Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35023989-e506-3bde-b36c-ea2a9b9db547.roa
File: 35023989-e506-3bde-b36c-ea2a9b9db547.roa (raw, json)
Hash identifier: 0s87aBtgk7crPcuT24CAVFF/rOi7wUEdLsHn+qHdBIk=
Subject key identifier: 20:BC:6E:60:6A:95:D3:68:C2:55:72:71:E4:68:EA:83:44:B0:ED:E7
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848BE8620B704051B2C76AF2DB0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35023989-e506-3bde-b36c-ea2a9b9db547.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 2159
IP address blocks: 192.57.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:20:b7:04:05:1b:2c:76:af:2d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=736c4063-efe3-483e-a211-b6b3ffdae279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:5f:41:b7:29:87:e4:e6:a1:50:b6:02:02:
79:99:79:1f:6d:58:fa:a0:dd:99:4c:44:6c:62:c0:
8f:77:63:28:4d:b5:ca:58:db:69:1c:80:f2:f3:f4:
9e:d6:f6:fd:af:c7:fa:06:d4:ff:d0:90:c0:71:50:
8e:59:09:fa:1d:8a:6c:2e:87:90:7f:7f:0b:da:1b:
0a:e2:10:5b:d2:a5:30:94:b1:e0:57:0b:c0:13:db:
fe:eb:94:44:37:66:09:c3:4a:34:df:ed:59:75:dd:
45:b7:b5:cc:5b:a7:da:a5:c2:31:33:e4:10:8e:b2:
aa:b7:78:b0:eb:7a:40:1c:d5:f8:e2:c2:7d:14:d2:
21:f8:2b:bf:12:f7:19:a8:59:14:fc:88:97:c0:8a:
a6:5b:f7:e0:61:8b:f7:6d:b7:41:42:dc:de:de:d8:
df:56:a3:f5:8b:2a:00:20:93:e7:48:37:4c:ff:25:
b2:c3:3e:e0:12:cf:16:5a:70:b6:d6:e1:de:ae:70:
dd:ab:dd:1a:c2:ca:fe:0f:d3:de:b5:6a:f2:d8:71:
0d:de:01:a6:dd:cd:61:18:0c:ed:67:71:8c:09:a0:
c1:e1:f8:a0:44:16:6e:10:59:b4:72:11:c2:9f:b7:
1a:e8:ff:3b:3f:be:79:03:cd:d8:49:e1:08:86:0f:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BC:6E:60:6A:95:D3:68:C2:55:72:71:E4:68:EA:83:44:B0:ED:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35023989-e506-3bde-b36c-ea2a9b9db547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.57.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:ce:c3:2e:51:4c:43:7f:d4:e1:8a:db:fd:76:6d:94:78:54:
fc:92:d9:cd:2c:b9:b2:ce:40:5f:7a:0d:a6:59:23:2b:e2:77:
e1:d4:80:c1:ec:e6:d7:50:79:83:b4:dd:71:cd:28:0f:e8:2e:
95:7b:af:cd:d0:26:5c:7c:6e:b4:90:97:46:15:db:3b:21:b1:
29:cf:92:e2:c6:7e:85:b0:8b:18:04:66:01:f0:a0:47:43:03:
63:34:be:3e:25:2b:3e:50:6a:a0:e0:72:04:6e:12:88:72:73:
45:6d:06:57:c2:ff:7a:67:e1:66:5f:7c:a5:4f:89:2c:7d:2c:
b7:06:14:d9:11:00:e3:25:9c:3f:bd:6c:a7:98:5e:16:eb:b2:
e7:d6:bf:56:7f:22:25:7b:c1:f0:83:57:09:c6:0b:f1:04:86:
69:1e:c0:25:ed:74:75:d4:40:27:70:04:17:e5:85:d1:a4:28:
53:d5:8e:85:6d:9a:e5:b5:6d:8c:df:37:8e:82:ca:38:a8:43:
54:d4:aa:88:1b:c1:49:9b:1b:9f:2f:f7:b3:25:77:88:58:f4:
1f:53:c2:3b:1b:a6:1d:0a:15:26:f8:27:13:6a:94:42:2c:99:
5a:53:ec:82:0c:2c:2a:56:00:a8:40:de:0d:3c:12:ae:57:ae:
02:8d:9f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:42 2025 by rpki-client