Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1bd9c3e1-67f1-3265-936e-81197290f1fc.roa
File: 1bd9c3e1-67f1-3265-936e-81197290f1fc.roa (raw, json)
Hash identifier: dLWDFFewEA1k5gtgl0UwmYtVewM3VoEQFIC+euDJbA0=
Subject key identifier: D8:25:1E:9B:66:02:C6:7C:DF:BF:6C:88:7E:AB:68:79:96:D6:AF:F7
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858480BDA5460A6E3081E4E704080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1bd9c3e1-67f1-3265-936e-81197290f1fc.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 203
IP address blocks: 199.42.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:54:60:a6:e3:08:1e:4e:70:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=86704d21-f4af-45e6-880c-3733e212cbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:66:0d:93:8c:67:66:b6:c3:3c:06:1d:a6:
f5:75:08:fa:c0:dc:09:4c:51:65:e2:37:5b:dc:e8:
25:eb:9b:21:a6:07:2e:f2:43:7b:34:0f:ed:d3:62:
2f:a1:ed:6b:83:8d:e2:68:55:d4:13:c2:19:bc:7e:
78:2a:2a:fb:64:bf:d9:f1:75:98:74:97:31:b0:c1:
74:18:82:f3:d1:fe:76:ab:d2:68:3a:be:f0:a3:0c:
58:1b:88:49:12:8b:14:62:2e:c5:1f:4e:e4:56:0b:
d0:3b:d7:99:57:16:50:59:34:15:17:33:cf:09:ac:
78:6e:a4:99:2b:c6:8a:4d:a3:c1:18:71:3e:06:e5:
c0:61:26:2b:6a:a0:4f:4c:a3:78:25:2c:d6:80:35:
b8:40:f2:ff:94:86:f7:76:73:3c:b8:0f:50:fb:90:
ca:3e:8d:08:14:30:68:f1:d7:e3:25:3b:32:33:11:
b8:6e:81:6d:47:03:6e:20:3a:2f:e1:6b:b7:6e:43:
bc:23:de:3c:d9:9e:fa:35:f5:1c:c0:45:3d:b4:0f:
5f:eb:2d:5f:36:04:f6:b6:0d:a1:ed:6a:1b:19:95:
0b:ea:97:59:c5:a7:4e:c8:67:49:79:03:82:5f:c2:
f8:73:ac:3e:e9:7f:c3:b2:db:7a:7f:c3:87:ef:12:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:1E:9B:66:02:C6:7C:DF:BF:6C:88:7E:AB:68:79:96:D6:AF:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1bd9c3e1-67f1-3265-936e-81197290f1fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
199.42.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:b3:d4:76:54:a9:1a:5c:44:3c:01:59:a4:a3:4d:d2:cc:cc:
f4:c4:53:dc:4c:cb:0c:01:fa:2b:62:cb:b6:ae:30:66:b4:02:
63:e7:7b:5e:0a:27:c8:38:4d:a2:d2:07:6c:51:78:19:c3:ee:
d8:67:39:26:c2:69:c2:b3:07:3e:f9:0f:7d:63:8c:2a:9f:7d:
c4:0b:7b:5e:5a:b9:21:23:d2:09:4c:29:25:28:d0:3f:11:ec:
9e:48:81:a1:09:01:d2:b0:29:74:d8:0c:ce:ed:8d:f8:d7:c6:
42:0e:58:0c:3f:26:0c:6f:20:1f:f7:56:88:df:0d:8b:e5:4e:
7d:bb:a5:27:b4:4c:27:76:34:5b:57:fa:2a:71:ec:50:22:b4:
3e:44:05:87:d8:8d:5a:24:2a:d1:ec:bb:f0:27:d9:88:7d:1a:
91:58:e5:1f:39:45:fd:7e:48:41:a9:8a:9c:29:94:07:60:04:
63:bf:ea:0b:cb:44:4e:c8:b1:23:e9:26:28:4e:e4:4e:3b:02:
46:23:9a:ae:9e:6c:c3:79:e3:66:94:4a:60:68:28:42:4c:3b:
cc:6b:93:6b:8a:f2:08:bb:5e:35:22:d4:cc:67:ae:74:fd:58:
c1:59:0c:b8:54:a8:07:3b:6b:19:30:53:22:06:d6:de:11:a4:
8f:d2:a7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:12:53 2025 by rpki-client