Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa
File: 34510429-d958-3a78-990a-f80264d9221e.roa (raw, json)
Hash identifier: qasNLGmy8H9xavioa+UrdjmNBApMtha6n/mm5pYIOdA=
Subject key identifier: 7A:B5:15:A2:CF:9F:EB:7A:3F:98:8A:2F:71:12:20:7C:52:5A:E5:34
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848A9962AED34047E284679C180
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 3360
IP address blocks: 168.87.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:2a:ed:34:04:7e:28:46:79:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=57b4ba50-3578-4ff5-9583-81115b09d8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:ed:81:e0:90:8f:7e:b4:f4:c3:12:75:51:
32:a6:0d:3c:20:39:ba:f5:3a:c9:9b:ad:94:2d:63:
4e:1d:7c:14:89:4d:80:99:6c:0d:a0:f1:af:99:27:
8c:1d:7b:83:4f:58:ee:7b:54:10:3f:c9:5b:db:1c:
61:c3:2b:53:56:c6:94:79:64:ff:3b:5c:04:49:fb:
8e:93:77:e0:19:e8:a6:df:d4:57:f1:a9:3f:aa:60:
ae:5e:e0:56:43:01:37:3a:0d:2e:ff:52:fe:1c:aa:
31:04:2d:c6:c2:04:d1:30:61:b2:a7:73:31:cf:51:
8a:2b:de:4e:3d:bd:b7:9c:d5:c2:2d:23:2f:56:d9:
d5:4a:e4:19:1f:8b:02:52:69:ce:61:5a:dd:77:0a:
5c:da:1d:23:31:f9:4d:e0:04:7b:cc:e1:a3:f3:7c:
2a:7b:53:2b:66:c9:9a:2a:5d:b5:a6:b1:6c:ea:35:
43:36:ea:ab:3c:54:1c:74:06:54:f4:b3:f5:97:5a:
d6:c4:e3:74:87:f9:04:8e:51:56:66:4e:fa:0a:5b:
de:12:06:c8:97:8e:f9:c0:e1:04:f9:b4:00:55:7c:
ad:9a:3f:39:ac:ff:bd:c0:92:32:9c:17:d0:4c:11:
43:5d:18:58:f6:77:18:af:18:ec:31:53:df:49:14:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:15:A2:CF:9F:EB:7A:3F:98:8A:2F:71:12:20:7C:52:5A:E5:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:7c:0d:06:13:03:88:53:41:ef:09:2b:11:1f:83:e0:b7:70:
f1:91:23:c5:1f:6a:71:50:31:5d:5b:36:f5:0b:dc:41:a5:de:
8b:31:56:bd:05:cd:78:1c:fc:cd:63:dc:f4:e2:66:e7:cd:b6:
7c:a3:23:56:94:4e:29:69:35:66:81:c2:56:cb:70:a9:16:0a:
36:fd:bc:9b:4a:4f:7e:e3:f4:3f:40:d1:82:25:72:05:28:7d:
61:36:93:bc:cf:4f:20:07:24:aa:c0:52:7f:97:98:b3:cd:6f:
8b:36:ed:af:17:9c:5b:33:79:4b:cd:8d:3a:35:38:9a:62:cc:
b3:12:6d:a3:a8:f7:30:b8:bd:80:0e:be:81:79:d7:31:14:26:
82:3c:dc:d3:0a:15:3b:11:9a:53:70:12:49:7a:80:4e:f2:da:
cb:ae:6e:30:9f:47:5e:e9:a4:f9:0c:87:0a:6f:32:66:6e:19:
39:be:5b:af:c2:0f:26:53:29:c3:2e:b9:66:b9:f7:ee:0d:ca:
ca:23:10:e4:a4:8d:8b:71:97:fd:bc:c3:f7:50:e4:d8:7d:e4:
e4:91:23:bd:e8:6f:25:52:23:bc:d3:07:73:76:6c:bb:90:e0:
cd:ad:7b:04:21:d1:46:06:07:01:dd:e4:05:44:aa:76:b3:8d:
80:65:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:50 2025 by rpki-client