Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d98b707-54a3-3458-9613-51d5569ba775.roa
File: 1d98b707-54a3-3458-9613-51d5569ba775.roa (raw, json)
Hash identifier: 87xKPMALMp7q4demJ+sxSznvY5ymkArOvUezaJRfwRI=
Subject key identifier: FB:3A:BE:01:3E:7C:DA:96:7D:27:63:87:F1:51:56:04:02:9A:21:0D
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246C91AC9030D25C6163B80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d98b707-54a3-3458-9613-51d5569ba775.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3360
IP address blocks: 192.85.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c9:1a:c9:03:0d:25:c6:16:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a95cf1f9-f301-44a5-b621-64cd5d2620a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:66:e6:b2:86:5a:ec:d1:78:fe:c8:8e:96:
9c:7a:48:5d:31:bc:38:3c:7f:2f:98:02:5a:bd:49:
76:2a:70:a9:5f:0f:4e:46:e9:3e:e6:0d:63:13:69:
4d:69:94:ae:bc:12:08:93:ed:24:3f:8a:d3:e7:ef:
11:60:2e:a4:e5:b6:a9:e5:55:9d:e7:e6:b6:79:90:
3f:ac:36:78:ac:c2:85:d0:23:e8:1f:18:95:97:55:
9e:cc:47:2f:5f:c2:d6:f5:55:4c:5a:e0:79:7e:fb:
8f:c2:10:9a:2c:39:d9:a4:96:1f:ac:9e:75:db:dc:
3c:7b:4d:f0:16:3d:f3:6c:38:4a:d9:e2:7c:67:92:
82:94:10:42:d3:64:a2:8c:5f:28:1f:95:2f:22:bc:
16:c1:c6:cb:a8:17:03:56:54:6f:1e:4b:55:50:07:
eb:54:a9:69:c4:1c:8e:3f:fd:13:7c:78:c0:11:d2:
f7:c1:b4:cd:db:2a:65:e3:80:f3:cd:96:ae:5d:47:
02:0f:99:c0:b7:f7:6f:c6:24:48:c8:2d:40:52:06:
76:a0:94:ac:7a:47:a9:fd:97:7f:db:41:a2:96:55:
f0:3b:b2:ba:dd:11:13:49:30:d7:6c:f8:5e:f3:6b:
c7:c6:59:1d:8c:f6:f9:ae:66:1c:c1:2a:4f:11:b7:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:BE:01:3E:7C:DA:96:7D:27:63:87:F1:51:56:04:02:9A:21:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d98b707-54a3-3458-9613-51d5569ba775.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.85.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:5b:f4:0d:64:ae:3e:83:2d:1a:07:cd:78:f9:4f:d0:6c:80:
55:df:ed:54:ed:8a:9b:bb:19:ca:8f:5d:4d:6b:7f:70:a4:5d:
0a:b0:73:e7:40:af:04:9f:1b:5a:bf:88:a4:b8:10:e5:9a:7c:
a8:b7:85:38:1c:4a:fa:ba:ae:16:dd:9a:b2:72:a7:eb:03:1c:
40:ec:b5:f1:bf:17:a9:f6:f2:b7:96:f1:8d:cc:56:78:fc:de:
64:a9:ed:e3:29:7a:8a:77:c3:95:aa:3d:11:72:33:bd:0f:19:
b3:a5:4a:c9:47:83:f7:03:b9:8d:d4:bb:8d:06:f2:39:1e:f4:
20:cc:e2:7a:f2:ca:1a:60:db:ea:8a:33:c8:4b:b2:3b:0c:1d:
29:05:41:ae:c5:d7:15:b4:40:93:d8:f7:7c:a0:31:b3:18:be:
54:f5:78:0b:8a:df:b8:fe:b9:25:1e:66:e6:7a:24:dc:7f:db:
8f:7f:d5:0f:d2:82:ba:28:3f:5e:fe:4e:ad:1c:ee:c6:81:bc:
5e:1e:91:35:9b:5a:ab:e3:28:5b:83:bf:13:4b:18:82:61:29:
8e:04:7d:4b:c0:c8:7f:df:a4:32:e8:9d:a0:49:87:16:af:3d:
6d:7b:5b:bd:33:43:ab:77:70:1f:86:8e:1e:89:a1:4e:3a:cc:
5f:09:a6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:53 2025 by rpki-client