Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f608c3b2-d069-3afb-a351-01fd63c7841e.roa
File: f608c3b2-d069-3afb-a351-01fd63c7841e.roa (raw, json)
Hash identifier: 8o8JD6IU+oPAHrwqCbhSA0Ux2us190ZJHUH4+Skvq14=
Subject key identifier: 32:E7:95:5C:EC:22:34:75:07:C0:A8:1D:27:91:77:DC:2F:D3:7A:A0
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246CDC8434F2419D2964D40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f608c3b2-d069-3afb-a351-01fd63c7841e.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 203
IP address blocks: 206.164.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:cd:c8:43:4f:24:19:d2:96:4d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=7c8f2a7b-f7c7-41b9-9363-155e5d3efd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:64:f2:5a:a4:d2:93:4d:6a:1a:47:92:2e:
22:13:39:a8:6e:fe:2b:d2:a3:4c:3a:8a:65:e2:1c:
2b:95:40:4b:cf:4b:91:e4:3a:a4:8b:5e:b5:31:bd:
13:55:ea:81:72:be:e9:e9:0b:bd:82:91:93:89:f0:
68:25:41:07:e1:17:31:13:65:3d:19:56:4c:ca:44:
eb:31:d2:b6:3e:0f:5e:33:83:29:4a:a0:a5:4a:e7:
50:f3:44:47:71:46:26:cb:35:f9:b7:bd:37:27:44:
80:e7:e5:5a:94:22:ed:0e:6f:53:24:06:ff:86:95:
6d:bb:b4:70:5f:08:86:45:ec:6d:e1:57:56:35:6c:
b0:46:c1:5f:1a:bd:ab:a9:36:67:28:99:aa:80:0a:
13:81:29:82:14:3e:27:3b:ed:13:88:fc:ba:bc:aa:
28:5a:9b:fa:84:70:a6:28:f9:86:64:f1:11:22:56:
0b:3f:c6:a9:38:a9:f6:e4:dc:5f:b9:b1:c9:e0:b4:
99:ab:d8:5a:af:b0:f1:fd:a3:3f:13:26:80:4a:b8:
2b:7a:ad:a6:f8:c8:7c:c9:7d:7c:85:76:60:ae:91:
a9:9d:57:b7:7e:86:22:92:c3:b5:ca:ff:26:35:54:
0b:63:2c:82:90:1d:09:b2:bb:f1:c4:8c:44:74:ec:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E7:95:5C:EC:22:34:75:07:C0:A8:1D:27:91:77:DC:2F:D3:7A:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f608c3b2-d069-3afb-a351-01fd63c7841e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
206.164.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:5b:7a:81:34:f0:bb:4d:28:61:d2:37:02:06:7d:a5:1f:3e:
5d:b1:88:72:8d:45:94:3c:d0:2c:de:f3:2d:32:a2:a8:d2:5f:
2f:b0:83:e9:2d:9a:d7:d4:12:6f:c8:bd:11:6f:37:09:6e:87:
02:32:3d:42:13:ae:98:ae:c5:78:ec:c1:a4:65:1b:dd:74:cd:
1f:e2:0c:0f:1f:5a:cc:5a:1e:52:c8:4c:b3:5d:c3:de:e4:31:
50:55:44:d3:03:88:18:95:0c:07:24:ad:4d:36:b9:eb:f4:14:
18:e0:a0:10:8b:b5:83:1c:7c:8c:c1:97:1e:62:ce:8e:3d:15:
ba:27:f4:f1:29:39:1b:9f:97:c5:a7:04:af:67:f0:c8:7b:cc:
81:0a:94:40:b9:40:b6:e9:6b:dc:b3:16:2d:46:f2:19:97:bd:
fc:4b:55:3d:d7:f9:b0:80:fc:70:cb:82:bd:db:86:04:64:78:
1d:53:6d:1a:87:78:30:57:8f:32:b4:ac:da:d4:ce:94:ca:1a:
29:3d:37:57:9c:d8:62:38:cc:1e:21:45:fe:16:4c:d1:b6:7e:
3e:f3:a1:05:58:2b:27:8b:45:3d:b8:98:0b:20:6e:98:45:c7:
01:81:5e:d3:40:24:a5:48:b0:bc:46:ea:89:46:f2:1d:09:43:
f5:c0:03:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:09 2025 by rpki-client