Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8319cad4-82bc-3835-9262-ddb0e38ea921.roa
File: 8319cad4-82bc-3835-9262-ddb0e38ea921.roa (raw, json)
Hash identifier: fug5qKroeh7InUu9ArLkcTYV0HRHkvLerfo0xfhgTNo=
Subject key identifier: 61:85:C4:55:4D:5D:2C:0C:C6:1F:43:05:92:39:81:47:54:38:AB:13
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858494733F00474F7A6B603199E80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8319cad4-82bc-3835-9262-ddb0e38ea921.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 3360
IP address blocks: 168.87.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f0:04:74:f7:a6:b6:03:19:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=0c44c379-593a-4fe1-8039-b0ed7eb6e858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:e8:14:96:b2:0e:62:9f:56:f8:35:84:ab:
d4:9b:a9:a3:a7:02:50:14:4c:da:f1:26:30:58:31:
98:af:6e:dd:aa:b6:f0:93:9e:1e:ef:e7:11:27:41:
0d:15:18:69:fc:6d:67:60:d5:44:29:58:17:60:40:
81:5e:5f:44:8c:c9:86:0a:55:b3:e6:2e:79:88:47:
8d:1d:0a:1c:ab:3a:47:a7:1a:bc:d8:fb:38:39:3d:
f1:2e:7a:93:3e:54:99:7a:f1:47:b5:fe:9f:19:b9:
32:31:fa:14:ac:72:0f:27:5b:34:fc:c7:e3:a1:16:
4e:51:5d:77:33:74:d8:94:ff:b9:95:25:fa:82:4e:
f0:56:fc:8e:61:70:3e:4b:00:4c:96:03:60:25:af:
e4:9a:6e:5f:8c:6a:1b:c1:27:9d:1c:86:51:47:76:
98:a9:cb:61:9e:70:54:cc:26:a1:e8:75:3f:4a:4e:
23:05:13:a4:6a:05:95:00:b1:8f:6a:7c:4c:b7:67:
cb:2d:1e:1b:a5:3c:95:61:4c:6c:77:2e:63:42:f2:
39:d9:5c:cd:45:09:78:74:86:28:b3:f5:06:ac:0c:
d9:99:59:54:0f:b5:eb:33:de:ce:54:0c:b5:25:56:
af:d8:74:aa:1f:87:78:33:35:1d:18:10:b0:a5:91:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:85:C4:55:4D:5D:2C:0C:C6:1F:43:05:92:39:81:47:54:38:AB:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8319cad4-82bc-3835-9262-ddb0e38ea921.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:c9:83:ad:09:12:29:15:e4:8b:64:ae:98:97:cb:13:ac:3e:
81:d0:42:1d:c3:f7:a3:d5:c5:fe:09:67:ab:ee:d3:13:2c:b1:
14:ea:db:4a:58:68:e7:0c:0b:b5:ae:39:9c:52:60:ad:e2:0e:
bb:5c:21:48:f3:28:9d:02:84:c5:a8:89:00:81:08:75:07:46:
3f:02:a4:5d:79:3c:bb:49:5b:c9:2f:7c:e9:3e:e0:f0:5d:2f:
71:74:ef:b6:3b:54:02:97:3f:80:42:da:61:c8:7a:86:fb:2e:
91:5e:69:d1:ac:b1:af:16:98:be:04:eb:a6:23:75:ad:7b:bb:
2d:e1:e9:40:43:c6:e6:28:31:12:89:2d:2e:69:7e:41:28:d2:
5a:19:8c:db:d7:45:5a:51:50:61:45:a5:cc:01:fe:a2:f4:30:
38:5f:a9:24:d4:b5:f2:6b:f0:bb:ee:2c:61:03:fb:dc:55:9a:
26:68:eb:6e:ae:73:d9:a0:93:80:f7:1c:9a:9b:f4:ac:91:7f:
8a:12:93:50:e0:50:e5:8f:fe:ee:3e:31:56:ce:b9:4e:7c:32:
73:00:f8:24:98:30:7b:32:9e:f1:aa:d6:e8:54:23:11:31:ce:
e8:49:9f:0f:e8:1d:bd:2e:be:22:3e:60:49:ea:b4:55:27:c5:
d8:89:e3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:26:54 2025 by rpki-client