Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa
File: 296978a2-0497-36c1-b3eb-fd6da0b5f567.roa (raw, json)
Hash identifier: loyCpDGGC/cX7vzhWhrU/TsoSTzMdY6aMAP1DEvpYYI=
Subject key identifier: 1D:93:52:C6:7C:B1:80:6E:2C:0D:99:C6:CD:62:F9:B3:B3:BA:35:E5
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848A9962B1CE66CDE50195662F8
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 203
IP address blocks: 168.87.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:2b:1c:e6:6c:de:50:19:56:62:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=845b248e-8a46-4494-a042-81f5ef045011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9d:4b:d4:12:92:5a:40:69:5b:4f:46:f7:2a:
d5:f3:3a:23:de:61:fe:a2:a6:23:0b:3a:f5:08:90:
da:5a:6c:cd:6d:94:8d:4d:8d:d7:0b:dd:3d:67:bf:
17:ed:1c:ff:00:c6:1f:84:dc:fa:55:18:4d:d0:46:
37:87:90:b9:26:40:ce:a7:62:4e:8d:c0:7e:8e:61:
4b:09:ec:db:bb:13:32:dc:3d:7d:ea:cc:e8:0b:2a:
2d:05:dd:0c:b5:82:5e:8e:3f:77:ca:c4:05:76:fc:
c8:50:51:8f:91:85:4e:ab:8d:87:a6:70:0e:ae:c4:
bc:51:c9:92:c3:0e:6a:d6:b6:93:1d:38:98:77:b9:
7d:e3:a7:77:51:1e:35:8b:33:81:17:32:cd:29:9b:
33:3d:9f:c9:67:28:8d:92:ea:e8:49:c3:2e:d1:a3:
6f:c9:d3:f9:83:dd:20:e6:57:91:3e:eb:ba:b9:fd:
0a:57:01:51:5b:d8:76:11:ef:4e:57:d0:87:c9:60:
b3:9b:7f:22:24:c2:f0:98:bb:fd:e6:75:db:86:33:
f4:3e:89:64:d2:c1:b8:3f:98:24:04:db:00:4e:f0:
cd:79:ef:3f:80:f9:c2:d4:12:6c:a0:6e:eb:ba:1a:
ce:ab:4e:13:4c:66:fd:cf:7d:83:a9:de:b6:07:1a:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:93:52:C6:7C:B1:80:6E:2C:0D:99:C6:CD:62:F9:B3:B3:BA:35:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/296978a2-0497-36c1-b3eb-fd6da0b5f567.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:a4:b3:67:43:a4:05:bc:6f:15:3c:0a:57:53:d0:c2:ce:e9:
9c:b2:3a:9f:b3:91:7d:08:d3:ed:c3:24:73:f9:6a:4d:6d:61:
b7:40:36:3a:24:86:05:35:8a:c5:9a:4c:b2:dc:b4:62:77:12:
65:f2:3f:ee:9c:64:0b:ca:21:5b:24:19:80:97:de:e7:fc:b7:
2b:0a:55:3e:a1:5f:9e:25:c4:75:d6:d1:43:77:90:2e:54:a1:
75:de:99:38:9e:12:cb:a4:97:26:75:cc:6f:b6:91:bf:9c:c3:
d8:18:82:e4:15:d9:9d:00:a3:f6:8d:ca:bc:9a:6b:3c:96:ca:
88:28:17:25:b4:e7:54:42:cc:73:ab:76:d0:0b:39:b2:76:69:
11:fd:dc:45:96:03:fe:b5:f4:13:49:dc:5a:a3:71:85:5c:bc:
e8:a9:2f:32:44:af:86:85:56:66:3d:64:57:53:f4:a7:40:2f:
f5:e1:89:ad:00:15:b1:e8:d6:b0:ff:4a:ec:52:2b:46:f9:55:
26:09:c7:2c:61:1e:fe:d4:09:c3:d5:58:74:79:45:3c:bb:a6:
9d:ab:2e:82:62:b3:c7:f5:bb:66:d1:7d:3c:3c:3f:51:d2:6f:
6f:37:1f:98:9d:c3:a5:83:61:27:11:a5:35:9d:e6:88:aa:8c:
4c:2f:ff:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:04 2025 by rpki-client