Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa
File: e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa (raw, json)
Hash identifier: CO1nFepTpSsojE4vLkcy4QMboiLkSu+oL/eYM2RvD+k=
Subject key identifier: 15:E9:50:4D:98:87:73:7D:E8:B1:14:18:E4:4A:EF:01:A3:89:58:9B
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246BA36333D9DDAF66E9B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 203
IP address blocks: 168.87.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ba:36:33:3d:9d:da:f6:6e:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=e3a4f9e0-6904-4e33-8b22-fe63f13a6119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:6c:5e:c9:f6:60:f7:6b:56:7b:fe:71:cd:
4b:dc:b7:85:2a:be:a4:d8:1f:6b:c0:92:1b:f2:13:
67:cc:ae:b1:65:51:ce:81:33:99:b4:6c:e4:e9:06:
58:80:72:b4:98:69:7a:ea:69:d8:d8:05:b4:1c:1d:
28:b7:25:06:c3:94:de:db:ce:d7:94:89:3d:9e:4b:
40:b9:49:77:50:19:da:78:5c:3b:c3:58:fe:f6:0b:
d3:7e:81:68:51:9d:b5:bc:33:4f:ba:ac:7a:32:d1:
81:28:b2:3c:ca:6e:78:02:c9:8c:9a:49:6d:ec:5f:
18:b1:b3:5a:28:a6:91:8f:e1:45:33:6c:8c:2a:96:
27:15:6b:de:25:47:f2:75:4d:17:ae:ec:ac:48:b7:
40:86:f1:1d:13:6b:9f:f3:37:bf:e3:c9:61:22:d8:
51:fa:ea:fa:02:09:da:a4:13:8e:94:1f:88:3e:7d:
9b:e4:60:e6:a2:a4:75:56:40:05:bc:db:c7:ec:91:
fe:85:f8:82:2c:c8:2c:28:fd:b4:78:a0:87:4c:6a:
ea:0a:d9:77:e5:97:9f:cf:33:b0:53:03:f5:c3:b6:
31:0a:00:cb:ec:62:1d:97:fb:85:99:5b:1d:cf:5e:
a7:6f:96:c3:61:ec:43:7d:d1:1f:f2:56:27:00:c4:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E9:50:4D:98:87:73:7D:E8:B1:14:18:E4:4A:EF:01:A3:89:58:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:7a:52:70:9c:1e:3c:3d:b4:d0:01:63:c0:15:c6:53:4d:3a:
c1:95:cd:f9:c4:36:f9:e9:58:90:e6:69:fc:94:18:71:71:cf:
54:91:52:f2:7a:dc:70:0b:90:69:af:e8:ea:8a:27:45:be:23:
01:b2:6f:46:13:6e:06:4c:1d:c0:eb:97:4d:4e:ef:5e:5e:4d:
d7:5e:8c:2c:d2:f7:36:2c:cb:74:8f:e1:f6:d6:52:5b:85:e2:
d7:c6:97:1a:b3:82:a1:9b:19:71:96:92:d8:47:97:9e:7f:58:
c2:70:de:d3:ca:79:cb:36:37:ca:ae:d8:21:54:47:4e:da:fe:
4d:cf:d7:5a:a7:e6:cd:bb:a7:f1:9e:20:12:d8:c5:c8:b7:cb:
28:bb:14:88:4f:a1:e1:31:55:61:6d:ea:5b:f0:19:0f:13:5e:
f8:63:1d:e8:c1:9b:61:4c:c6:ea:43:64:a3:7b:96:95:a2:1d:
d9:40:c0:f5:22:68:51:ad:f8:7b:3a:a6:e5:a9:f2:bb:e2:02:
de:4e:82:27:d2:f8:90:6f:27:3d:7a:7a:7c:ae:d0:28:cc:e2:
a7:da:23:cb:66:93:16:9c:a9:db:8e:08:d1:35:0b:ed:31:58:
3a:c6:d9:10:90:0f:27:52:c1:ef:92:c7:64:36:6d:17:49:1a:
8f:e7:12:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:04 2025 by rpki-client on console.sobornost.net