Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a31774e7-446e-3499-8a50-32d75dcc77d7.roa
File: a31774e7-446e-3499-8a50-32d75dcc77d7.roa (raw, json)
Hash identifier: /1fLkeOI8dnHfMw83WdZ4EgV2aFQ6kyqQ4VWyxqhm8U=
Subject key identifier: 69:E5:C1:E0:68:D2:6A:F7:D0:88:B4:F9:3A:95:99:44:CA:3F:FF:A9
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285847DDEC848F750EBB968528CD80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a31774e7-446e-3499-8a50-32d75dcc77d7.roa
Signing time: Wed 13 Nov 2024 15:10:09 +0000
ROA not before: Wed 13 Nov 2024 15:10:09 +0000
ROA not after: Tue 11 Feb 2025 15:10:09 +0000
asID: 3356
IP address blocks: 168.87.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:ec:84:8f:75:0e:bb:96:85:28:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Nov 13 15:10:09 2024 GMT
Not After : Feb 11 15:10:09 2025 GMT
Subject: CN=05e941a3-53e1-4e56-9ffb-956d9deb1483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:97:58:fd:6f:69:b0:64:cc:fc:e3:c1:f2:
5b:e0:1f:0c:68:83:33:d5:33:d0:84:bb:8e:a9:8f:
46:a9:7e:93:03:09:13:69:e9:c2:d8:fb:d4:66:6a:
f7:09:8a:2f:92:d7:48:a3:75:fc:54:d3:2b:07:fa:
2a:30:88:f6:11:21:1a:74:3b:c5:ae:d6:7a:0a:e0:
4e:7c:97:b6:b4:e7:5c:d8:e2:09:5d:a5:64:36:7c:
7c:b5:40:6d:5a:f9:5c:cb:14:8a:3e:77:1a:76:5a:
fa:64:0d:68:a3:dd:f1:60:45:45:3a:46:47:25:d5:
34:ec:81:90:a2:50:d3:67:e8:3b:bd:ca:a3:d2:fd:
70:65:69:8c:74:0b:70:f9:9f:af:34:44:28:41:7e:
a4:54:59:98:bf:30:28:81:67:fb:2a:e7:88:a7:8a:
1d:77:1a:3c:b9:5a:e4:f6:ad:15:e2:5d:f0:43:b1:
99:e4:9d:5c:13:87:62:30:76:2c:00:b1:37:9a:b7:
66:92:a0:93:c3:a8:ec:39:7a:27:fe:43:e5:58:7a:
a9:2a:bc:9f:9a:4f:b8:ed:f7:3e:d8:ea:32:9e:c8:
47:8e:9f:c8:16:30:91:93:ac:db:ae:33:84:65:6e:
cb:16:bd:54:4a:ed:40:4a:48:cb:af:92:83:eb:69:
79:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E5:C1:E0:68:D2:6A:F7:D0:88:B4:F9:3A:95:99:44:CA:3F:FF:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a31774e7-446e-3499-8a50-32d75dcc77d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:9b:08:17:a4:a3:93:bd:6d:66:24:e9:45:63:4f:5f:e8:51:
fd:f9:8b:f1:98:c1:7c:e1:81:d8:83:49:0c:d9:4b:77:65:61:
b0:88:35:48:10:9f:8d:bd:c6:06:7d:0c:c7:a6:f6:7d:4f:a3:
2a:74:7a:13:87:d2:6d:47:ba:4f:f1:97:5a:6a:d4:fe:d9:b2:
e6:c4:24:34:30:2a:01:47:c5:b4:13:11:e2:3f:eb:42:2a:70:
d3:ad:cc:70:c4:58:bf:f7:50:e5:a2:43:ef:e1:54:59:c0:12:
ba:d3:bc:b0:24:da:95:0f:fc:e6:c4:54:e0:0d:9b:b2:70:5d:
4f:65:1e:d9:35:78:69:17:36:95:09:6b:05:42:6e:a0:71:d8:
e5:0e:c6:29:64:65:f7:43:52:ef:18:cb:a9:ba:c4:a7:f7:cd:
51:b0:f3:e6:f7:f5:ed:85:22:4b:50:1f:d3:8b:68:8d:82:e6:
6f:3d:9a:90:35:b5:5a:96:ef:55:10:81:bd:fb:e4:dc:7d:d8:
be:f0:80:52:e6:a2:81:d2:14:05:7a:31:c9:d2:a8:32:f0:ee:
72:f3:71:73:4e:73:85:8a:4f:f3:38:76:3b:83:85:2f:d2:10:
72:fa:d2:09:aa:73:92:c4:07:38:83:eb:23:2a:d6:92:ca:25:
09:5d:1c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:17:24 2025 by rpki-client