Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6139383a3a2f34382d3438203d3e20393435.roa
File: 323030313a3637633a6139383a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier: LsXuCrZ9pTr3LY3/VD5RZtmyghnTSFVD0TTlUseXvog=
Subject key identifier: A9:BB:03:FA:AA:0F:16:23:C3:61:79:49:1B:B8:FA:0C:02:DD:7B:FE
Certificate issuer: /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial: 661FBDA71C9F2D9AF11F0AAFCDE7A70EEFB125A6
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access: rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6139383a3a2f34382d3438203d3e20393435.roa
Signing time: Thu 20 Jun 2024 05:23:09 +0000
ROA not before: Thu 20 Jun 2024 05:18:09 +0000
ROA not after: Thu 19 Jun 2025 05:23:09 +0000
asID: 945
IP address blocks: 2001:67c:a98::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1f:bd:a7:1c:9f:2d:9a:f1:1f:0a:af:cd:e7:a7:0e:ef:b1:25:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Validity
Not Before: Jun 20 05:18:09 2024 GMT
Not After : Jun 19 05:23:09 2025 GMT
Subject: CN=A9BB03FAAA0F1623C36179491BB8FA0C02DD7BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:0b:e9:ed:78:f8:21:d8:88:3e:f1:92:0c:
44:b6:3f:ef:13:a3:18:eb:dc:32:96:2c:b5:ea:a4:
16:9e:1e:9b:5d:b7:be:d6:7b:ef:39:a4:af:31:8b:
cc:7c:a5:78:bc:0c:8f:30:ed:c3:74:3b:2d:ab:2b:
87:86:63:73:84:76:0d:24:14:87:95:f8:13:e0:1d:
4e:a7:bb:c2:f5:3a:57:36:c1:e9:64:aa:4e:e5:74:
99:49:80:e7:ea:86:db:3f:b0:0f:49:75:9b:64:a9:
27:79:47:4f:e3:44:40:70:c7:8c:01:27:2c:0c:be:
26:fe:f7:58:2a:67:e6:c9:63:a1:c5:3c:0d:c8:84:
fe:3c:c0:3f:74:07:f5:8b:e4:8f:0c:68:bd:ec:4c:
9a:dd:ff:35:a6:42:94:0e:e3:55:ff:df:19:33:ac:
cc:0d:30:99:e2:53:72:66:2f:61:9b:42:31:f9:6b:
5e:d1:3e:e1:db:99:45:8d:8d:2d:87:11:70:d8:9f:
bb:60:4b:d6:a0:11:5d:dd:ca:00:f7:b0:49:97:50:
63:49:0e:7a:7c:55:6d:f4:c8:43:2e:6b:17:c2:c4:
dd:b4:ac:33:82:6d:07:2a:34:db:d7:71:54:a7:0b:
bf:38:43:d0:c4:f4:91:79:1b:0d:4f:ef:b2:79:35:
07:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BB:03:FA:AA:0F:16:23:C3:61:79:49:1B:B8:FA:0C:02:DD:7B:FE
X509v3 Authority Key Identifier:
keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6139383a3a2f34382d3438203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a98::/48
Signature Algorithm: sha256WithRSAEncryption
5d:ca:c5:57:4d:7d:88:a5:20:27:55:21:3d:97:a6:c1:e8:53:
69:1a:ae:cb:0e:be:c8:4a:60:f9:90:f9:f7:52:76:4a:bf:8b:
ff:89:4c:78:dd:32:7c:18:ed:ba:89:47:c8:7e:6c:c4:2f:3b:
68:1b:2b:9e:76:07:cf:88:64:0b:f1:4d:b8:a9:9a:f0:f9:0c:
1f:bb:be:8d:75:19:40:42:77:c6:73:db:9d:7f:bb:34:72:aa:
50:1e:f7:1e:99:b7:e2:3e:9c:43:b8:1e:ce:54:45:ac:dc:27:
9b:68:83:18:d8:1e:5f:27:98:a9:d7:f0:41:89:03:4a:9b:35:
2f:82:d2:55:ea:30:1c:88:0f:5e:98:37:df:ff:63:d4:96:9d:
eb:23:72:07:cd:e2:f7:42:7f:66:74:9f:5e:81:58:85:cd:e5:
a3:76:0f:3f:c4:81:73:6a:73:a7:7a:f9:7a:c4:49:5d:c6:9d:
4d:df:70:a6:10:f8:c2:a0:66:41:1d:30:de:74:b9:34:b0:2f:
8a:17:c4:14:7a:10:37:23:dc:c0:a2:5f:b3:b4:3c:16:58:07:
0f:55:40:71:dc:52:55:3a:c2:72:81:f2:61:91:44:17:27:89:
d5:57:06:b7:cb:3e:fe:24:15:44:ec:6c:df:09:ff:84:0d:bd:
d0:30:20:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:36:19 2025 by rpki-client