c:e3:d0:bb:43:29:11:30:12:27:88:
1f:98:88:02:03:15:53:5e:a4:41:27:79:f4:e6:28:
ef:75:c1:ac:23:6e:6b:2d:22:af:4d:74:06:66:6b:
29:9a:15:58:92:d2:b7:67:1b:9b:91:b6:bd:1b:95:
d1:41:63:a7:00:e9:6c:f5:24:5f:33:63:5c:5a:f6:
c5:eb:9f:de:a4:eb:63:d2:ba:e5:60:3e:b8:58:55:
0a:25:d0:60:8e:07:b8:a8:ef:5e:04:87:84:4c:3c:
43:02:da:2a:fe:51:b7:3f:cb:3d:ed:22:72:21:cf:
3d:33:64:69:36:77:12:4b:80:2a:0f:7f:36:01:5c:
c0:d5:e0:8e:f1:cf:9b:8f:0b:13:05:82:4d:31:bc:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:36:0B:9F:87:99:AB:C4:8C:E0:50:5E:DB:96:64:BC:64:18:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/529295ef-e763-3afa-988c-316f3418f79d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:0c:4e:42:18:08:f4:d3:92:7e:1a:4f:f8:c4:33:bf:7d:e6:
86:fe:a0:a7:ec:87:9f:8b:20:46:4a:bf:78:1e:78:d9:db:c8:
78:10:00:50:7f:f9:ed:c4:ea:08:96:1e:f8:d2:e9:85:41:5d:
6c:a9:22:3b:d8:7f:8d:0e:b9:b7:3a:cf:24:cb:c0:db:b4:8d:
ce:50:a0:31:d8:cd:8d:c8:a4:2e:bb:99:c1:f7:0f:65:73:df:
15:6b:22:09:94:72:04:20:bc:ce:30:64:24:be:71:ea:57:22:
7c:51:ef:83:e7:f7:2e:ef:8d:79:79:a9:2f:39:9a:8c:52:04:
4c:59:5a:36:e0:71:6e:89:ac:53:af:da:31:d2:65:be:9a:32:
f2:78:2a:a9:0d:7b:cc:d4:0a:a5:5a:0f:62:48:f3:52:a1:ae:
89:72:37:fd:2c:a9:55:cc:bd:c7:9c:ce:85:c0:fe:4d:1f:68:
3c:2f:ef:0b:9f:50:17:97:c5:d7:8d:fb:cb:1d:8a:a3:8e:dd:
f3:2f:7b:8f:30:b9:0c:59:df:2b:69:e4:d6:0d:09:f6:60:18:
25:a1:b5:f8:d1:e3:95:93:8b:11:4a:78:fe:5f:79:3a:56:0c:
e1:a6:08:8a:85:56:4c:d4:4d:41:53:db:f8:eb:5a:a2:29:91:
db:dc:98:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:25:20 2025 by rpki-client