Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa
File: dbfc0664-0294-36d7-b0bb-77ae346459b8.roa (raw, json)
Hash identifier: N1tMdzGF3Wi+i7zR1gs1srD9+IDqdTWB25jRHtx5g6E=
Subject key identifier: 60:D3:3B:AE:48:08:0B:8B:12:8B:00:F7:9D:84:A9:E3:50:D8:89:2A
Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial: 010D0C9F432858480EA50AEEDD8DAB0F0843F110
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 40703
IP address blocks: 157.166.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:0a:ee:dd:8d:ab:0f:08:43:f1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=8aff5d11-9059-4419-8070-3c904c6a4041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:0d:de:b4:f9:ec:75:24:ff:ab:a8:43:6c:
a3:b7:44:ef:20:5e:c0:4b:37:09:63:d9:b0:78:a0:
4c:6b:38:a0:a8:cc:7a:e7:89:5a:d2:c4:a3:a0:71:
8b:ce:41:3b:96:13:74:d4:2c:29:ca:2a:01:27:ee:
33:70:eb:e3:e9:59:88:de:d7:cb:8d:4b:3f:fe:27:
6c:c4:fc:ac:2e:43:07:fa:84:e8:f0:e7:d1:2f:83:
77:33:4d:0b:94:74:e8:a0:f7:ec:b4:f8:ab:40:c4:
36:e3:37:cc:0b:e8:fb:6d:65:8e:3c:d5:2c:45:63:
d6:9d:bb:c2:5f:83:5d:40:89:08:f2:fb:4f:94:16:
00:5e:e1:66:5e:21:46:f0:7e:9f:20:5a:8c:23:00:
7b:8f:d7:02:64:d3:ca:86:d5:19:0c:e1:a1:85:68:
20:f1:50:e3:d6:34:49:a6:83:ef:49:87:ce:35:04:
7c:14:7d:4b:e4:7b:7b:6f:ec:0e:83:29:6b:4e:19:
e5:f5:7b:1a:b7:ce:4d:e8:e0:29:fc:96:b0:dc:c8:
a4:8e:e0:0f:1f:86:90:71:e9:3e:75:c4:5d:fc:c5:
84:0b:80:4d:6a:83:96:4c:34:e1:89:6d:c8:5c:b1:
7d:bf:4a:04:72:ca:cb:23:15:7a:dc:1c:32:23:6d:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D3:3B:AE:48:08:0B:8B:12:8B:00:F7:9D:84:A9:E3:50:D8:89:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
X509v3 Authority Key Identifier:
keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
sbgp-ipAddrBlock: critical
IPv4:
157.166.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:28:1c:bf:ee:d7:95:f4:d8:dd:a3:60:79:c3:33:8b:1f:e4:
0e:a3:d8:42:00:c8:f1:98:0f:42:e5:a6:43:b2:fb:b4:36:0d:
a7:4f:4d:6b:77:55:cd:ca:aa:8e:ef:72:f9:56:da:b2:ef:50:
87:41:66:b4:90:60:43:6a:01:84:0f:2b:81:73:b8:08:d5:e1:
e8:b7:55:8e:0a:ae:3b:f5:46:d1:a6:04:3f:0f:d3:6a:9a:e1:
41:e4:ad:8a:2a:0b:52:4c:26:fb:7c:89:6f:5b:d1:6d:d9:e7:
eb:28:7a:71:f8:21:2c:8a:cc:16:bf:d6:5a:8a:a7:eb:33:5e:
87:d1:ef:55:1c:33:3a:53:7d:a4:13:e8:4a:ac:0b:48:f0:03:
9a:9a:53:72:45:65:de:45:9d:c6:e7:f9:c4:a7:4b:f7:43:0f:
fa:d8:13:7a:37:37:5d:1b:0d:2e:34:af:f7:e7:4d:1c:e6:8a:
4f:9f:42:a5:18:d1:b0:25:71:90:b6:19:23:19:ed:5a:c6:ac:
98:a0:7c:a4:38:9e:e6:03:09:a4:a2:12:12:53:e1:72:7c:20:
bd:c4:44:86:a1:bc:dc:e8:bc:4f:ca:66:98:d1:e3:2a:dc:ff:
92:2f:10:dc:ca:8e:14:2d:0d:d6:cc:4e:db:66:66:de:4d:a6:
aa:96:f7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:12:12 2025 by rpki-client