Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de308c09-33a0-3977-8524-c4c7b3a7d053.roa
File: de308c09-33a0-3977-8524-c4c7b3a7d053.roa (raw, json)
Hash identifier: JPwS3QQo607Wzr/o6xIA0Repx1B0lkfsoWKhWAy5QQw=
Subject key identifier: EF:8F:E4:0A:7E:76:8B:4A:D7:21:3C:98:CC:6F:B0:D3:3B:EF:F9:06
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848AAFB52A588FD294E78866FC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de308c09-33a0-3977-8524-c4c7b3a7d053.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 3360
IP address blocks: 66.54.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:52:a5:88:fd:29:4e:78:86:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=21eb8e11-8819-44a1-bc5a-8114eb307dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:1d:59:67:a9:11:d1:5a:e2:fa:b3:16:ea:
87:29:f1:b2:5c:35:b7:62:48:8d:38:0c:43:71:3d:
a3:d0:dd:3a:c4:13:5b:4f:5f:0f:96:48:3c:3b:1c:
b7:a1:6d:56:48:3a:9b:00:4c:96:04:03:20:89:e3:
bb:b5:ee:21:e7:46:1f:b3:79:f4:fc:22:99:ea:fb:
09:4e:4f:e4:b9:90:85:98:1d:28:77:67:30:a2:cd:
62:5b:ed:f2:e0:66:5d:2b:01:8a:eb:aa:7f:34:a1:
9f:1f:dd:0e:af:b8:9d:b6:f6:69:4a:71:11:15:01:
a6:32:be:36:a2:34:90:c4:45:59:ab:dc:14:8f:70:
52:5c:a6:a9:ee:94:ee:45:ca:4a:30:6d:68:7a:c7:
c3:83:71:bc:10:a5:2f:73:a4:d5:4c:4a:af:a4:91:
37:7b:2f:d6:8c:ca:eb:c7:c8:27:39:87:7d:8c:02:
44:55:d1:eb:6a:e2:ba:ab:5b:dd:c3:6f:5a:5f:ab:
90:e8:57:ef:9f:f3:4a:18:34:16:05:53:c4:75:64:
82:a8:2d:57:85:9c:17:33:74:85:05:77:a9:9f:51:
75:26:6f:7a:b8:f8:fb:c4:04:95:72:5d:0a:ee:34:
b6:e0:52:dc:61:21:ba:e1:2a:c4:00:11:84:c0:40:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8F:E4:0A:7E:76:8B:4A:D7:21:3C:98:CC:6F:B0:D3:3B:EF:F9:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de308c09-33a0-3977-8524-c4c7b3a7d053.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
66.54.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:f8:58:51:c5:6d:3a:6b:bc:27:df:85:db:d4:f9:49:98:28:
e2:d3:8d:2b:de:26:1f:c7:cf:72:34:3d:69:86:32:fa:45:dd:
51:57:03:9b:56:ee:c1:84:38:74:ac:24:ac:5a:e6:cc:a5:f4:
3d:36:74:b5:70:3a:b2:99:f3:87:95:9a:37:55:43:ca:79:be:
85:80:c4:26:2e:2a:68:a7:f1:32:ab:03:15:47:6d:75:61:34:
ea:b3:44:01:0e:ad:50:e3:30:2d:6b:67:3b:ae:35:fa:88:27:
0d:cd:01:45:d6:12:9e:15:d3:0f:36:63:16:50:90:c2:f9:c1:
fb:80:01:e3:d9:a8:43:59:58:94:3e:c8:3e:4c:54:e5:c9:b5:
1b:93:c3:f9:4b:07:5e:18:08:c2:d5:47:eb:20:c8:ab:6e:ad:
42:44:19:fe:66:32:1e:f2:b2:93:86:7b:c5:8f:21:3f:c3:79:
fe:04:9f:7b:87:4c:63:fc:a3:b6:4e:d9:3b:3c:eb:f1:5a:53:
4f:18:ec:f0:99:96:41:d5:02:7d:b6:7d:02:8d:04:01:27:f1:
6a:8e:33:82:c9:92:d1:b4:7d:7d:a4:34:16:fa:71:17:d4:3b:
7f:f3:a4:da:31:ac:1c:8a:b4:e4:2a:a3:ed:d8:57:35:bb:7b:
4d:5a:71:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:14 2025 by rpki-client