Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a05c6a3-0c65-3f34-9648-8864d7b21030.roa
File: 1a05c6a3-0c65-3f34-9648-8864d7b21030.roa (raw, json)
Hash identifier: CfIafQLBTHwcu//guMr1zKgwQhtU4dC+4sSRWshShCE=
Subject key identifier: 61:E8:CE:B3:C8:A3:17:D9:F2:01:43:35:C0:01:7D:FB:E2:D3:8A:6B
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285847DDECCC9D895E82439B7B1080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a05c6a3-0c65-3f34-9648-8864d7b21030.roa
Signing time: Wed 13 Nov 2024 15:10:43 +0000
ROA not before: Wed 13 Nov 2024 15:10:43 +0000
ROA not after: Tue 11 Feb 2025 15:10:43 +0000
asID: 203
IP address blocks: 168.87.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:ec:cc:9d:89:5e:82:43:9b:7b:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Nov 13 15:10:43 2024 GMT
Not After : Feb 11 15:10:43 2025 GMT
Subject: CN=1d56807f-b33a-4904-8ea9-8a5084093c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:86:c9:85:60:8b:29:e2:2a:a7:28:48:7d:e4:
2f:11:6d:13:39:f1:08:a4:51:75:03:2e:80:43:c7:
78:d0:95:88:30:13:c8:42:e1:0e:d0:d1:d6:78:4c:
9d:4a:30:0d:4c:00:32:a8:7d:3b:d6:5b:bd:61:f9:
fb:91:11:a6:00:51:6d:b2:2a:86:3c:9e:d1:35:44:
a1:4a:40:43:b4:a7:cc:35:9a:e5:34:3a:b3:76:9a:
40:38:aa:e8:82:dc:3c:ce:4e:39:fa:4f:f5:44:40:
5b:dd:16:e3:4b:3a:96:1a:1e:ce:43:66:55:d7:ed:
e7:00:bf:d8:e9:86:e6:55:71:d0:6f:41:5d:33:b9:
2b:3b:a2:e5:48:8a:a0:eb:37:a9:e7:78:5a:cb:b7:
2e:6c:42:f1:ef:28:74:57:89:1b:62:93:14:bd:93:
d5:10:be:cd:b7:b8:3c:6b:7f:b3:7c:75:bd:76:b1:
4b:c2:a6:df:43:90:a9:41:b4:8d:df:d0:5f:48:a6:
4e:4a:81:5a:42:af:28:9e:5f:cd:e7:9b:b9:c9:e6:
d1:e0:ea:b9:e9:03:1d:cc:39:f4:cc:de:db:cd:5b:
22:2d:72:77:3f:7e:a2:63:7f:7b:47:61:a5:a4:56:
0e:5a:f3:25:7c:48:71:d4:a4:fe:47:e0:87:0a:9f:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E8:CE:B3:C8:A3:17:D9:F2:01:43:35:C0:01:7D:FB:E2:D3:8A:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a05c6a3-0c65-3f34-9648-8864d7b21030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:aa:8f:3a:e0:78:5e:0b:79:e5:be:f0:af:bf:aa:2a:f5:05:
39:05:ab:1b:31:0f:2b:f7:87:61:cd:1a:f0:f5:4b:8f:47:04:
98:03:51:21:f0:3b:36:3b:6c:e0:7d:ff:ca:be:f3:81:8e:35:
23:20:07:07:40:27:56:65:12:ad:40:80:05:b8:4a:57:c9:98:
85:3b:2e:61:85:71:35:ef:6c:f1:b7:eb:3a:15:d4:64:d3:73:
c3:80:fc:4b:29:f4:47:b9:59:b6:b2:c7:c9:f5:4c:5b:15:87:
29:3f:94:ed:58:4a:fd:2c:d6:b3:fa:8f:ad:dc:3c:3a:46:b1:
e5:80:ce:f7:3d:4c:5c:29:ef:7b:7c:1c:9a:31:e1:a5:15:a4:
ee:bb:6e:bb:6e:57:ee:e5:b9:b1:9d:f4:9b:fd:07:f5:80:75:
1b:97:94:08:5f:29:43:95:ed:21:86:ee:fc:c8:40:7e:fe:f2:
bc:f1:a3:ae:b6:b1:96:3b:2e:ef:17:2f:75:40:ae:d2:08:34:
10:f6:d6:92:b5:93:3c:a9:dd:13:07:d2:af:73:67:e6:6a:66:
94:d4:9d:33:e5:b1:7a:12:43:e6:45:b8:ea:c8:f5:c2:fb:28:
10:b8:97:00:3b:0d:60:b0:83:28:f0:bb:8f:5d:78:d7:4b:ba:
01:0f:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:53 2025 by rpki-client