Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa
File: 48529b48-e02e-3ba6-87a0-38a733adde1c.roa (raw, json)
Hash identifier: kujQ4bO6JViJNahr9phcITjJfs3jreD2oKCgC3UiKtM=
Subject key identifier: A3:04:C4:E3:3B:EB:8D:A1:5C:9C:C1:F3:73:52:3B:4A:28:7A:26:B0
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246CB396AC3D2898B3A40C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 203
IP address blocks: 168.87.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:cb:39:6a:c3:d2:89:8b:3a:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=1c8542b5-a6dd-4f6c-a16e-f83dc6686cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ea:15:4f:93:15:81:03:f5:7b:09:70:27:45:
bf:6f:29:0a:77:ae:79:96:95:ab:2b:7b:26:12:a4:
a6:29:0a:85:b3:36:c6:44:88:f1:7d:5e:8d:3d:b5:
3a:2e:53:13:55:ec:ea:5b:18:b8:12:b0:29:0b:48:
38:98:7a:d3:f4:06:4f:13:e3:12:1b:3f:74:6b:be:
53:e3:e4:80:b0:55:5f:1d:16:89:8c:20:e6:e9:e9:
bf:1f:cc:94:f7:cb:c2:12:7e:eb:73:3b:8f:f7:d7:
66:e8:2d:0b:c4:f6:af:c8:9f:b9:e8:82:d7:3b:df:
89:0b:68:b7:b8:44:2c:d0:71:b9:80:b6:3a:c8:3d:
d8:91:ba:e1:fd:86:ee:80:3c:a7:02:12:36:58:df:
fb:7e:54:a9:97:b7:91:28:cb:2c:2d:2d:ef:10:24:
37:de:dc:ec:a9:41:31:ae:6b:bc:ae:4c:5e:9a:8f:
0b:f2:46:46:2f:01:ac:c0:88:3d:59:6f:1f:1d:f3:
03:d1:45:f7:41:23:6b:8d:e4:9e:fe:c1:7d:25:0b:
21:24:07:cf:b5:6d:b6:8b:d3:dd:49:ba:90:5f:7d:
ab:bb:25:39:88:ff:82:e5:da:fa:f1:32:8e:da:aa:
e3:70:34:07:d1:25:97:25:dc:e2:57:ae:59:86:d3:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:C4:E3:3B:EB:8D:A1:5C:9C:C1:F3:73:52:3B:4A:28:7A:26:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:a9:03:5f:6a:7f:0a:5b:c4:69:84:01:64:49:a3:fc:7c:28:
e2:ea:e4:ce:42:7a:75:c6:4b:a9:3f:06:22:42:aa:f6:a5:9d:
c1:b4:0b:e7:95:ec:19:d5:9e:e6:52:66:0a:10:50:9a:0d:3b:
e2:7d:13:0a:b9:2a:f4:8d:f5:9a:7d:18:40:f9:0f:e6:9d:8b:
7e:c9:46:84:3c:3c:5f:b3:d0:39:b5:3d:34:45:95:9b:29:e2:
2c:54:55:d4:02:f6:77:00:a8:de:43:a3:77:85:bd:c5:cd:55:
ab:2d:b3:a1:7a:41:fc:9d:41:b0:50:d5:07:96:40:80:68:77:
23:89:26:f0:b8:f4:95:6b:ca:5a:48:11:b0:fd:b4:a2:05:87:
02:c4:6b:38:a9:8d:c1:93:ea:f0:89:a6:83:8c:5c:5e:33:e0:
a0:b6:46:0f:36:b8:48:c3:58:3a:3f:70:9e:f7:42:fd:c2:e9:
2f:98:79:bb:4c:ab:c2:92:0e:74:da:d8:55:c9:92:6a:0d:b3:
58:a2:d8:f7:13:bd:c7:ed:3e:91:f4:9e:34:b2:4b:54:ad:6c:
a4:90:0c:f3:77:c5:d8:71:9b:e9:f2:09:8a:f1:55:45:0d:41:
13:c6:7c:c0:3d:25:ef:dd:13:01:ac:51:6d:16:02:f2:7d:1f:
ad:28:f7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:01 2025 by rpki-client on console.sobornost.net