Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ed04a73f-ea15-38fe-a881-8a293a129fa9.roa
File: ed04a73f-ea15-38fe-a881-8a293a129fa9.roa (raw, json)
Hash identifier: NFory/XnyWv0aHxTzS9v9ih+K1Uwmri8thV+CI2ErWg=
Subject key identifier: 86:F0:78:74:3F:8B:40:F0:2B:0B:CB:48:DB:A2:6E:6D:5D:5A:6D:C0
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848E2D11E9151C8D761E81332A0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ed04a73f-ea15-38fe-a881-8a293a129fa9.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 3356
IP address blocks: 192.57.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:1e:91:51:c8:d7:61:e8:13:32:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=397dd646-1b6a-4d5e-8ac6-5099106b20d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0f:4a:0f:67:19:8a:8a:56:42:7a:36:59:d9:
63:be:6a:1e:53:d6:8c:9c:8a:06:0f:71:b8:0f:e4:
2d:a6:bb:ac:ce:66:9d:a0:51:81:c2:31:1e:00:07:
39:f8:5f:a8:79:23:98:bc:53:a1:84:de:02:31:94:
7d:9a:ba:ca:01:1f:63:ac:6d:a0:83:5f:36:3d:91:
81:59:3a:a5:7c:e3:e4:41:ef:a0:9e:51:93:4d:64:
c4:3c:6e:51:08:95:f4:c0:ce:73:b0:eb:dc:0d:71:
b1:0a:ed:af:29:f9:84:ab:ed:b7:34:09:c8:bb:a2:
4a:48:53:c4:d6:25:96:5a:0a:bc:bb:e1:e1:99:32:
6a:3e:08:ab:57:ab:62:59:4c:8c:2f:ed:87:48:64:
b2:bd:0d:f3:85:46:28:4c:f7:b6:e5:75:df:32:2b:
e9:af:e3:dc:af:cf:1b:30:e9:50:cb:8a:64:50:77:
d1:24:72:68:64:d5:67:97:89:28:1f:ff:37:72:28:
32:ac:45:53:b9:84:85:49:62:87:14:0c:45:9b:fa:
59:b3:4d:a0:62:c8:77:5e:05:90:08:47:b2:56:59:
ba:2c:9c:3f:30:3e:86:7c:83:3b:99:7e:58:4e:68:
91:fa:98:73:07:49:0b:63:8b:6f:60:03:8b:b9:ef:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:78:74:3F:8B:40:F0:2B:0B:CB:48:DB:A2:6E:6D:5D:5A:6D:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ed04a73f-ea15-38fe-a881-8a293a129fa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.57.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:83:2f:8c:c0:51:07:ca:ed:b6:9e:c3:4d:e0:d8:c8:cf:c8:
94:92:9c:db:b6:fc:a1:1c:7d:42:9d:84:e9:57:02:76:80:89:
f1:95:49:03:bd:5c:85:df:cc:94:37:e5:ec:35:91:2d:84:44:
b0:d8:74:51:9b:44:6f:4d:a3:55:4e:dc:23:08:ff:50:4a:45:
3d:04:33:76:e1:ea:f0:ac:a6:fa:7d:77:88:3f:36:b2:4d:06:
45:46:1a:2a:8a:6e:77:55:0b:3f:92:44:11:9f:51:f3:59:81:
48:e4:4f:f6:60:75:b3:65:d6:80:4a:1e:e3:40:b5:e7:cc:96:
d1:c3:c6:c9:4a:f7:27:cf:98:c4:51:7f:03:0c:ff:e7:5c:7f:
d4:d4:a4:dd:2e:fd:e8:f2:92:05:54:7b:ea:ad:6b:af:0a:bb:
08:c7:10:0a:16:b0:05:1a:e3:1a:17:5c:d0:d0:15:75:db:fe:
8b:42:d4:66:99:c5:07:60:81:ea:4e:fc:40:f4:8f:eb:9b:d8:
e8:89:51:ec:60:e6:db:ec:74:09:1e:ef:b9:c7:d8:f5:c6:0f:
3e:1c:e3:dc:dd:04:90:bf:74:e1:a2:51:e8:1d:01:89:be:81:
a3:ee:a2:31:56:1f:1b:24:71:93:5c:3c:4e:89:3d:29:cc:de:
ea:fa:77:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:57 2025 by rpki-client