Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa
File: 0bf462af-9a76-3762-a297-14cc5e7b1f19.roa (raw, json)
Hash identifier: /nHm9mdMJHKeLiBsjWLgnLc+aBbqVOPJq5maZ9zk5fI=
Subject key identifier: 7E:9A:FD:8E:EA:A1:BA:DA:E7:A1:1C:5E:EC:31:EE:A6:CA:A4:4B:71
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848BA563E23F9753D920E01562E
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 203
IP address blocks: 192.57.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:3e:23:f9:75:3d:92:0e:01:56:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=9c7795d8-bca2-49c5-9ceb-19cd316000f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:0b:5e:2f:72:f6:7b:5f:9e:fc:b7:62:75:
3d:a6:ac:d1:23:f9:66:51:34:ab:af:3f:88:81:48:
7a:c9:72:4f:89:b8:c4:67:9f:e0:d1:d6:8e:ce:18:
0e:c3:00:36:d0:b7:ca:ee:b7:88:11:a0:be:ca:a7:
74:cd:9a:fc:1c:05:c3:aa:90:94:4d:63:87:3f:f2:
6a:ac:34:85:14:a2:24:18:0f:57:04:2b:73:5a:99:
4e:6e:96:7d:46:31:c3:b2:c7:9c:44:2d:44:fe:44:
75:db:49:da:0f:00:1c:dc:f8:89:6d:44:71:d8:11:
44:9c:2d:51:b6:fe:3f:63:88:84:be:d6:0e:26:71:
63:f4:f3:6e:34:05:cd:1f:11:55:27:58:1f:3a:0e:
6f:b7:51:73:4e:2b:df:6a:e6:c6:62:39:38:c5:c3:
58:33:ec:90:71:ab:e3:fc:ee:46:00:21:de:c7:08:
71:ef:6f:22:da:1b:15:6c:3c:e2:35:76:bf:d8:f8:
9f:8f:c5:11:9f:aa:5a:dd:79:5a:10:46:a7:bf:cb:
c6:4c:2b:10:06:ce:64:06:cb:a1:9c:b4:8e:79:3b:
31:f8:20:a6:70:45:cf:f5:f7:7a:d0:38:53:86:1d:
47:a9:14:84:b1:09:22:b9:c0:46:3e:bd:8d:4f:fe:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9A:FD:8E:EA:A1:BA:DA:E7:A1:1C:5E:EC:31:EE:A6:CA:A4:4B:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.57.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:d6:34:10:e3:e4:70:4e:07:e2:ad:11:46:6f:c9:e5:5f:00:
1a:d4:f4:a8:cc:59:47:b8:74:66:29:1c:76:38:1d:6f:48:bf:
f4:ed:58:ce:eb:86:f6:ba:21:b1:9c:30:61:1e:23:72:9e:21:
77:d5:0b:47:e9:0f:60:46:fe:ee:be:f0:88:06:dd:85:23:75:
6a:67:83:e4:22:df:d0:fc:7c:e3:6e:cd:fc:c0:a3:42:80:25:
84:49:89:ea:04:7a:8c:17:5f:ee:17:a5:8b:11:7b:22:da:c3:
cc:14:23:9a:2c:a4:3c:f8:f1:f5:91:75:b9:18:52:a0:1e:6d:
f7:e9:b6:01:c8:03:ff:88:bc:00:40:80:1f:b2:b6:b6:23:a8:
bf:25:3c:f5:97:24:38:c7:4f:9b:95:b1:49:98:85:33:25:56:
5b:24:8b:53:f5:90:a6:d1:d9:63:41:cb:dd:10:bb:38:a8:38:
85:4d:26:c4:40:e2:1b:9c:0f:d8:b7:8c:d0:6e:f9:b7:ee:ac:
f7:dd:ac:c2:fb:4d:7e:4a:83:ce:5a:d0:b6:6a:8f:5a:49:03:
16:31:f2:bd:ab:b1:d5:74:bc:3f:be:f6:cb:8b:dc:ee:18:33:
2c:2a:66:79:a2:d4:bd:10:ed:2a:dc:bb:b9:66:17:b2:e4:10:
52:0d:3d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:38 2025 by rpki-client