Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/303db212-0e6c-33fd-9b3f-8ebb3865217f.roa
File: 303db212-0e6c-33fd-9b3f-8ebb3865217f.roa (raw, json)
Hash identifier: vsRfnNbrXaMPm8CwOpJaz9eGXWm+uhcHyVvnaL6WNzM=
Subject key identifier: 6D:36:5A:75:46:7E:1A:B7:6A:E1:94:2C:B7:4E:EA:36:06:CF:F4:8E
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584865303A5624CC1DBFC2FEAF70
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/303db212-0e6c-33fd-9b3f-8ebb3865217f.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 3360
IP address blocks: 168.87.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3a:56:24:cc:1d:bf:c2:fe:af:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=952d8eb0-1d18-4159-88b0-7248bf97f9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:03:97:2f:90:4c:1c:79:4a:f7:f3:80:11:
d3:9d:52:fc:e2:b0:58:36:76:bc:b7:a0:4d:d7:dd:
92:61:b4:c6:df:ca:cb:81:92:11:6b:9c:4f:e5:db:
5d:ec:0e:c6:36:42:1a:7a:87:23:92:ab:22:1e:14:
b6:b3:1a:ad:cf:6d:c8:c6:15:14:06:97:0e:e7:21:
87:09:ed:55:c1:64:89:21:52:00:4e:ca:df:99:81:
1b:33:e9:c3:f6:8c:4e:65:4c:39:f9:e9:b7:e2:93:
8c:ab:99:a2:08:1c:18:ec:f2:72:8f:79:04:77:d4:
81:33:e0:90:0e:4c:8f:8b:9a:c9:48:35:74:fb:e3:
e3:13:8c:e3:b0:3a:18:0c:10:de:ad:50:18:29:d5:
a8:30:60:9f:48:4d:83:f8:30:65:0c:99:8a:86:25:
35:02:36:29:51:34:1e:f4:2e:94:c0:4b:62:64:66:
90:dc:7d:50:6e:e7:fe:59:83:17:f3:cd:13:f1:9e:
60:c1:4c:ae:d1:bf:e8:05:e6:84:bc:c0:92:90:21:
4c:4a:63:b8:be:72:17:50:6e:7f:b8:2f:cf:a8:01:
b9:cb:ca:a7:c9:2c:97:1d:82:c4:c9:aa:42:ad:bd:
3e:be:0e:e7:56:b8:2f:f7:8b:11:d6:01:f4:31:d7:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:36:5A:75:46:7E:1A:B7:6A:E1:94:2C:B7:4E:EA:36:06:CF:F4:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/303db212-0e6c-33fd-9b3f-8ebb3865217f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:04:dc:11:85:81:bd:df:9e:f1:c7:41:56:82:50:b3:65:d4:
03:5d:bf:ed:5f:59:c1:e4:98:60:51:f9:7f:c4:e5:6d:ec:c6:
4b:0c:d6:61:3d:e1:e5:96:fe:fb:30:e7:37:05:7e:0f:65:15:
99:b8:bf:15:57:11:5a:31:03:c5:46:b6:60:a2:5d:3b:13:4b:
ad:12:1b:00:16:45:df:01:37:9d:c9:52:71:61:ce:7f:5c:21:
34:5a:83:d8:2a:31:22:22:22:5e:b6:2a:e5:40:ce:01:00:2a:
61:a5:b7:ef:d9:95:e1:53:99:cc:24:c8:21:aa:33:a2:dd:94:
ae:8f:8a:89:4d:5c:15:df:70:d8:c3:d4:ad:3c:8f:6d:1a:8a:
48:a1:f4:aa:f7:a2:77:f8:fe:89:d5:83:d0:ae:ed:bc:05:eb:
1b:6a:1a:98:75:ed:20:b9:4c:66:1b:ef:d3:85:c6:15:94:af:
a2:83:67:05:70:b2:69:53:76:18:6e:fc:a9:b1:9a:28:10:7a:
60:3d:aa:ec:63:6e:43:4b:9d:99:7b:f6:77:f6:25:9d:0b:65:
0c:40:49:43:c1:5d:bb:39:56:a0:6c:41:56:03:8d:cb:6f:1e:
66:3b:c1:62:01:87:62:41:c2:60:31:39:81:0f:7b:63:61:cf:
4a:ab:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:00:21 2025 by rpki-client