Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8f0e064-c046-3177-84e5-e5cac5777f75.roa
File: d8f0e064-c046-3177-84e5-e5cac5777f75.roa (raw, json)
Hash identifier: IAtlDXHs8+5D31GA0CEdNxYKqN+MR9O7n7c75ywbRDk=
Subject key identifier: 59:7F:C3:4C:D4:DB:DB:21:21:2A:FD:58:C1:9C:5D:47:39:D5:E0:C7
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848BE861F60FCA67299AAC79980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8f0e064-c046-3177-84e5-e5cac5777f75.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 3356
IP address blocks: 168.87.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:1f:60:fc:a6:72:99:aa:c7:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=7d3bb943-beeb-4eff-b04a-bee2c36383cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:06:7e:70:ea:68:14:ce:6e:42:89:a4:a5:
a0:16:0c:eb:d0:ec:47:ed:66:2d:21:ca:32:99:96:
b7:75:4d:53:e6:46:f7:bc:86:11:1e:2d:b5:c7:24:
ba:07:c4:c1:57:9a:b5:ff:c4:92:9a:d9:8b:04:3d:
d8:86:d9:2a:bf:0c:77:01:51:e8:7b:93:8d:31:ea:
be:72:9b:c6:bb:6b:1a:e3:0d:46:70:08:5e:6a:e7:
72:ac:1d:62:c3:24:66:ee:8f:0f:88:61:8a:a1:81:
df:92:03:c7:d4:35:e7:a4:b4:f6:83:82:2e:9b:00:
ed:95:3c:7e:b2:9e:9e:74:ad:5f:96:8e:15:99:5d:
1a:5c:1c:23:d7:c3:a0:c8:9a:7d:3f:2f:af:d6:5f:
06:ee:76:21:77:aa:06:f8:78:08:ea:ad:67:18:98:
1e:d8:d8:2c:3c:46:7c:4a:ed:eb:4b:ba:31:ea:fb:
a0:d8:01:77:c8:5c:39:4d:24:cb:21:dd:9d:f1:c6:
78:18:ee:e3:bf:b6:d4:06:18:95:cb:4c:05:40:ad:
71:a5:6c:8b:55:53:c8:73:3a:f4:7a:74:c1:40:65:
fe:db:d2:38:ac:59:25:bb:7d:93:9e:85:b9:1b:c4:
7f:d8:3c:45:a1:cb:d7:cb:f3:46:aa:83:bb:5a:be:
0f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:C3:4C:D4:DB:DB:21:21:2A:FD:58:C1:9C:5D:47:39:D5:E0:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8f0e064-c046-3177-84e5-e5cac5777f75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:29:07:e8:d4:c6:e8:8d:88:86:16:94:c5:ca:5b:a5:5a:14:
48:5a:ef:fe:66:01:a0:2c:22:34:c7:d7:ba:3d:d9:f2:86:4e:
85:33:1d:91:4c:4a:2d:d0:48:e1:f6:1a:ac:36:aa:cf:62:47:
41:9a:3f:03:24:ac:e2:17:72:a0:36:24:a3:33:4e:c2:be:a4:
00:87:d2:90:62:4c:79:cf:40:30:ed:78:bd:fc:d8:da:11:8b:
eb:a1:c2:4f:2d:ce:31:54:44:74:4a:c5:7d:bf:13:84:ba:62:
1a:77:ba:6b:9c:22:12:24:e3:3f:87:38:5b:84:d6:0a:70:07:
47:be:34:45:13:3b:a5:1c:66:32:fd:f9:ee:ce:c2:5c:ee:89:
32:27:bb:c9:08:e7:9a:6e:07:64:f6:da:36:7d:3e:a2:b6:e1:
d9:80:3c:b1:44:d3:2e:c8:81:01:88:af:74:fe:b4:74:08:9e:
5e:a1:b3:62:47:5d:59:59:68:9b:1b:dc:f5:80:1c:94:ff:e9:
81:6c:89:6e:6c:50:cc:2d:f8:c5:6f:41:28:28:2b:b9:78:74:
da:0c:ee:e9:d5:3c:15:b2:dc:47:75:9f:8e:8c:e8:a6:a7:59:
9c:d8:41:dd:76:80:e0:0a:4c:15:90:25:00:40:eb:9d:66:8f:
c1:af:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:24 2025 by rpki-client