Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/947a7c18-a1a0-44de-a836-f41f6767cd5a/d88babea-b005-3fb8-86d2-fefa45e948ec.roa
File: d88babea-b005-3fb8-86d2-fefa45e948ec.roa (raw, json)
Hash identifier: djeKqfp+Vvdk07hxWl+oiIskP9t7+sxKLrrqR3fzXf4=
Subject key identifier: 7B:B4:01:DD:58:E3:44:C3:38:04:88:5B:77:8D:CB:24:41:47:7F:AB
Certificate issuer: /CN=947a7c18-a1a0-44de-a836-f41f6767cd5a
Certificate serial: 010D0C9F43285845EF893F71231A46BACDD44800
Authority key identifier: 8F:90:CC:7C:F6:53:23:F7:12:E7:1F:02:39:5F:6A:5E:34:28:5E:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/947a7c18-a1a0-44de-a836-f41f6767cd5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/947a7c18-a1a0-44de-a836-f41f6767cd5a/d88babea-b005-3fb8-86d2-fefa45e948ec.roa
Signing time: Mon 20 May 2024 13:00:35 +0000
ROA not before: Mon 20 May 2024 13:00:35 +0000
ROA not after: Sun 18 Aug 2024 13:00:35 +0000
asID: 18994
IP address blocks: 208.66.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:ef:89:3f:71:23:1a:46:ba:cd:d4:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947a7c18-a1a0-44de-a836-f41f6767cd5a
Validity
Not Before: May 20 13:00:35 2024 GMT
Not After : Aug 18 13:00:35 2024 GMT
Subject: CN=5a061fca-e553-4561-a106-fca43b5ae2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7c:fa:a9:6a:f2:f5:a5:32:74:6c:6a:6d:45:
23:81:98:f5:51:6b:3c:21:f7:ca:d2:b3:1e:1f:a6:
c8:8c:c0:7d:fd:51:16:43:cb:15:33:ca:25:19:2b:
f2:2d:7c:b1:02:66:28:a8:08:ec:6b:95:c1:08:38:
f6:e8:00:bb:20:fa:09:9e:f3:56:93:3f:3e:f3:b8:
68:f7:ae:85:a4:da:3c:4c:a7:2a:57:c3:13:47:d9:
a5:c5:e1:7e:68:44:af:8c:62:c4:40:28:b1:5f:9e:
91:eb:e3:a4:9d:39:a1:bc:68:71:56:f6:33:25:bf:
46:dd:14:d4:5c:d7:2a:5a:57:2b:c4:da:c3:8a:a6:
7b:7b:52:19:ef:be:61:5c:65:75:1d:b3:97:7f:15:
9d:fc:e9:2a:bf:f3:52:50:d0:21:78:19:79:18:b1:
9b:cd:f5:ba:9b:87:00:9f:52:ab:d5:91:6e:3a:90:
85:d8:e4:b7:37:f4:03:94:57:17:41:29:74:fe:73:
ff:83:b5:9e:48:24:a8:85:be:3d:18:55:6f:35:f8:
18:ea:3f:30:c0:7d:49:20:d4:5c:52:73:cc:93:2f:
b1:48:5b:07:7e:ba:f3:04:8c:7f:3c:bc:52:c8:e1:
c1:03:43:49:a9:23:26:57:7b:66:59:b3:cb:a0:74:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B4:01:DD:58:E3:44:C3:38:04:88:5B:77:8D:CB:24:41:47:7F:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/947a7c18-a1a0-44de-a836-f41f6767cd5a/d88babea-b005-3fb8-86d2-fefa45e948ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/947a7c18-a1a0-44de-a836-f41f6767cd5a/947a7c18-a1a0-44de-a836-f41f6767cd5a.crl
X509v3 Authority Key Identifier:
keyid:8F:90:CC:7C:F6:53:23:F7:12:E7:1F:02:39:5F:6A:5E:34:28:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/947a7c18-a1a0-44de-a836-f41f6767cd5a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.66.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:f3:e0:75:27:14:71:0e:cd:2c:83:cc:a4:d1:48:50:ba:6b:
16:55:f9:fd:9d:e0:b3:a0:e1:1e:a5:b2:91:e9:d7:8d:8c:82:
1a:b0:60:90:75:74:5f:38:18:63:c7:19:5c:b2:33:f3:bb:51:
a6:64:02:1e:71:5a:33:d8:1e:8d:aa:66:5b:8f:ec:23:25:e0:
ca:0c:2b:f7:1a:7b:08:81:85:27:dd:0f:b7:c9:1a:d2:76:bc:
10:8c:bd:05:51:95:f6:3f:58:d7:a0:a8:93:3e:6c:3c:40:8a:
0e:98:d9:96:32:39:8e:ee:f3:33:35:f5:61:9a:5f:99:7d:50:
73:7c:9d:e1:5d:7f:e8:46:ae:00:1f:af:7c:17:cf:35:d5:66:
d3:23:c2:cf:96:2d:25:e9:bc:d3:a5:1c:ca:59:01:43:43:5d:
7e:64:29:d2:e0:76:7a:86:22:3f:a6:b5:c6:e9:d6:9c:ac:2a:
cc:1a:23:3b:ed:b4:9f:4e:d2:3d:f1:0d:be:a2:34:bb:18:8f:
78:76:8f:69:25:b1:57:c0:e1:70:d0:41:9a:28:3d:6a:9a:9a:
f5:95:d6:e1:e7:10:e3:1c:df:6f:bb:71:6b:67:0e:02:68:ee:
67:ab:63:a1:eb:b2:2e:48:bc:c0:b9:15:73:e7:b9:7f:b4:18:
f0:1a:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 18:30:26 2024 by rpki-client on console-fra.rpki-client.org