Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa
File: f408855e-9251-37a2-9fb5-4cba259a98d2.roa (raw, json)
Hash identifier: LvJnAsDrt22VIZWnzdZwKnvsnm9cnYppwK/m8+iv4Vo=
Subject key identifier: 92:39:49:CA:86:66:99:90:56:78:4B:C6:73:00:B3:BD:5F:AD:F4:ED
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F020DB441A4CF9B12B1980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 202
IP address blocks: 168.87.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:20:db:44:1a:4c:f9:b1:2b:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=a434f0b8-e2cd-412b-bebc-e18a78da2697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a5:a3:f2:2e:36:dc:ec:30:41:f6:52:7c:3f:
90:6f:24:bf:71:9f:c2:8d:e4:2c:bb:ad:19:a3:03:
87:4a:e1:11:e4:cc:ee:0c:05:8d:7a:ee:f5:9e:2a:
5b:d7:3c:d7:0a:a7:38:77:f7:31:a8:e2:84:6a:ba:
ba:36:1f:f9:af:a6:9f:aa:17:b1:5b:f4:b9:76:74:
2e:15:83:f9:e9:ec:e1:2c:63:94:19:27:4f:9c:f3:
b1:6a:6e:3c:14:90:00:d1:ad:84:a8:4d:9c:e3:84:
fb:be:e2:a2:bd:34:d9:d5:66:35:80:a6:4a:bc:07:
92:8e:c6:26:ae:e3:fa:3e:6d:ca:91:28:b4:26:96:
f6:e4:ac:b3:aa:40:e6:21:ae:a8:85:b7:fe:92:e6:
15:ce:f1:da:2c:94:cf:cf:66:aa:bb:a2:e5:51:21:
99:31:0e:88:38:a4:33:ed:fd:72:69:b1:5d:80:ad:
fb:7f:7d:c5:08:64:8a:1e:37:b5:c3:f3:5a:2e:e7:
69:f5:b3:39:6b:e8:5e:66:56:db:70:77:03:a1:ee:
05:23:3d:ee:c8:ae:e3:26:e1:81:67:92:04:12:3d:
64:5b:31:21:98:bb:db:bc:14:ea:8e:72:3b:24:49:
a1:85:6d:98:ae:66:54:99:6e:cd:ec:40:b0:82:9a:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:39:49:CA:86:66:99:90:56:78:4B:C6:73:00:B3:BD:5F:AD:F4:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f408855e-9251-37a2-9fb5-4cba259a98d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:34:36:3b:6e:c7:28:1d:dd:ba:5a:43:07:27:c7:58:65:44:
54:fd:9b:a4:63:51:36:73:fe:99:90:24:9e:aa:20:eb:6e:03:
b2:f2:1d:1d:e2:5b:17:a3:bf:1e:68:82:7e:5c:c0:24:1e:e1:
be:06:3d:b2:ac:00:7d:90:77:0a:2b:00:1f:28:00:0c:a3:d9:
74:4e:15:80:ea:4a:2d:0b:2b:57:ea:0c:9e:1d:ce:14:3d:a7:
82:cf:ef:4e:e7:4e:f9:c9:e0:ce:4a:fe:cf:43:d9:3e:c3:7a:
50:cd:80:07:38:2d:0c:0b:75:88:e6:47:53:d6:7d:76:b0:c9:
48:ba:f3:15:17:b2:d1:47:66:40:9d:8d:26:c3:19:5b:6c:e7:
9c:bc:88:f8:22:57:2c:2f:be:34:c8:52:e0:5e:99:c6:02:46:
d0:ef:62:13:ec:46:e4:ea:2c:4d:7d:af:ff:99:dc:d9:7e:2d:
48:4d:f6:d2:69:4b:30:43:cb:45:8f:c7:6e:cc:85:be:87:a9:
2b:04:5d:ff:a3:0d:ef:3f:c0:14:5a:85:1c:46:99:46:ba:60:
80:3c:3b:bb:d8:74:1e:b5:1f:a3:f7:c1:26:ce:05:ec:07:97:
9e:68:1c:d5:b6:1d:5e:53:e8:d9:21:a7:50:d4:18:ec:04:f9:
8e:ad:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:29 2025 by rpki-client