Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/826e9a9b-e3a2-386e-9e3c-310215c7670b.roa
File: 826e9a9b-e3a2-386e-9e3c-310215c7670b.roa (raw, json)
Hash identifier: t+tGn6dCPdbqIcvnWtOUXCea2JyF+/W72tsomuv9iPM=
Subject key identifier: 6C:9D:DF:0B:D6:0C:BE:53:5C:EF:C2:4A:32:8B:30:76:39:2A:FC:89
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848BE86211926EDB8E975890680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/826e9a9b-e3a2-386e-9e3c-310215c7670b.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 2159
IP address blocks: 204.230.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:21:19:26:ed:b8:e9:75:89:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=4cd53b30-dc8a-4ba6-9ee6-de34fe7ae998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:a1:46:c2:1e:23:03:a7:6e:09:af:89:11:
00:aa:1d:3a:af:cd:b7:05:c1:51:7a:58:a6:ad:d2:
45:b0:39:8a:0d:45:4d:b9:e8:5c:54:9e:47:54:35:
1f:c1:8c:89:30:ac:9f:7a:d3:da:08:44:b0:07:d0:
21:ef:f6:31:bb:5a:1d:f9:c7:ae:e9:6b:26:32:d6:
c8:ad:01:89:42:09:ac:a9:37:ff:44:0b:c0:3b:fc:
eb:36:5b:4e:ca:78:97:f7:06:9f:62:5d:0f:7a:89:
78:84:51:c0:00:35:50:e1:7b:93:d9:c7:95:cc:93:
a2:49:11:fc:5e:a4:10:ae:7b:43:e7:43:c5:4d:12:
59:b9:5a:48:cc:63:44:0a:17:07:4b:43:9f:be:a4:
55:aa:2c:77:dd:f5:6d:14:2c:04:0b:96:f7:6b:3e:
b0:33:a1:3b:44:97:78:36:2b:45:81:00:62:2f:6d:
67:d8:54:5f:20:8f:00:88:9b:45:dc:54:8c:fb:65:
39:3d:5e:ff:81:1a:ee:8d:3b:be:0a:c4:21:f1:ae:
09:9f:8c:8c:69:5e:fc:1c:5d:f7:4a:b3:86:bd:02:
0e:6a:51:f0:a9:c2:6a:9e:74:4f:20:96:c5:67:bd:
2a:d9:c8:a7:8e:f4:d4:74:11:be:3c:24:99:e4:b5:
a4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9D:DF:0B:D6:0C:BE:53:5C:EF:C2:4A:32:8B:30:76:39:2A:FC:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/826e9a9b-e3a2-386e-9e3c-310215c7670b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
204.230.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ee:4d:95:c1:e6:37:50:dc:f7:bb:9e:0a:b2:d0:f0:c7:0a:
72:ea:2d:d8:80:e7:25:55:db:d4:d7:31:70:35:9b:66:7c:46:
32:83:17:d9:4c:d3:84:f8:00:13:5c:99:66:5c:37:06:41:4b:
d6:53:e2:7e:fc:e8:45:03:46:3c:6a:56:13:bb:22:5f:0a:70:
9a:96:74:bd:af:96:95:6e:b2:06:c8:29:01:90:54:39:08:db:
0d:b9:e8:7f:a1:40:50:d2:22:7a:91:cc:d5:24:14:42:b2:79:
2c:95:bb:0a:71:46:d3:a9:6c:bb:95:0c:69:2e:57:db:76:a4:
e1:09:b7:eb:a6:91:40:37:c0:a0:ed:65:fe:b5:d1:cd:bc:89:
cd:7a:08:3d:1c:eb:df:76:81:12:34:28:a8:c5:33:e6:5c:43:
4a:14:da:be:9c:c5:33:43:e5:40:ae:74:95:46:ca:96:37:32:
2e:04:ab:c2:01:c9:5f:f9:b7:75:62:30:6e:7f:e1:d4:89:09:
a5:4c:6b:06:d1:b3:dd:ba:e3:cd:5c:05:45:9a:5c:df:51:f2:
62:bb:05:31:cd:67:15:5e:ac:d2:de:b6:64:68:13:b0:3c:87:
93:6e:22:c5:59:be:b5:2c:16:aa:33:fa:d4:21:14:9f:7f:20:
0a:f2:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:47 2025 by rpki-client