Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa
File: 2153d3a6-ecc9-349e-a08d-595348d99222.roa (raw, json)
Hash identifier: 5fR/XopZlOhyQ8Myykvq0C3/j9pR3/loXmvIoGC1+D8=
Subject key identifier: 39:6C:EB:2F:34:94:27:2C:F1:E8:FA:46:3B:53:BB:23:CE:20:CD:34
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584883E5C5CFC563B96626701D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 202
IP address blocks: 170.30.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c5:cf:c5:63:b9:66:26:70:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=35ade9a4-cd22-40f8-9232-a57e0a8d19fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:31:e5:8d:65:3b:5d:a2:55:73:1b:b8:ee:
1f:7f:b6:93:62:cd:64:0f:3d:2a:26:83:fb:d8:e5:
49:b0:20:16:64:26:6d:2f:52:00:dc:3e:b8:74:8d:
cd:9b:69:87:15:7b:eb:db:2b:77:8c:28:f1:d7:37:
5a:18:fb:9a:0f:61:e5:5b:51:23:dd:82:09:6b:75:
c7:5c:02:7c:99:a1:62:fd:e9:3d:7b:a1:6f:8b:b2:
8e:96:bf:fa:c6:46:76:4c:49:c1:23:14:60:57:dc:
de:05:5a:c5:4d:b0:5f:d6:f1:bd:e6:a5:4e:d6:80:
18:88:4f:ab:95:b6:2f:64:0f:cb:62:9d:c2:06:27:
26:58:08:39:ac:08:74:3f:8d:91:6e:83:19:0a:bc:
d7:f9:e2:ed:c8:7e:cf:9c:f9:9a:d6:fd:07:07:0d:
6e:b6:79:15:ea:e7:b6:0b:46:cc:3c:40:a7:90:f2:
98:4d:bc:ca:7e:ca:40:93:df:ff:21:c5:29:d4:fa:
84:6a:7d:89:2d:41:b4:5f:4d:62:5f:61:b5:71:73:
15:3d:57:86:dc:fa:a5:47:fa:6f:ab:52:52:03:88:
e6:9d:09:54:11:52:2c:59:1f:00:1a:0d:11:4f:45:
07:1b:1a:bb:5b:ce:d9:2d:9b:68:35:db:3d:fd:a2:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:EB:2F:34:94:27:2C:F1:E8:FA:46:3B:53:BB:23:CE:20:CD:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
170.30.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:d6:5c:99:f1:a2:49:b8:30:ae:47:cb:32:2c:3f:68:07:4d:
0b:a6:6b:81:96:aa:12:2b:e3:cb:bf:32:24:dd:c4:2a:fe:eb:
cc:e6:03:ba:3e:a0:d1:0b:a5:c6:9c:e5:b1:2f:55:ac:1c:02:
ac:cc:ff:c6:d0:9a:94:91:bc:63:a9:8d:36:b4:1a:5a:66:2e:
f5:cb:68:2e:d3:4d:73:48:6c:69:80:94:f1:14:e6:41:9a:64:
57:ea:c8:80:c3:2a:d5:25:cc:9b:64:19:7d:58:53:11:e9:61:
b4:b0:c9:7a:b7:80:d1:d0:95:2f:32:93:14:88:20:d9:c3:e0:
19:d8:55:37:5c:79:b4:3f:8e:1e:64:c7:a8:83:6c:50:69:ee:
28:49:3b:a1:77:5e:8a:78:6f:58:c7:d6:c0:a3:09:21:b9:86:
86:ef:52:04:26:91:80:d6:2f:cf:8f:db:dd:9d:23:2e:ca:2e:
8d:fc:8c:7f:82:a7:74:55:c3:3c:73:92:7a:57:2f:a5:c7:e1:
06:49:c0:46:d0:1b:00:ca:f4:ce:fa:c4:15:05:05:2d:aa:07:
80:16:b4:06:05:a2:d3:ee:e0:dc:90:73:42:58:52:38:1d:8b:
92:cf:cf:6b:76:39:b4:84:d4:32:06:3d:73:2c:2f:00:a6:8b:
14:40:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:23:14 2025 by rpki-client