Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa
File: 641ba864-2fd1-3793-9a93-207db100941c.roa (raw, json)
Hash identifier: W5JNxNYSeUTV2P7B+7C7M+BwL/uGAVhUcLU64hwoko0=
Subject key identifier: 15:2F:A5:EE:42:79:0F:E7:72:61:EF:97:14:23:04:FA:D2:FC:23:CE
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246CAC8A393C4E29647C328
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 203
IP address blocks: 168.87.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ca:c8:a3:93:c4:e2:96:47:c3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=3cf8ba39-f5f0-455c-8890-5fa6a79c52c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:4d:17:39:06:ad:25:66:96:fc:48:1c:78:
11:68:94:b2:e4:bd:af:11:08:7c:0b:19:3d:70:15:
f7:b3:2b:05:90:ef:42:2f:6b:e7:2a:37:3a:f0:b9:
16:c1:ec:80:7c:06:0e:21:6d:ee:fb:b0:69:c0:f2:
0b:83:c4:da:71:b7:fc:df:05:1e:96:bb:60:ab:30:
a9:a4:86:d1:f9:67:8a:2c:80:24:1b:47:23:a7:43:
d1:a9:3d:56:21:f2:8d:7f:36:5f:25:cb:47:c4:80:
37:f5:09:a4:79:64:f5:3b:db:ab:00:7a:66:e0:20:
e9:35:73:b5:aa:7a:b4:2c:73:92:55:9a:0c:9c:a5:
23:e8:2c:aa:53:5a:2d:49:18:4c:25:6b:17:0a:b9:
b8:fc:81:f7:e2:be:e4:96:e0:a1:e2:0c:dc:86:ce:
6a:28:a8:7f:1b:80:8b:80:d5:f6:a1:0b:68:8a:c6:
0e:d4:89:76:cb:ce:e5:04:57:1f:9f:a1:75:24:6a:
af:d3:01:75:8a:fe:f9:6d:b6:0e:81:02:f4:d7:d1:
38:4e:69:64:aa:65:27:41:a3:ad:ad:6c:10:d2:34:
41:1b:2c:d6:79:1e:ca:a9:47:ac:4d:3c:99:62:b2:
97:58:d0:9d:0f:c3:d8:f4:b2:69:ab:6c:69:e7:63:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2F:A5:EE:42:79:0F:E7:72:61:EF:97:14:23:04:FA:D2:FC:23:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:e7:e7:d1:2a:f0:89:8d:d7:c8:e3:51:2f:dd:e0:20:98:16:
bf:df:71:ea:ca:e9:fa:56:16:6d:c0:33:a3:9f:b3:81:88:11:
47:74:ab:a0:0e:b8:8d:d0:a7:85:ab:6e:89:e2:6d:9b:90:cb:
cd:b4:af:d7:28:1b:98:28:0e:a5:06:28:61:bf:0e:76:b2:12:
78:dc:d6:22:b7:b0:9b:50:64:57:da:63:4b:69:3f:76:04:f9:
93:94:9f:94:4b:16:2d:ec:c0:a6:e9:43:26:9f:01:4b:24:17:
c5:c0:6c:41:aa:62:1c:67:88:f2:d0:e5:72:48:96:10:fd:10:
34:64:5d:eb:f8:62:5a:96:9d:5b:08:3d:fd:f4:6a:8e:0e:46:
6c:a9:4a:97:ba:fa:ff:e8:ba:7a:8a:47:23:5f:f0:0d:3b:fa:
81:55:ff:2b:da:b1:26:15:b8:12:c8:5b:2f:51:cb:7d:67:f7:
24:51:7c:45:5b:0a:df:a3:7a:45:9e:da:3a:1b:10:d9:de:27:
14:71:4d:b6:68:e1:0c:e0:1b:8c:d4:64:62:33:da:14:78:c0:
58:b7:45:3d:d9:bf:eb:5d:6a:d3:87:8d:d2:e2:a3:08:72:e1:
f3:fa:7b:d1:40:94:e5:35:9e:5f:a8:e0:eb:d5:a7:f3:05:63:
60:7b:c2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:56:57 2025 by rpki-client