Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a31774e7-446e-3499-8a50-32d75dcc77d7.roa
File: a31774e7-446e-3499-8a50-32d75dcc77d7.roa (raw, json)
Hash identifier: AZdg9r7yfP0qnf5oJCtyjY1MU5UxDhtIXTQQu9EHHew=
Subject key identifier: 38:CA:5A:16:E4:53:4E:13:97:0F:85:A9:7B:A6:C3:15:1D:1B:8F:37
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848BE861BF461CBDC8DF1835340
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a31774e7-446e-3499-8a50-32d75dcc77d7.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 3356
IP address blocks: 168.87.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:1b:f4:61:cb:dc:8d:f1:83:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=609791e1-a008-4c6d-906a-cc48b4ddaae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:f6:21:a3:fa:48:a2:0c:36:5b:05:0b:f3:
4e:32:79:1d:7a:9a:d1:65:61:8f:53:b6:0b:74:a5:
33:79:d6:72:ce:f0:ed:1b:7f:74:6e:d6:0a:a4:9c:
5e:bf:7c:13:c3:30:f4:45:58:bf:a4:f9:17:2c:2e:
03:13:97:5e:4a:6c:be:a7:02:60:94:b8:5d:1b:81:
ac:6e:1d:25:ee:57:56:5d:76:a1:03:ea:ac:45:3f:
e2:3a:04:fa:85:b5:63:fc:d0:72:f3:6a:dc:8b:d6:
48:59:68:f7:f5:e9:48:d7:55:de:7f:4e:54:37:0e:
5f:97:b4:80:e6:cc:aa:c3:43:aa:c1:eb:3b:71:08:
7f:2a:eb:76:36:29:7c:8e:1a:e1:ca:d8:08:18:a0:
b3:65:e4:fd:be:04:cd:be:e5:b1:37:2d:2d:57:33:
b2:48:b7:20:61:83:3a:0a:b9:2a:77:c7:41:76:0d:
50:fd:80:68:7f:09:42:86:e0:0f:09:7c:c3:f8:a3:
76:ef:d5:9a:23:43:7e:b3:ad:2b:f7:41:b3:f3:5f:
7a:90:a2:cc:89:38:80:76:3d:1f:14:1d:a7:83:85:
de:83:22:7f:f4:c0:ee:fc:d0:49:cc:93:33:24:b3:
4d:3a:71:49:70:cf:ef:b1:27:08:f8:08:44:3d:38:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CA:5A:16:E4:53:4E:13:97:0F:85:A9:7B:A6:C3:15:1D:1B:8F:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a31774e7-446e-3499-8a50-32d75dcc77d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:97:a8:fa:c1:1e:92:83:17:a9:df:68:e6:d1:52:02:7c:b5:
ad:27:43:0d:c0:31:7a:e4:20:e4:cf:20:81:b3:67:18:9a:93:
0a:69:f5:52:bb:f4:89:14:83:bf:3a:ed:3e:a6:37:4e:81:89:
74:0b:de:59:28:96:25:65:be:29:5f:64:01:44:5f:1a:f9:30:
0e:1a:ab:54:a2:0b:76:82:ac:f7:7d:fe:9f:f1:32:9c:0a:22:
fa:c8:9f:e6:36:54:66:a6:b0:1b:76:40:06:13:63:6b:7e:63:
87:50:fe:41:12:63:57:b1:1d:6f:29:3f:4d:42:cb:6e:de:58:
00:7a:2b:3a:54:ec:87:ca:60:ec:58:b8:44:85:4f:41:69:d9:
00:02:5a:73:6c:df:0c:e1:27:b9:b4:40:ee:d7:81:50:44:0d:
88:01:a1:e3:d8:d2:b7:d3:53:78:8f:3b:0e:57:65:76:d4:f5:
04:72:f3:90:56:17:ed:c0:1b:d4:fb:e9:b1:0d:98:9d:16:7d:
e8:90:76:e2:c8:c8:8d:e9:17:26:a0:16:14:d1:19:b9:c8:36:
fb:e0:ce:54:82:87:06:16:1e:17:1f:44:e4:20:3b:17:2e:8a:
4d:67:61:95:6b:19:c9:93:fa:3e:da:9b:ad:5d:14:ea:40:98:
50:0a:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:41 2025 by rpki-client