Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa
File: db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa (raw, json)
Hash identifier: pYQ3Jvl9W8xfZFiO4ldmzFTvEq1/s/U3KxyQwhG+lho=
Subject key identifier: 01:08:F4:90:A7:EE:4F:12:06:C2:46:90:A2:B0:D9:66:BE:B1:E7:60
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285847EE7F56F635DB3C9AB5A3B424
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa
Signing time: Tue 19 Nov 2024 13:38:55 +0000
ROA not before: Tue 19 Nov 2024 13:38:55 +0000
ROA not after: Mon 17 Feb 2025 13:38:55 +0000
asID: 16509
IP address blocks: 168.87.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:7f:56:f6:35:db:3c:9a:b5:a3:b4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Nov 19 13:38:55 2024 GMT
Not After : Feb 17 13:38:55 2025 GMT
Subject: CN=0dd8926e-f6a2-431f-aa92-6f0e4a5ea391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fb:10:51:9f:a6:e9:02:88:b1:15:d7:c5:fe:
5a:cb:1a:97:83:62:03:10:35:92:82:0b:a2:53:52:
1e:96:cd:cc:92:bf:f9:13:a9:82:5f:3d:7f:48:6c:
c0:12:63:49:7c:15:0a:02:a1:1f:58:1e:36:46:d1:
fd:cb:23:a5:fd:da:a2:21:f1:e8:1b:28:b6:95:1a:
8f:25:ab:6a:46:a2:8d:39:70:0c:6a:43:ba:cf:33:
fa:0c:21:38:ac:c3:3b:01:6a:89:2c:c5:ef:dd:7b:
39:35:2b:6b:e1:37:71:19:0c:62:72:9c:a1:26:40:
92:29:1c:3f:09:08:3c:a0:a3:90:14:47:29:e3:0b:
ee:ce:5f:2b:c4:a4:6f:8a:ec:46:76:52:5b:20:55:
02:ad:23:bc:03:34:33:5e:e5:f3:6a:ad:8f:9a:53:
49:99:33:9a:c3:eb:fb:70:ae:49:05:60:76:b1:13:
ed:0d:c3:da:a2:df:01:24:ec:97:be:7d:f7:5c:2a:
59:11:37:88:da:46:d8:91:fe:d9:7f:5a:65:7b:54:
71:bc:b0:fb:f7:ce:ca:84:e5:19:ce:6e:78:3b:84:
43:95:8c:c9:c0:25:26:80:00:85:a8:5b:f5:d4:76:
4b:8b:ce:d1:7f:33:e4:a3:08:db:f4:89:03:4b:b1:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:08:F4:90:A7:EE:4F:12:06:C2:46:90:A2:B0:D9:66:BE:B1:E7:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:96:26:75:c7:61:46:7d:80:12:e0:04:a3:7d:a1:47:c9:b0:
d4:3c:c9:fe:26:9b:ee:07:a1:ac:b5:61:de:34:4b:88:08:14:
b1:7a:66:a6:45:16:ab:b3:d8:21:3e:41:ce:a6:2d:f6:a8:48:
91:df:64:df:7d:2e:7f:5a:26:22:0a:8a:30:90:f0:77:35:be:
b3:4b:cd:78:32:44:55:0d:2e:13:9b:3b:ff:e6:31:b1:65:a2:
9d:f9:54:a7:ac:5e:ff:8c:f0:66:da:8c:8e:c7:5d:2b:35:61:
59:ca:3f:12:1e:b5:c5:e3:e2:cf:94:b1:9f:2a:4e:a5:94:18:
83:25:af:b7:5c:0d:22:cc:71:c9:e8:59:bd:9e:50:99:7c:ee:
5d:0b:03:8b:8d:d3:b9:85:3a:e1:77:08:01:af:55:ea:08:b0:
f1:a0:a1:e1:8e:d3:3e:bb:5f:9d:27:8f:9b:7d:3a:7d:63:b6:
75:9b:24:13:61:14:dc:45:ee:bf:a2:78:93:fe:a4:b1:38:26:
6c:52:0b:fe:b6:6f:6d:b0:14:3e:ca:27:7f:62:fb:a6:29:d7:
13:e8:e7:91:16:6a:78:72:5f:76:dc:8a:72:44:6f:9f:14:d5:
03:0b:45:24:16:24:84:81:5d:c2:c9:88:50:70:59:2d:13:a7:
95:79:2b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:18 2025 by rpki-client