Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa
File: 3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa (raw, json)
Hash identifier: PRKjJSUtvgbjjyMUB9Q6fQADe+ugDyiz3M08vMP2Y6E=
Subject key identifier: 52:9C:64:B1:5B:BE:C0:46:9A:D8:BF:82:C1:FB:20:C0:13:81:D9:5D
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858487B85B3A2C4342183EDC2BC80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 3360
IP address blocks: 192.85.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b3:a2:c4:34:21:83:ed:c2:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=fdb9608d-4510-4148-b27f-31e665354049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0e:fa:a1:86:d4:b7:9f:c6:2b:1f:62:88:c8:
1b:16:1b:8d:48:ee:6d:63:7c:e2:3c:e5:00:92:43:
2e:44:63:02:92:ba:55:a9:40:93:c0:0b:28:0f:b0:
51:79:6c:8a:26:ef:a1:d4:93:01:d3:d4:83:83:66:
3b:ac:ec:4d:27:9c:34:18:dc:ec:51:88:69:85:6e:
4e:46:c7:13:fd:ad:de:8b:ba:ad:84:7a:38:30:8e:
82:53:32:69:51:56:8c:2e:b8:99:4a:70:a2:e7:a1:
7f:e3:70:bd:75:58:7f:c2:4f:e5:c8:71:91:7b:e4:
10:58:bb:79:4d:5d:81:23:52:69:74:4c:57:be:f4:
e5:03:8f:95:0b:a0:1f:df:c5:d5:31:03:c9:69:e8:
9e:93:bb:af:e7:55:0b:38:ad:af:fa:ab:28:fe:11:
5a:be:2b:0d:15:86:bc:d3:f2:f5:72:ed:bb:f5:16:
41:8e:b4:b8:08:d9:91:33:eb:fd:e4:88:55:37:4f:
ae:72:55:8f:41:d9:2e:44:56:83:cd:dc:f2:01:1a:
d3:47:e7:be:f3:fd:37:4e:da:16:7a:db:16:4e:34:
c9:79:39:ca:db:bb:91:71:92:c1:0f:0d:5d:1f:0c:
5a:5b:0e:b5:1f:5d:22:af:25:d0:22:d9:21:80:88:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9C:64:B1:5B:BE:C0:46:9A:D8:BF:82:C1:FB:20:C0:13:81:D9:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.85.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:09:38:b8:00:f0:3e:25:71:2a:63:76:1a:69:e2:77:a1:e3:
02:5d:08:b5:c3:64:17:b4:30:99:b3:88:d9:87:86:31:dc:94:
08:f0:42:be:4c:1b:f5:83:05:fd:f8:07:ed:60:90:e1:9d:95:
c0:f0:72:a1:a4:f9:da:8f:b5:73:0d:12:07:b8:70:fa:c9:af:
5c:82:95:5c:7f:23:6f:0e:b1:78:58:4b:c2:16:d7:35:e4:a8:
be:d0:0e:03:b5:f0:d4:9e:f7:5c:e2:c7:7d:fb:21:b4:b9:43:
9e:e6:df:0e:d2:ef:5f:9e:04:08:bb:24:1a:f2:fb:0b:f5:90:
53:c1:2a:34:8f:54:79:87:bc:31:0c:47:14:6f:67:d5:49:59:
03:27:d4:87:ca:dd:58:8e:3e:d0:11:4c:86:fc:06:20:8b:fb:
fb:b1:8a:dc:63:0a:d4:82:cd:a9:27:8f:28:84:27:18:6b:59:
f3:49:04:e2:35:12:cf:1b:4f:b9:8f:f8:fa:87:37:1d:d2:56:
4d:7d:ad:cd:1d:09:ca:db:b1:19:00:ad:2f:fc:3e:3e:41:a4:
4f:71:0d:65:f0:25:1b:b1:1d:c4:d3:95:24:32:01:26:34:ee:
07:1c:3d:22:f6:09:36:52:63:08:7c:7d:da:ee:7a:b2:cd:60:
62:a2:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:25:47 2025 by rpki-client