Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fe744e3c-3882-357b-b678-d6a14f744000.roa
File: fe744e3c-3882-357b-b678-d6a14f744000.roa (raw, json)
Hash identifier: 2k+fML8F78x3qornMIRM97vX1UwXyYG8/6g752zlLRI=
Subject key identifier: 1C:1A:37:CC:26:8A:03:40:07:6C:14:D7:6E:60:CB:B0:D7:FC:3A:C4
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246C98AF9A5DE1FB97BAC20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fe744e3c-3882-357b-b678-d6a14f744000.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3360
IP address blocks: 192.85.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c9:8a:f9:a5:de:1f:b9:7b:ac:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=9ec94034-4670-42ba-9ec5-5dea1cd42107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:67:3c:26:01:6b:20:6a:96:77:90:a7:12:
16:70:27:ef:35:7b:de:85:fd:2f:b6:0a:cd:b6:eb:
e5:0c:b7:ed:37:33:db:07:99:c9:6f:0e:b1:a0:fa:
d0:ac:1a:57:eb:3a:4f:80:82:db:eb:12:c1:03:20:
3c:e6:0f:9c:3b:14:c1:26:72:5b:80:31:b2:3d:d2:
3a:73:a1:f7:79:15:a3:96:81:c7:c1:85:47:a5:61:
89:ef:bd:4f:6f:67:da:3d:da:88:cd:c4:9a:26:6c:
d0:84:53:81:3e:c4:e8:df:f9:d3:6b:58:5a:41:0a:
e9:c5:62:94:0e:8e:75:8c:a1:37:a8:1b:db:5d:8f:
57:bb:6c:56:3f:89:56:57:53:66:5d:23:35:2e:ab:
1a:70:d8:9b:e7:6b:2c:86:15:cc:76:49:b4:fd:ad:
4e:42:be:bc:21:53:95:2d:1f:57:2f:d6:8b:1d:b0:
8c:77:b1:13:ec:68:95:11:93:81:50:51:d7:19:f7:
94:61:06:6d:ed:13:f9:b5:04:27:ae:e2:67:51:4f:
65:ab:6e:4f:85:2c:c5:0a:a5:9e:6a:87:e3:ea:52:
44:81:e1:60:c3:5e:3d:3c:f7:2d:80:11:37:63:35:
f7:ba:62:38:96:39:42:f6:35:00:89:ca:f6:39:c8:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1A:37:CC:26:8A:03:40:07:6C:14:D7:6E:60:CB:B0:D7:FC:3A:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fe744e3c-3882-357b-b678-d6a14f744000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.85.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:23:77:ac:5e:43:7c:53:3b:70:a0:99:54:57:76:f1:0b:87:
31:15:73:2c:cd:ff:53:50:3a:31:6f:f1:63:b4:d4:18:5c:a2:
e1:1e:a1:9e:a0:5c:c2:87:ed:2f:b8:6f:1b:c6:d1:23:fa:43:
61:22:63:86:9d:01:00:ce:55:f0:b2:44:3a:ad:06:3b:f8:5b:
ea:1e:6b:64:ed:92:3f:17:90:d3:ad:d5:55:e3:0f:68:14:e4:
38:d8:4a:39:37:12:52:31:4b:ab:ab:f3:0b:e3:f1:80:a5:22:
18:b2:ee:a7:54:f4:9d:0a:3b:d1:13:71:76:44:9f:fb:01:b0:
ce:74:c5:a6:c8:84:51:87:18:4c:3b:8a:c0:ac:6d:d4:f0:73:
f9:88:e8:d7:1e:1a:db:53:34:cb:20:3f:06:07:34:30:5e:6e:
7a:d9:08:76:da:99:b8:16:41:bd:b7:de:86:dc:76:24:f1:1f:
7c:92:db:3e:f2:f7:e5:39:76:b6:09:df:5d:2d:8a:37:15:11:
05:21:88:95:bc:e5:ea:60:7b:bf:8f:ab:7d:19:83:26:7c:1d:
06:5a:7e:08:59:60:45:e2:52:b5:c0:e5:88:ed:dd:d7:90:e3:
46:87:fd:7e:5a:df:37:77:59:97:85:84:3c:6c:5a:9a:81:97:
e5:1d:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:01 2025 by rpki-client