Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2e7fd385-e819-31ca-afc2-f2349353a7a9.roa
File: 2e7fd385-e819-31ca-afc2-f2349353a7a9.roa (raw, json)
Hash identifier: UkTzuMEVzqf+hCrrNp1iRtSn8U/ExuNkX3HzhKmrPAQ=
Subject key identifier: C6:B6:23:8C:5D:66:F0:3C:C2:06:C0:36:0C:10:C2:8F:A1:C6:25:B5
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848AAFB5E52B48C26E2433B2480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2e7fd385-e819-31ca-afc2-f2349353a7a9.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 202
IP address blocks: 204.104.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:5e:52:b4:8c:26:e2:43:3b:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=10a43017-c7e3-4ecd-9700-e3fbbe7b10f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:4e:bf:0b:b4:e4:c1:4f:48:50:51:ab:7b:
14:d7:2d:66:6e:30:9c:08:fe:26:ea:6e:23:b0:b8:
d3:a4:4e:b4:a3:f4:d1:27:18:28:b7:96:5f:84:d0:
ab:74:0f:a9:f9:2a:ef:e8:75:d4:bf:9a:bf:03:6c:
47:ba:eb:7e:95:e8:7c:36:ab:16:2c:eb:fb:f5:cf:
ec:6f:f9:79:cc:f3:35:c2:3b:8d:71:06:5e:a2:0d:
b4:8e:de:c1:21:14:e8:51:82:b2:65:63:ab:0f:00:
80:27:5a:61:b4:44:87:20:02:47:ef:48:fa:4f:a3:
74:d6:40:f8:6b:69:bb:4b:84:8e:67:cf:93:2d:3b:
b9:47:fd:00:34:ab:62:be:d8:90:b3:2e:8d:5b:1a:
9e:65:40:1a:f0:04:c6:b8:10:72:8e:ca:d4:f8:16:
bd:f2:c0:93:ea:2f:ac:51:82:83:d7:0b:3c:45:04:
ff:22:ee:59:c5:fd:72:ed:6f:3c:01:f2:c6:47:bb:
6c:5b:2b:db:92:67:6e:89:5b:7c:ac:45:d9:19:d0:
1d:07:ba:24:5d:5e:6f:ec:98:7c:92:af:b9:7a:fa:
5e:cf:5b:97:6e:e0:53:43:09:eb:14:6b:6c:f3:f5:
cf:7f:89:3a:41:0e:95:ea:39:8e:0a:ea:88:20:b1:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B6:23:8C:5D:66:F0:3C:C2:06:C0:36:0C:10:C2:8F:A1:C6:25:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2e7fd385-e819-31ca-afc2-f2349353a7a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
204.104.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:5c:79:93:1e:35:be:e8:e6:e6:bb:3d:b9:7b:4e:87:98:ad:
33:f0:2a:86:03:0e:7b:48:d0:53:52:ae:75:f7:19:a9:94:bc:
8d:29:ea:3f:00:d6:74:71:f6:55:16:7d:40:ff:4a:57:ad:42:
56:1a:c0:c6:6d:b9:2b:2d:b0:f4:b8:4d:66:07:f0:8f:2e:2e:
6a:ab:a0:8f:fe:50:30:e5:f6:e7:8c:e7:82:c4:3d:c1:95:ce:
2f:4a:4b:69:bb:98:f4:31:cc:79:9b:b2:29:7c:9a:26:89:42:
25:11:47:c9:00:c6:4d:b5:19:0d:6b:05:c6:22:26:8d:8e:c5:
64:dc:74:f4:95:3d:7f:95:ba:e8:4d:82:23:ba:5d:d4:15:70:
cd:c8:2c:b8:c1:7a:c0:14:91:23:24:5f:88:54:6d:0e:3e:83:
1f:74:d3:48:b8:c1:18:29:54:c7:37:8e:dc:f2:01:f4:8a:bb:
de:24:2c:2d:f3:63:60:99:c3:19:96:78:f1:df:33:31:17:86:
21:47:d3:da:d7:f1:83:af:36:0a:c8:e1:ce:3d:ca:9c:f7:65:
85:c9:f4:3c:d3:ea:33:92:cb:5e:b0:a3:c2:ea:09:78:2d:db:
91:33:f1:1e:ca:06:ed:72:6d:05:c0:ad:2e:87:57:08:64:5f:
02:c4:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:48:19 2025 by rpki-client