Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa
File: 8b3890fd-1aa0-3cae-827e-1384e95466a3.roa (raw, json)
Hash identifier: QqKSK1Y80YvGREbHSOG9bzfslY3sheM/+Kxa3nmGAlw=
Subject key identifier: 3B:84:7B:82:0F:AD:1E:26:15:5E:5C:9F:30:DA:29:87:DC:FE:9C:FF
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858486695C80C38A83BFE1AAF8188
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 203
IP address blocks: 168.87.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c8:0c:38:a8:3b:fe:1a:af:81:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=0ed6db0a-3ec4-4061-abfb-5719822c8cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f3:d8:4d:6e:5b:a9:33:f1:dc:d4:11:1e:b5:
f7:29:5e:f6:b0:88:18:1d:f8:27:38:44:56:06:6f:
4e:51:36:7b:66:7d:77:5f:ea:58:3d:83:f3:f6:7e:
9b:be:28:51:8a:e2:af:df:e5:74:65:3f:bb:ac:52:
47:1f:fd:be:47:5c:ff:cd:a2:04:94:9f:6d:52:e7:
5a:63:0f:89:b2:fd:19:99:a1:df:d7:c4:fb:7f:93:
49:d3:e6:98:b5:7e:94:e3:99:f7:d2:6a:6d:af:05:
a2:b0:39:f5:78:b7:27:ed:b5:79:9a:5f:39:e2:67:
ec:46:fa:b3:80:f5:06:0e:8f:90:65:fd:1c:9f:d5:
bf:9c:cb:ef:4c:25:75:fd:ec:ba:59:f9:fd:c8:ad:
59:85:51:e3:8c:e1:97:08:92:da:e8:2a:95:7d:9d:
6a:ca:67:7b:95:a5:7d:9d:19:0a:24:1d:f9:cc:45:
57:78:55:1f:c2:fb:8a:8e:de:d8:94:d2:48:32:3f:
a3:d3:40:42:c6:84:6f:98:3c:20:c6:70:69:55:23:
30:70:e6:d5:f9:77:7c:b5:07:3f:0f:be:fa:95:74:
b4:d2:30:77:11:fc:b8:b7:9d:69:49:0f:cf:61:59:
88:e9:2b:78:64:fb:b2:69:bf:2f:1a:29:3a:33:6d:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:84:7B:82:0F:AD:1E:26:15:5E:5C:9F:30:DA:29:87:DC:FE:9C:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:ac:73:dd:fd:db:01:b1:5d:84:91:77:8d:82:fe:65:b8:b5:
22:c3:b9:0f:2d:b7:92:98:f4:81:5c:af:5d:f8:d1:fd:36:ef:
f8:5f:f8:b9:36:d3:46:9f:0a:91:32:32:56:8e:6f:d2:3b:61:
0f:1d:66:13:a7:b1:0a:2b:9f:e8:7f:18:66:89:8c:d7:67:03:
57:41:ab:ed:e6:8c:0e:c3:55:4d:49:a7:02:6d:ad:93:c8:c2:
25:db:83:8f:0c:5d:13:08:1d:bf:a5:28:3b:7f:aa:f4:b2:08:
3e:be:60:9f:ef:b4:40:2a:0d:3f:92:37:14:bf:ab:05:4a:11:
3b:30:1c:08:3f:18:22:76:6f:56:b3:b2:10:30:4a:fd:6f:2e:
05:8d:35:ba:da:dd:2d:47:79:57:3e:15:ee:c0:52:bc:26:78:
be:d4:f5:a3:c8:f7:be:3c:ff:79:b7:47:3e:c3:35:b2:45:49:
6e:cf:10:59:b0:00:47:a8:63:54:42:89:10:46:33:c9:7c:fc:
a9:a6:41:21:e3:4b:91:69:cc:aa:47:51:79:cf:7b:3f:90:cd:
ab:d4:f9:af:0b:4a:4c:4b:a9:07:02:c8:cd:f1:95:14:08:83:
38:90:a1:fe:69:11:87:9a:81:cf:41:16:6c:d5:62:fd:be:3e:
eb:f8:d5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:27:15 2025 by rpki-client