Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27eb0503-6eaa-3368-b5f0-0be07f036072.roa
File: 27eb0503-6eaa-3368-b5f0-0be07f036072.roa (raw, json)
Hash identifier: Vf4IaaAUU8BTIiMSs/WAyKkcwxG5j0kIakWhRxlvBDM=
Subject key identifier: EC:E1:8E:E7:C8:B4:24:F0:33:6E:24:DD:EF:8F:54:BA:42:28:49:6F
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848BE8621DC4E43B02D643B6A00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27eb0503-6eaa-3368-b5f0-0be07f036072.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 203
IP address blocks: 204.230.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:21:dc:4e:43:b0:2d:64:3b:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=cfd7e4ac-f7ee-453f-8781-9a5db03994e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:7e:34:65:3a:d8:80:32:3c:34:d2:aa:36:
19:ca:c4:fe:af:09:03:ba:7f:c3:de:25:33:21:1e:
a2:09:37:28:9f:73:ff:24:4c:1f:1d:68:db:9f:36:
47:da:ee:ba:c4:a2:ec:f8:98:77:5f:94:1f:b6:ee:
d2:60:20:db:3b:02:e3:55:62:26:57:b9:d2:ba:7c:
ec:e0:33:38:3f:3e:09:c2:80:6c:95:9b:24:06:d2:
f8:e1:ee:8b:bf:75:9c:9c:aa:91:c6:41:82:2a:fe:
f0:86:40:08:0e:df:21:f9:a3:f4:c6:f2:f0:eb:e7:
9d:fd:d5:94:18:02:67:a8:6d:4c:f8:35:7c:a1:71:
21:c2:7d:1d:ce:5f:79:a7:52:1d:c3:f2:71:c1:da:
70:19:9b:0f:90:51:d1:69:98:3e:07:46:8a:b3:a1:
22:4a:98:54:25:e3:c8:2d:73:ca:f4:65:65:fb:82:
10:20:0b:e5:14:10:ad:17:69:cf:67:56:5f:0d:d5:
6c:b9:a7:c2:92:d9:bd:d8:75:79:2b:8e:d3:58:bb:
52:5c:3c:7b:73:ff:b0:53:fe:ff:50:09:3d:8b:a3:
88:aa:e3:25:c0:27:ae:32:41:b5:e9:06:53:fc:60:
ce:60:d3:5e:b0:93:f7:14:e5:cd:73:43:13:5f:96:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E1:8E:E7:C8:B4:24:F0:33:6E:24:DD:EF:8F:54:BA:42:28:49:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27eb0503-6eaa-3368-b5f0-0be07f036072.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
204.230.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:c1:ca:1c:22:bc:c4:7c:60:95:b3:54:36:bf:55:17:fa:61:
fa:b2:68:ec:1d:56:63:3a:a6:6d:45:f5:94:56:24:6d:63:43:
30:34:81:8a:ab:ed:ce:92:97:1f:e5:5c:89:f1:4e:4e:d6:1a:
8c:7e:dc:bc:30:71:48:ee:dc:23:e2:35:35:c2:f4:45:7f:1c:
d1:98:43:b6:0f:ba:e7:25:cc:ad:a1:38:8d:52:d0:b7:a5:65:
d2:22:96:cb:dc:90:18:11:a1:09:f4:6b:97:d8:1a:69:19:a6:
a4:9e:bb:1b:3c:05:e7:b0:be:63:16:2e:d1:20:e3:a1:a9:c4:
73:ae:0a:57:8e:c1:9c:b7:22:f6:0e:e8:72:40:1a:ad:79:7f:
b5:bd:77:e9:4b:82:d4:82:cb:06:32:0b:dd:30:99:a8:14:72:
53:64:01:cb:1a:15:59:64:d1:65:04:2e:11:62:e4:00:f9:b5:
93:c6:2e:4a:3d:84:8d:9b:e3:c9:72:95:7d:b9:c6:54:24:ed:
b9:a2:9e:bc:e9:5d:4f:92:97:16:28:57:d0:c4:e7:79:a5:73:
0c:df:7b:e9:54:82:67:15:df:cb:68:d0:fc:55:fc:06:e9:d5:
6b:84:ef:5a:77:0c:47:2e:9a:95:6f:b9:e0:fd:1a:01:e3:d8:
7d:38:b9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:43 2025 by rpki-client