Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa
File: a080b260-2012-373f-9010-a38709b84ea4.roa (raw, json)
Hash identifier: 2GSff/EQJNoqAKBVTdKxs04D6+HThE9txxRF9iEUvF8=
Subject key identifier: 00:F3:31:52:3D:E1:00:DD:87:BE:B9:1E:5E:88:D3:8B:97:2D:8E:D0
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F01F0770F014259DAB1980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 202
IP address blocks: 192.208.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:1f:07:70:f0:14:25:9d:ab:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=9d7ce679-2924-46fa-92d2-f48452b23fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:59:11:7a:c3:b8:1f:5c:13:8b:9e:ef:5a:
f8:cd:5a:a9:4c:5b:f9:bc:93:21:91:e3:76:ec:18:
14:6a:db:13:73:74:ed:1e:30:a8:0c:01:62:5d:d2:
2a:a4:d0:36:82:b6:73:79:9c:28:2a:a9:62:7f:4a:
f7:38:dc:eb:7c:c6:91:2b:8c:4f:68:06:8c:51:2d:
be:bf:05:de:b1:b5:a5:5c:d6:5e:e9:9a:61:13:a9:
29:7f:a2:9f:d6:be:ff:b7:27:50:3f:ff:00:29:2a:
9c:2c:db:df:08:57:25:34:7b:fb:98:7e:d7:58:50:
66:e6:23:f3:3d:b6:27:ea:e5:58:14:00:ab:cf:e2:
12:cf:65:c0:73:45:93:3a:1c:b6:0f:dc:c2:42:a6:
ad:d0:82:88:de:c5:5c:b3:45:1c:7e:40:8d:27:a6:
13:ef:59:a0:ca:9b:5a:02:68:23:04:37:66:92:59:
91:1e:e8:f0:09:16:b2:a4:1f:07:21:c1:ca:f1:cc:
30:59:46:69:cf:fc:dd:46:d3:72:7e:c7:32:60:10:
2e:c9:d2:e9:98:52:50:83:be:95:62:7e:87:73:fb:
a7:d9:1c:a5:e7:1d:5a:7d:b2:da:42:e0:54:12:a9:
a2:8f:c0:67:30:35:11:da:f9:a4:e5:8b:fc:e5:99:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F3:31:52:3D:E1:00:DD:87:BE:B9:1E:5E:88:D3:8B:97:2D:8E:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
192.208.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:52:b9:3e:cd:9d:c7:66:ca:48:f1:a0:fc:66:fa:40:ec:fd:
fa:ba:71:b9:24:a7:0c:81:93:2b:a4:f4:a4:35:8e:f0:c6:2f:
8e:c4:32:03:32:54:bf:1b:4d:d7:ba:15:af:5b:5a:12:4c:0e:
74:24:e1:80:02:7b:49:32:e5:99:25:6e:64:7a:61:40:01:76:
c9:d2:1d:d8:18:2f:5d:94:ea:27:50:3a:57:37:76:a3:f8:f8:
1e:ff:77:0d:d5:15:09:26:92:64:a9:f2:47:71:bb:be:3b:65:
e8:ed:7c:2e:29:10:fe:3b:17:7b:4c:22:61:c0:35:a1:6b:52:
81:e6:7b:37:93:3f:a3:54:a9:46:25:9f:40:d5:ca:20:a9:6f:
49:1f:61:31:c5:d0:b7:6f:c7:09:c5:f4:c2:af:e6:13:55:8b:
00:49:bb:53:47:a8:41:14:36:24:e4:ae:1a:03:a6:b5:6c:72:
71:64:37:5d:df:ed:7b:64:54:65:bc:ba:3c:ed:9d:31:22:81:
1b:14:63:e0:d2:c0:99:7e:19:92:ec:37:40:c2:c9:a0:5d:87:
e2:44:27:17:9e:f3:f0:c8:2d:ee:37:7f:0f:0a:c0:a2:12:3f:
84:2f:8d:a1:ff:9e:c9:13:b9:6a:4b:e3:cd:ba:fd:c5:6d:40:
cb:94:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:16:59 2025 by rpki-client