Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa
File: 5fc3e362-19d5-308a-8dcb-de8129446685.roa (raw, json)
Hash identifier: 8zfJCLQbBwswNtv+3GjPGMCBKoIaldCqzg4jqhXbt2c=
Subject key identifier: 19:71:A3:E3:29:55:17:86:8F:5C:5A:EC:E7:76:74:40:9E:03:5D:A4
Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial: 010D0C9F43285848F65BD29CFC90FD84B0D4D280
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 20278
IP address blocks: 167.88.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d2:9c:fc:90:fd:84:b0:d4:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=6978b329-4a39-4bbe-8434-a64fc98620ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:02:9f:3c:f7:b6:02:8e:bf:03:21:99:9b:
7b:4b:d5:58:32:f3:6b:9e:46:fa:9e:56:af:cf:73:
5a:a3:04:aa:ed:fd:5f:24:de:5f:ec:61:28:ea:9c:
f0:d9:fa:fd:d1:d3:26:7e:18:a1:4a:61:68:07:5c:
17:2b:92:62:ad:40:78:02:37:1a:20:25:68:42:7c:
22:eb:56:3d:a5:ae:c7:9d:ea:f1:f2:73:d7:53:be:
3e:46:4c:47:24:82:a3:cf:af:9c:9f:5f:50:80:81:
12:25:b3:1e:f3:4c:b5:89:7a:8d:ee:59:fb:0c:3d:
99:b3:43:89:dc:79:58:39:8b:44:3d:43:ed:aa:6b:
88:95:db:a5:36:5b:33:0a:83:8e:0b:16:42:6b:f6:
a2:be:63:50:5f:2c:81:e7:5f:6c:27:52:a9:47:17:
bb:0b:c9:de:93:1b:b8:de:25:63:ac:b9:20:2a:50:
5d:23:30:b6:b5:02:23:48:a0:4a:e7:19:62:3e:6a:
02:b1:f2:75:56:cf:48:f9:3c:7e:af:d5:6a:9f:84:
c1:a7:8a:7a:70:f2:0a:79:50:84:9d:ab:2a:67:36:
8e:d6:4d:9d:52:02:9c:bd:5a:2a:2e:03:c5:a4:ea:
09:07:bc:4f:f0:9e:27:46:64:e4:d1:ab:e7:c7:82:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:71:A3:E3:29:55:17:86:8F:5C:5A:EC:E7:76:74:40:9E:03:5D:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
X509v3 Authority Key Identifier:
keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
sbgp-ipAddrBlock: critical
IPv4:
167.88.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:88:14:d0:44:ea:b4:b5:dc:1e:07:26:57:f7:a4:ce:6a:81:
b8:6f:42:bc:07:57:60:f1:ff:63:e5:ab:f9:e6:04:6d:b4:60:
66:df:cd:ac:3a:c8:4a:7d:ee:3b:9c:b1:82:f7:a6:a3:d0:bf:
74:d1:a5:8d:24:3e:0a:48:14:5a:b0:e9:29:18:c9:70:0f:6e:
81:e6:5d:af:02:8b:6c:81:29:07:aa:39:fe:12:3d:bd:54:d6:
b0:e1:8b:25:ad:1b:84:2d:07:d8:35:d0:e7:25:2a:66:03:7f:
58:1d:1a:75:ef:b8:14:29:bf:e8:b3:14:cc:5a:6f:99:88:b0:
e3:65:9a:5d:a2:43:3f:d2:48:06:76:da:03:79:63:1e:95:79:
c7:ce:22:39:02:a6:4e:b0:e7:70:08:e2:d5:3a:54:3f:d2:bd:
c6:9d:1b:95:71:9a:e4:1f:50:d0:d9:e7:03:4f:e0:a2:7b:55:
7b:83:e5:53:50:6f:8b:37:44:39:15:2c:b2:10:0e:5d:ee:c4:
d3:b7:1d:0d:1d:80:3d:2e:91:a8:1c:74:3a:4e:f3:e2:53:f4:
c6:e7:14:7c:82:dd:16:65:02:ed:cd:f5:04:60:c4:5b:71:c6:
00:6d:04:4a:6c:48:4d:4a:1a:88:29:ba:0e:8c:1f:db:c5:92:
08:ec:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:53 2025 by rpki-client