Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6df3e998-d1e0-3ef1-afeb-b873092957a1.roa
File: 6df3e998-d1e0-3ef1-afeb-b873092957a1.roa (raw, json)
Hash identifier: gBQsMS5KysN9XM082zB/GC5AhkbF2y7MkpQDK7dAc/s=
Subject key identifier: E5:48:6C:C0:F0:C3:FC:13:3D:27:53:26:E5:01:E8:67:DD:88:23:CE
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848AAFB5A7E94D67CDF02945100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6df3e998-d1e0-3ef1-afeb-b873092957a1.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 3360
IP address blocks: 192.85.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:5a:7e:94:d6:7c:df:02:94:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=66c20210-a7ed-4a14-9910-bcf53252715f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d5:af:51:1e:70:c5:4a:98:b3:5a:68:3d:fd:
99:4f:08:ed:dd:34:df:fc:b9:28:e5:57:5c:be:a6:
6e:49:f7:90:a4:8b:aa:4b:7d:5c:e4:82:1d:92:5c:
1e:d5:57:3e:68:0b:4d:2b:1c:03:cf:fc:5f:75:25:
a0:b6:93:8c:7b:cb:64:da:07:40:c4:f7:d6:b9:74:
9d:4e:72:6c:27:98:52:7d:b8:ce:66:0f:1b:7a:f7:
18:d8:66:e8:90:9f:83:8d:8a:60:76:82:d7:9e:b9:
0d:23:38:19:8e:47:54:5f:cf:60:28:47:46:45:d5:
93:08:3e:24:67:57:8b:98:96:4f:20:35:10:cc:81:
16:4b:c9:f2:d8:f0:1c:5f:a9:71:68:d7:92:65:c2:
96:ec:33:0b:ec:5f:a5:a0:87:06:d9:b2:ca:07:cb:
70:79:4e:48:d3:44:31:5a:91:7b:40:d4:d6:47:b2:
bf:7a:3e:0d:26:d0:87:4c:7d:92:c7:b1:13:68:dc:
7a:6f:7d:ec:f2:8d:d9:09:44:54:16:05:0a:af:b5:
31:b1:83:29:81:7b:09:10:ba:d6:06:5a:27:3e:8c:
63:60:6d:c9:fc:2c:85:f4:42:40:f4:cc:fd:bc:f2:
4b:de:6a:56:6c:90:1b:07:3d:1c:c1:f5:fe:73:d7:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:48:6C:C0:F0:C3:FC:13:3D:27:53:26:E5:01:E8:67:DD:88:23:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6df3e998-d1e0-3ef1-afeb-b873092957a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.85.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:01:e6:bf:d0:4d:5d:24:22:dd:ac:71:73:34:5e:d6:be:88:
63:75:59:d0:79:8e:cb:7f:ff:7f:b6:74:03:9d:2a:7e:2a:88:
1a:43:bb:b7:be:cc:e5:61:d4:15:47:ca:1e:41:53:d9:53:44:
1d:d0:2e:00:f0:97:d2:44:2c:a5:82:45:d4:8a:b0:8a:e7:9b:
8e:90:d0:55:cb:44:9b:b1:52:fa:72:39:6b:b5:a5:d4:4c:41:
d6:ac:60:ad:a7:77:84:b1:8f:2e:f4:9d:df:1c:3a:c2:d1:93:
cd:3f:10:ac:09:db:8c:af:15:69:66:cc:2f:23:11:ab:47:5d:
3c:55:36:91:11:c6:a3:90:17:9f:b8:d4:49:67:42:80:ab:dc:
1a:96:d5:78:04:90:a3:48:27:c5:7e:5e:fc:0b:93:0a:6b:71:
ef:59:ea:1f:8b:cd:30:b0:21:92:7e:27:e9:d6:63:c0:5e:94:
87:57:38:17:3b:97:84:e6:b2:d2:bf:fe:86:ed:54:69:7a:16:
6c:10:ad:a8:78:85:c6:1d:e0:9f:1d:14:9e:32:a0:31:c6:da:
1e:36:6c:68:e2:e1:d7:21:dd:8c:62:ff:46:10:5e:2c:b5:59:
bb:3e:af:e9:08:0b:c4:88:1d:28:ac:cd:e5:f0:84:6c:c8:1b:
03:4d:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:13 2025 by rpki-client