Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/88fbdccf-30cf-3061-8568-4b9965ec2071.roa
File: 88fbdccf-30cf-3061-8568-4b9965ec2071.roa (raw, json)
Hash identifier: kPQAsCimLgPbbRmarKeDQPN/b8QcVhNoMz59piQewnU=
Subject key identifier: 34:C5:86:43:FA:2D:E4:23:0C:AC:C1:FC:19:D4:AB:E2:5B:7B:23:94
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246C960B871CDE396932B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/88fbdccf-30cf-3061-8568-4b9965ec2071.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 202
IP address blocks: 192.85.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c9:60:b8:71:cd:e3:96:93:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=2b5efe36-2da2-4d1d-b6f1-5be163a0a6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:90:93:99:fb:59:33:34:3b:27:76:c2:e1:bf:
5b:6d:6f:40:31:82:b0:8b:88:66:a7:33:75:aa:cf:
e4:fa:08:55:45:7c:11:a6:2c:df:47:19:d7:f9:ea:
43:5f:81:3a:53:b4:22:3f:2f:24:dd:21:fc:91:8e:
05:2d:d1:84:4f:8f:78:3d:47:a6:61:00:af:3b:5c:
bc:5a:23:6b:a6:30:38:34:29:32:16:ce:4a:ca:5d:
80:bf:43:f3:c6:dc:c5:48:84:25:92:10:10:7b:fd:
e0:53:bd:6e:3a:96:10:1a:3d:92:8f:33:de:09:74:
77:0b:37:1e:f4:b3:b7:c7:7e:a3:10:93:c6:42:d2:
4a:65:73:87:8b:5d:e3:60:a5:e7:62:3e:51:ce:c2:
87:31:e9:92:c5:e7:33:e2:f3:44:f1:11:f6:28:ef:
ef:82:f7:b2:3c:82:e3:58:b0:aa:da:0b:6f:b1:8a:
7d:4f:cb:b9:53:f4:1f:dc:8c:92:b4:d8:a6:38:6b:
3f:58:1d:8b:25:62:6a:8a:2a:65:e4:04:3c:ff:cd:
de:cf:5c:b4:d1:92:f2:7d:57:64:a1:37:d4:2a:fd:
0e:20:c0:a3:64:96:9c:6a:86:2e:01:46:97:aa:41:
a0:d2:15:86:e2:08:ec:7d:3d:30:32:be:fd:a1:08:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C5:86:43:FA:2D:E4:23:0C:AC:C1:FC:19:D4:AB:E2:5B:7B:23:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/88fbdccf-30cf-3061-8568-4b9965ec2071.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.85.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:20:61:f2:bb:dc:e8:c7:68:73:d7:fd:1e:f4:da:ec:df:ef:
03:04:ef:bf:8c:66:8f:69:67:0a:ef:c3:af:f0:52:60:f1:8a:
86:ff:18:d6:c6:c8:c3:37:fe:a3:b9:2f:a6:a4:a6:35:7a:be:
38:a6:ab:b2:05:68:e8:43:db:20:b9:6a:a6:cf:50:b0:cf:ad:
e9:5b:14:7c:ae:c0:3e:18:b0:ce:cb:ff:c4:41:69:d1:c2:11:
b7:21:cd:78:9a:1e:e5:4b:c7:e6:89:48:b0:76:0f:66:8d:74:
3e:08:bb:4d:27:43:16:5e:2d:ab:09:30:06:4c:fa:fc:a8:4f:
1a:8b:6f:c4:8c:12:01:9c:6a:ca:77:6e:4d:03:a5:5b:9b:37:
6f:e6:49:3c:5b:01:e5:a3:fb:33:19:47:95:06:91:04:78:d6:
48:e0:20:b6:aa:3e:0e:94:30:eb:a0:8b:0d:ed:f2:8f:a4:d2:
d4:5a:7c:32:5c:04:ba:3c:45:a0:70:58:7d:dd:00:13:0a:be:
e8:b0:d7:55:79:4d:a1:a7:ca:d4:fb:22:36:90:df:4a:7e:b3:
ec:2f:38:16:07:76:53:5c:39:46:6a:f6:92:b5:f0:69:5a:10:
03:1d:70:59:68:4a:4f:25:06:c9:2d:c9:d5:42:01:9d:5a:4a:
38:e8:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:19 2025 by rpki-client