Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2be53382-ca4b-3667-866e-bf878dbd67fd.roa
File: 2be53382-ca4b-3667-866e-bf878dbd67fd.roa (raw, json)
Hash identifier: a/418DaDPoSvLQcEGXUQbJzknTMbScchgVariV4+EK4=
Subject key identifier: 18:65:0B:70:56:DD:D8:7E:21:3A:A7:8F:0D:8B:A6:C6:72:A3:19:E9
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848AAFB5A55E8A654E11D35B180
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2be53382-ca4b-3667-866e-bf878dbd67fd.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 203
IP address blocks: 192.85.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:5a:55:e8:a6:54:e1:1d:35:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=ec8e58b2-84b8-43a2-9589-62863ae254e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:23:de:d2:f7:99:b0:29:3c:d8:a3:82:3d:
67:13:cf:b4:63:ed:c7:6f:df:8a:da:f6:39:b6:e3:
2e:2d:1c:ea:69:68:c8:7a:9e:f8:c4:7f:bc:89:83:
16:a6:e8:37:06:2f:26:cb:0d:0d:17:25:0b:bd:6a:
b5:b2:4a:63:d5:67:d1:1e:4c:21:78:f4:a3:cc:ac:
c0:a4:87:39:82:67:4f:de:45:c8:89:7c:13:78:9e:
2c:19:28:92:17:2d:86:a3:f5:a7:44:eb:6d:b6:1b:
97:91:e3:10:62:a6:eb:8d:b8:ce:ff:8b:55:c6:27:
36:fa:fb:61:73:aa:1c:2a:e2:a7:8b:e4:f2:cd:b0:
3e:b9:ed:c1:96:0c:1d:6c:7b:49:42:ba:71:42:82:
69:48:e6:2c:07:7f:ed:6d:f9:d1:5d:b9:b6:71:da:
4f:0a:ac:dd:e9:99:12:c2:8a:c6:73:4a:c4:7f:d6:
67:28:c3:24:f6:42:2c:29:d4:ce:62:24:96:c7:2a:
fa:ff:93:d8:fa:68:42:09:d3:6f:3f:72:0d:4b:ab:
bf:78:ed:8c:c1:2d:04:0b:fe:34:4b:3b:b9:9d:06:
dc:d4:0b:aa:93:45:09:b8:92:8c:39:04:25:94:ff:
76:a4:19:47:49:47:e2:34:b8:1e:f2:9e:f3:8f:da:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:65:0B:70:56:DD:D8:7E:21:3A:A7:8F:0D:8B:A6:C6:72:A3:19:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2be53382-ca4b-3667-866e-bf878dbd67fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.85.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:67:a0:9e:20:7c:12:d7:34:c3:c7:dc:bb:ef:95:62:bb:72:
9b:02:95:4c:e9:04:31:07:0d:1a:cf:0d:a5:73:6c:9a:8c:3d:
de:35:47:7d:69:8a:4f:4a:11:b5:ff:87:24:76:4e:5a:11:9b:
5a:03:9a:c0:cd:17:b8:88:80:7f:21:0b:ae:b2:a9:d2:88:01:
14:7b:2b:cb:4d:17:31:d1:2d:e3:1b:df:90:4c:1c:d9:fa:47:
3b:f0:5e:df:50:fb:91:1a:b8:35:ac:f8:d4:d0:47:ce:e1:e8:
50:a1:b6:2c:d3:6d:99:73:e0:07:f3:a6:df:52:c4:27:43:bc:
3a:5e:ad:37:cd:f5:62:af:90:9b:a1:45:c3:73:a8:bb:d0:8e:
27:97:58:a9:d9:d4:71:ba:e1:ed:75:54:c1:4d:35:74:54:17:
6d:f6:07:25:0c:c0:02:f6:85:f3:9e:1b:13:dd:3b:43:37:8f:
12:bc:5d:60:24:b8:7d:4c:2f:67:89:cd:c4:e2:d5:95:98:9d:
bf:fd:bc:17:1e:69:6c:dd:f7:7e:5f:66:2f:ec:75:52:c5:05:
9c:ed:57:2d:63:06:45:bf:f2:e7:ce:3a:e1:3a:15:7c:d0:08:
31:13:64:d0:dc:a9:9f:65:ed:1f:71:fb:d3:a3:a8:ef:50:55:
57:83:fd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:22 2025 by rpki-client