Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa
File: 47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa (raw, json)
Hash identifier: U19mdXeFn6Z8geLvP7aBYun1gJOK1zKkN9ueJ6tqG98=
Subject key identifier: BD:65:C4:CB:3B:E6:97:DC:8F:BB:AD:0C:E0:DB:C7:B5:3D:2A:C4:F7
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584883E5C99F92161E62C49BCB00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 203
IP address blocks: 170.30.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c9:9f:92:16:1e:62:c4:9b:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=f58cd37a-12e5-4246-86d6-25a350fd21a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:ad:5a:94:22:94:8d:b1:e9:06:aa:b5:39:
db:c3:16:6c:49:25:40:ba:4f:94:b3:62:15:ee:b5:
4d:21:c7:1d:1e:b3:0c:81:27:a0:a8:48:54:f1:92:
98:e4:a7:3f:a1:e3:89:21:e9:cf:d3:93:a6:96:e6:
ac:39:27:99:8c:44:cc:41:15:13:bd:29:ec:b7:eb:
2d:b2:a5:f6:e3:f1:ca:82:ff:54:41:cb:2f:f5:45:
63:f9:c6:84:4e:f2:02:ee:99:67:06:a9:30:28:ae:
8d:e4:65:29:1f:3c:d3:d6:ce:c1:da:54:cd:84:50:
7f:25:58:c1:9f:9c:34:ab:87:7c:93:a9:5e:8b:ed:
af:cd:47:f5:6f:9d:38:95:1b:98:88:6f:7d:cc:25:
35:89:89:07:10:2a:01:18:8c:d3:15:ab:f1:12:75:
d2:08:30:e2:41:8e:75:53:17:7e:89:67:b3:39:bf:
5d:6f:9d:c8:eb:db:d5:13:bc:f3:d3:70:d6:84:dd:
98:0f:19:86:7c:bd:84:0b:d0:bd:57:bc:67:45:05:
76:0b:a9:09:b1:da:f4:85:5c:1f:00:49:d7:9c:38:
17:48:91:68:63:17:70:2c:1f:e0:a9:35:94:86:8a:
10:37:e3:3d:b2:b0:e4:cc:83:01:73:9d:ca:a2:49:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:C4:CB:3B:E6:97:DC:8F:BB:AD:0C:E0:DB:C7:B5:3D:2A:C4:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
170.30.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:d5:d5:7d:9e:8d:ae:72:79:9c:0f:d5:ab:b1:ed:7c:65:18:
33:c0:a5:ed:f2:19:fe:d1:e2:e0:f5:96:9b:8c:34:a6:23:7d:
df:14:97:3d:85:f3:ab:b1:a4:ca:2d:38:3d:2d:cc:0b:90:07:
d7:34:22:1a:f9:2b:82:0a:93:90:a0:ab:75:e5:c9:e0:68:d7:
36:12:71:ef:1e:d2:84:b8:a7:37:a4:fc:09:30:37:74:37:1c:
c3:7a:03:08:08:46:74:ec:08:12:15:61:91:c1:ff:00:8a:64:
82:9c:6e:f6:51:6c:8f:cd:3a:3b:2b:1a:ed:f9:3e:41:af:5f:
e7:85:a4:05:35:19:b1:14:6a:27:fb:f3:b5:15:ad:91:a4:f8:
24:02:6a:46:f2:29:1f:e8:a0:d4:26:46:e2:23:1d:e1:1e:77:
f9:07:99:47:84:7f:fb:7f:12:17:e2:13:5e:e6:06:da:52:64:
68:2e:d9:5e:ee:c3:d3:21:cd:4e:af:fd:b3:ae:dc:b0:b7:29:
92:a7:13:d3:52:36:4a:a9:a5:65:ba:bf:22:8f:31:66:13:76:
ab:f6:e4:81:30:55:36:c6:d7:6a:17:94:e5:ae:96:1c:8b:22:
80:bd:d6:22:b3:7a:db:57:dd:72:d6:42:a4:b2:a1:2c:c8:b0:
54:55:57:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:49 2025 by rpki-client