Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa
File: c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa (raw, json)
Hash identifier: xKrjUIkfc58dsbboQptwxqjDMJqalKtXSiTYgxpuClY=
Subject key identifier: 20:3A:9C:21:10:82:B0:E1:AD:89:96:94:6E:F1:60:42:6B:E2:A0:2D
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285849403941B0B8FEA3F7E61F3100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 16509
IP address blocks: 168.87.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:41:b0:b8:fe:a3:f7:e6:1f:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=635934cc-9a82-4d08-bd31-937ac85890f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:86:b9:d1:80:05:34:82:3e:ff:e3:df:01:
20:b3:ec:03:13:b0:42:ba:2d:eb:72:bd:83:f2:1d:
93:2d:bb:ef:11:16:12:d7:7c:1f:aa:a5:d2:c6:6a:
b7:3f:a2:43:29:47:d2:48:05:9e:50:0c:15:e8:48:
30:61:69:f8:0a:1a:4d:14:52:fd:fc:eb:dd:4c:26:
24:ef:18:87:65:69:57:a6:3e:ee:16:84:21:ed:c5:
ad:3d:04:2c:f9:77:b7:97:9a:f4:55:b9:c4:ae:e2:
42:f8:8b:c0:ab:fb:54:47:e0:bf:53:6e:6a:8a:4e:
fe:c0:e4:34:cd:01:eb:c5:06:a0:a1:f5:ae:d4:aa:
81:48:a9:2a:94:04:fd:fc:82:0b:2f:1d:c8:a3:ad:
2c:6c:52:c6:50:8b:88:89:0a:21:ec:cc:35:82:e1:
6a:94:b4:9a:d8:86:92:49:5f:89:8d:5f:8d:ac:a0:
94:e0:5a:9e:1e:c6:2d:7f:8e:70:d5:da:b6:1d:60:
8e:52:b6:73:fa:33:ca:16:fa:b2:37:dc:2e:22:ab:
45:9a:82:14:7e:84:5f:2e:db:e7:cd:64:fc:7a:f2:
25:ba:6f:6e:ab:29:8c:73:8f:3c:57:bb:8a:9b:dc:
e2:c8:47:66:6d:fb:a6:52:0e:ec:1d:ba:01:35:5e:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3A:9C:21:10:82:B0:E1:AD:89:96:94:6E:F1:60:42:6B:E2:A0:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:02:6d:a5:e3:04:1a:e4:c9:7b:83:52:a4:d7:7d:24:43:cb:
d1:50:2d:9e:39:f9:e7:83:3c:94:e1:f8:88:b1:2b:ed:b9:2e:
d2:af:10:23:33:97:31:2e:7a:5c:e3:a4:6f:83:4d:23:28:1b:
9a:13:55:84:c1:52:f7:fb:ab:39:5a:9d:0a:71:20:7d:d4:3a:
b1:fb:a3:56:ea:73:b5:ba:bd:ba:76:4a:e3:a1:77:1d:d6:84:
76:c2:14:65:67:a8:4b:81:68:33:ca:12:b9:c0:dc:65:73:ff:
71:5d:e3:10:78:54:d0:a4:1b:be:4d:82:4c:56:ec:b7:6f:1f:
c4:b5:c8:66:b6:95:f0:73:42:1a:ab:31:86:45:a3:e7:98:5f:
e5:42:fd:fe:0b:e1:48:5c:df:0e:fa:a1:b2:e3:25:8c:cd:2f:
79:f2:4f:0e:8b:df:8d:03:94:d7:3f:fd:37:83:7e:8b:e9:d5:
38:65:50:05:e3:e7:a0:44:d8:10:74:ca:31:a0:1a:57:fc:64:
31:0f:68:38:5a:e5:64:8b:fb:13:9a:7c:ed:e8:5e:3f:1b:19:
f8:81:b6:06:fa:72:dc:9b:be:3e:46:08:fc:ae:57:78:f9:fa:
52:2d:a4:a5:4c:80:60:98:5b:e8:65:58:23:c4:26:ab:b4:03:
1c:56:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:01 2025 by rpki-client