Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35593a2a-164d-3cc9-a54f-199cfc695243.roa
File: 35593a2a-164d-3cc9-a54f-199cfc695243.roa (raw, json)
Hash identifier: Mi+ExR73lyG5PfjlMAHW7YeCPdtypTdRvvYwEZIX5po=
Subject key identifier: 49:EA:54:83:E3:0A:E2:A8:67:DC:B7:F0:DD:D3:DE:3E:89:F9:EB:63
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848AAFB57A1A1F1098C5D1E5500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35593a2a-164d-3cc9-a54f-199cfc695243.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 3356
IP address blocks: 192.85.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:57:a1:a1:f1:09:8c:5d:1e:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=0cd76473-4d2d-4b89-96cd-30ebaa9baf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:80:3e:4b:91:68:37:91:5e:7a:6f:06:c0:2d:
3e:d9:04:5d:d7:ec:3d:63:9c:ac:a2:bf:a8:9e:cf:
18:d8:45:d3:36:b7:a4:b9:72:00:48:1a:4f:e9:28:
0a:a6:cc:c1:37:ea:1b:39:78:eb:63:8e:82:b2:c4:
25:56:68:08:5a:ff:73:f2:d4:84:19:4e:3e:c2:c0:
4b:80:ab:f9:ed:51:f8:f8:ba:07:20:d3:e3:00:a9:
7e:d3:9b:19:de:10:3a:80:2e:46:59:91:29:47:5e:
e7:fa:80:df:ce:42:77:f5:be:1a:a1:ef:25:93:1a:
de:5d:f4:99:9b:24:1c:e4:2b:59:13:de:f2:74:c6:
21:fe:5f:4c:cf:be:82:fd:95:2e:52:40:b1:5d:24:
f9:11:57:a0:2e:cc:65:5d:60:9e:77:14:e6:22:3a:
b0:d5:2d:6e:a4:d9:a3:cb:33:d6:ca:e6:ea:25:0a:
af:6e:64:ff:ab:dd:40:a8:8d:e5:35:da:81:16:94:
d2:60:88:ba:50:83:1b:58:47:40:b6:89:a5:c8:06:
8a:e9:94:8f:43:6b:2b:55:62:45:11:6f:a3:bf:d1:
5e:5c:00:23:cc:0c:0f:90:bc:07:7f:13:39:8c:d0:
97:06:34:c3:61:83:8e:6f:b7:6d:a6:97:e4:88:92:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EA:54:83:E3:0A:E2:A8:67:DC:B7:F0:DD:D3:DE:3E:89:F9:EB:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35593a2a-164d-3cc9-a54f-199cfc695243.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.85.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:59:c9:d6:16:19:98:bf:fb:f6:23:de:9d:e6:eb:0b:e3:0a:
67:4e:d8:1a:99:fb:69:62:07:fd:8f:82:30:cc:90:6d:cf:75:
43:e3:21:3d:c0:77:78:56:0b:e9:ae:43:27:3f:7f:07:b2:b8:
85:e5:16:44:d9:4b:c7:16:9c:19:aa:a2:f4:58:93:91:cb:a0:
8f:7e:0c:10:e8:55:f5:f3:86:dc:d4:4b:4e:45:4b:6a:b9:3c:
80:0c:48:89:9f:65:bc:77:a5:fa:1d:03:1c:21:80:17:33:49:
bc:09:ca:a6:1d:1c:33:14:b7:9f:87:db:be:bc:57:8d:89:71:
83:08:08:43:4f:4c:9a:db:aa:22:47:78:7e:e4:52:01:4c:30:
24:c6:9e:b3:86:f7:55:ce:f7:d7:6d:04:a4:de:12:be:37:76:
97:66:bb:15:25:85:bf:61:08:8f:f9:be:f7:99:c6:3b:af:0a:
55:a4:60:ae:c2:3a:e5:d5:91:c7:e5:60:c1:50:c4:3f:26:54:
36:ea:f5:27:a3:88:6e:a9:e4:e6:40:99:95:dd:76:8f:b8:88:
6a:c2:56:9e:90:86:23:b1:ce:14:6d:24:4f:ea:40:6c:bf:6c:
5c:7f:58:d6:ee:15:83:fc:5b:d3:c6:3d:ef:67:4b:8f:d7:64:
a7:00:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:58 2025 by rpki-client