Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ec42ac44-a966-38c2-9ba5-3a1220947a31.roa
File: ec42ac44-a966-38c2-9ba5-3a1220947a31.roa (raw, json)
Hash identifier: U4SEusQP831Guyq4/W1JA1OPVDYvgML5m14H+5wLvSY=
Subject key identifier: 54:E3:7E:02:BD:0C:B3:56:1B:DE:40:19:A7:86:7A:22:18:7E:FA:C9
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848AAFB5DA98FB27587CC88C600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ec42ac44-a966-38c2-9ba5-3a1220947a31.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 202
IP address blocks: 204.103.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:5d:a9:8f:b2:75:87:cc:88:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=e29fad51-b27b-4c1d-a022-f982a9a7e9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:41:16:65:0d:df:04:cf:4d:ee:7f:84:44:
a1:01:0f:23:cd:51:8b:83:7a:49:bc:ce:86:f6:88:
64:46:de:be:12:42:fe:36:b0:35:a3:b5:d3:51:52:
d6:93:cd:0c:40:41:78:75:2b:f4:72:ca:b9:ef:f0:
45:9f:31:a0:2b:aa:35:97:0b:59:93:d6:8a:e2:ef:
39:d1:0b:ac:5f:6d:27:87:51:df:b1:17:74:05:48:
75:ba:c3:1f:ad:66:ce:a9:70:cc:e5:be:86:03:91:
c2:dd:05:87:bd:00:7f:80:0a:6d:29:04:10:15:38:
f7:81:28:19:1a:f6:7e:9f:30:23:f6:3c:bf:cf:d7:
b8:58:09:67:a8:a1:74:a1:42:cb:bc:e2:bc:ac:04:
96:e8:f1:f5:2e:10:99:f9:b7:85:60:19:0e:87:47:
5f:67:90:5e:fd:7e:e0:6f:ac:d7:03:da:61:53:6f:
2a:6d:43:8d:d1:35:f6:25:71:dc:e7:64:f4:ad:dd:
1c:5d:f1:80:ed:eb:2a:4e:6c:02:c7:c2:66:a8:5b:
9c:bd:56:96:5a:db:a7:7e:32:33:0d:ef:f7:4e:69:
9f:e0:a6:8b:00:a6:79:ec:6c:0d:76:25:d0:3d:34:
33:b7:40:7f:74:0e:e2:83:da:a8:b0:0e:56:d3:ae:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:7E:02:BD:0C:B3:56:1B:DE:40:19:A7:86:7A:22:18:7E:FA:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ec42ac44-a966-38c2-9ba5-3a1220947a31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
204.103.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:fd:18:1c:26:d3:b4:12:f4:fc:17:33:97:ea:f9:10:b3:89:
f5:2b:cc:7a:a7:48:66:46:1c:ca:8d:b9:7b:c8:c2:b9:ef:b3:
8c:5e:0c:04:b6:84:e8:2c:26:95:81:4e:57:75:bd:e6:5b:a6:
d3:e1:83:ab:62:fc:09:e3:24:e6:e4:e1:96:83:c9:71:52:d3:
ab:80:d2:de:fd:8e:20:54:59:cb:60:7c:b0:a3:8e:8c:0a:43:
99:2f:5c:d4:04:1c:ab:a3:5d:0e:08:47:f6:28:e7:0d:cb:a7:
f6:ac:d8:72:fc:58:2e:c3:dc:a9:be:ce:84:1a:d4:0c:2c:90:
5d:8b:66:63:35:d7:16:45:31:b2:d2:be:d8:88:f0:79:e8:df:
e3:db:99:da:3d:84:54:ce:9d:a5:51:6b:23:d8:57:ce:83:44:
67:b4:b1:0f:e8:ee:68:29:c8:f5:ff:1c:54:91:da:17:4c:f6:
94:01:17:20:08:81:c6:93:ab:a0:c9:a9:43:2f:c2:db:d9:48:
36:42:fa:b7:63:35:9e:3a:50:19:53:fb:89:e6:5b:87:8d:85:
5d:cf:d1:c3:05:4d:d6:0e:55:b7:06:5a:f8:f0:12:6b:4c:2b:
14:27:22:b6:33:69:15:a6:4a:0d:1f:b5:75:30:65:79:43:f3:
55:af:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:43 2025 by rpki-client