Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8319cad4-82bc-3835-9262-ddb0e38ea921.roa
File: 8319cad4-82bc-3835-9262-ddb0e38ea921.roa (raw, json)
Hash identifier: kSNGUJ6/Cw8ZSC41V7D3dgorQCjigulYRzszEdlmFkQ=
Subject key identifier: CA:1C:B8:77:DE:53:24:63:5E:5E:0F:4B:50:C3:3F:AA:23:AD:FE:DA
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858486695C7A4AE96567742639B90
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8319cad4-82bc-3835-9262-ddb0e38ea921.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 3360
IP address blocks: 168.87.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c7:a4:ae:96:56:77:42:63:9b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=75418e5e-5aa8-44c5-a493-a9b803830911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:d8:f6:ac:45:50:3d:cd:53:fa:02:34:04:
1f:93:2d:16:63:fe:8c:18:01:ce:32:ac:91:8e:5a:
ee:0a:44:75:c7:d0:fe:35:f9:f5:38:eb:da:51:d3:
e8:0b:35:22:99:d0:75:f0:4d:46:78:d5:c6:76:d0:
75:1a:7e:f7:7a:2a:3e:86:22:09:74:14:cf:d7:42:
4e:dc:eb:98:f8:8b:ff:97:59:f5:00:de:eb:db:e0:
e9:17:24:4d:0b:04:3b:69:0e:92:b1:c1:59:f9:21:
62:10:b7:77:09:7c:ca:12:6c:d3:10:bd:b5:27:43:
93:fb:56:e7:55:41:06:08:a6:e5:70:1a:46:83:12:
bd:a1:fb:b8:95:57:9f:f9:69:67:76:59:f5:31:b4:
20:29:02:d2:99:46:a5:ee:3b:6d:3a:be:37:ff:3b:
37:2c:6b:0a:5c:13:77:17:f1:73:2f:20:f3:2a:93:
c0:97:9b:8a:5f:70:3d:8e:a0:30:15:79:10:ed:46:
65:17:3b:75:22:30:99:4c:58:0e:6d:05:ce:29:c9:
54:88:a1:19:08:8e:22:5c:3b:2e:fd:1f:dc:08:95:
04:0b:de:8d:f6:43:1a:73:1d:97:99:d0:78:7b:76:
d8:f8:54:2e:52:a6:4d:8b:66:2d:9d:ef:2d:55:2d:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1C:B8:77:DE:53:24:63:5E:5E:0F:4B:50:C3:3F:AA:23:AD:FE:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8319cad4-82bc-3835-9262-ddb0e38ea921.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:d3:32:08:4d:98:98:57:94:ba:c5:91:a1:ce:01:21:d0:7b:
05:9f:73:b0:f5:7e:c5:22:78:58:bf:e8:62:ec:4f:ef:5b:e0:
07:13:1e:30:fd:47:a8:36:4e:0b:3b:42:72:05:33:d1:16:a8:
df:2a:f6:9d:13:c2:a9:58:1e:fb:82:e3:9f:2a:4d:8d:e5:2a:
c8:29:5c:2f:e7:d8:c9:bd:18:60:cc:c0:46:9f:b7:8a:12:ad:
4a:e8:d9:a3:26:9e:0f:5d:cc:d4:44:14:de:e6:3c:d2:10:0a:
c4:99:44:ff:9c:0f:a8:78:13:92:59:ef:b6:0e:97:90:ea:82:
68:d4:87:4f:83:16:ef:df:30:6b:ff:44:5d:dc:52:bc:f0:98:
27:1b:86:b1:0c:58:41:61:0c:50:bc:b1:a2:13:0c:c7:82:36:
00:15:c7:9d:a6:34:87:d8:0a:c9:91:e2:a3:67:d4:e6:95:c5:
5e:04:49:42:83:31:ca:12:d0:e5:25:31:7f:c0:bb:dd:43:1d:
18:be:be:55:39:d7:1f:9b:f6:5d:dc:61:48:0d:70:fd:4b:f8:
f2:ce:4a:18:27:dd:80:4b:b8:d3:59:dd:7d:06:68:9c:bc:f5:
c0:bf:40:1d:aa:7d:96:bd:28:b6:0c:32:1b:09:eb:41:1b:64:
d8:6d:96:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:34:07 2025 by rpki-client