Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9acc2eda-1601-340e-81c2-c6d3c321ed38.roa
File: 9acc2eda-1601-340e-81c2-c6d3c321ed38.roa (raw, json)
Hash identifier: EBKtn590Rn+XR9/KUgILvlYpo0vNyY0F8ItUj7BVODk=
Subject key identifier: 33:BC:1D:D3:C7:35:EF:02:05:FE:4F:B5:1D:01:51:1C:DF:6E:96:30
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285847DDECA97DB2BB763EEB0EE180
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9acc2eda-1601-340e-81c2-c6d3c321ed38.roa
Signing time: Wed 13 Nov 2024 15:10:26 +0000
ROA not before: Wed 13 Nov 2024 15:10:26 +0000
ROA not after: Tue 11 Feb 2025 15:10:26 +0000
asID: 202
IP address blocks: 168.87.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:ec:a9:7d:b2:bb:76:3e:eb:0e:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Nov 13 15:10:26 2024 GMT
Not After : Feb 11 15:10:26 2025 GMT
Subject: CN=45e6c22d-4d3f-4473-8890-78ff7015566b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:69:91:f9:77:23:f0:36:b3:03:4f:f9:39:
e1:15:8d:1d:31:ac:e6:28:86:68:ac:4f:03:53:8a:
3a:79:b9:72:aa:14:dc:ee:a0:84:98:50:20:0e:98:
3d:39:8f:55:ce:c0:04:b9:e1:6d:6f:1e:8d:df:cb:
cb:2b:c8:db:fe:35:4f:2c:ed:32:f8:54:d2:97:9e:
d9:95:64:eb:2e:23:45:b1:c9:53:d3:9a:aa:11:df:
e7:7d:4a:5e:b5:24:da:07:7f:bb:5f:eb:4c:4d:c6:
cd:98:33:dc:3a:09:a2:00:8e:35:49:9d:62:c7:f9:
f8:ee:40:11:fb:08:25:90:f6:7d:87:a3:05:cf:06:
23:b7:14:83:95:03:39:04:f2:0b:43:29:21:66:2b:
5e:ce:a4:96:93:b7:ad:bb:cc:5b:37:c1:f4:ec:e3:
b8:bf:72:af:98:73:10:5b:43:6d:42:a1:8e:3c:b6:
3b:ec:e7:57:43:a3:d3:ec:31:53:a6:f2:1e:d7:84:
b7:f2:4a:c1:ca:d0:de:95:ca:03:a0:16:a7:ef:15:
f7:e9:e0:0a:83:a0:6f:8a:1e:0d:8e:53:50:d5:cc:
32:80:3a:dc:ae:ab:31:e4:11:df:8c:7c:72:f9:1e:
ba:d7:fa:99:92:dd:4e:f6:4f:1e:30:f2:0d:a2:cf:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:1D:D3:C7:35:EF:02:05:FE:4F:B5:1D:01:51:1C:DF:6E:96:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9acc2eda-1601-340e-81c2-c6d3c321ed38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:4c:aa:5b:8d:06:28:b2:0d:9d:38:a4:09:30:6f:8b:7a:e4:
a3:95:d4:7c:96:c4:67:65:e6:54:4f:3c:6a:98:14:ce:a7:f7:
b3:31:b4:63:12:66:ca:8d:1e:ce:3a:0d:1b:e1:65:6a:32:74:
9c:be:23:7c:a1:f5:c3:fb:7c:f4:a3:31:4a:0f:cd:f7:38:75:
a0:e2:8e:a0:a4:92:63:51:cf:43:ae:5b:d9:35:fb:e3:26:ff:
ec:ba:d9:c6:af:9a:43:1e:19:9b:e2:2e:db:82:52:ad:52:a3:
3a:ee:e3:b9:c0:23:1a:fc:be:a4:4c:83:7c:c2:5d:0e:db:0f:
b8:18:a9:5b:48:29:0c:78:de:67:ba:fa:f4:ab:a4:37:75:72:
1c:2c:ba:8f:83:87:f5:40:86:57:fd:23:f1:d0:58:2e:25:c2:
40:4e:69:13:46:f2:99:f1:4d:a0:67:8a:60:1c:b1:cb:2f:5a:
bd:e3:db:69:17:6c:a8:8f:6f:68:8f:38:6e:aa:e7:c8:05:be:
e0:74:6c:a8:35:59:48:7e:79:5c:e7:fa:c6:c5:26:80:1d:a2:
07:6c:18:fe:c5:75:f7:dc:88:df:a8:cc:4c:00:6e:d0:1f:28:
75:b7:40:ad:c8:dd:12:d0:f9:49:15:be:93:75:56:52:fb:f6:
77:41:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:06:12 2025 by rpki-client