Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf76233-3c6d-35f7-8a9d-4b108593331e.roa
File: baf76233-3c6d-35f7-8a9d-4b108593331e.roa (raw, json)
Hash identifier: YACdhvezjd9tKeaYaGcnHdu5dCa/rVYpuSInOA/sHvY=
Subject key identifier: ED:8B:2D:35:DE:4C:E9:74:47:6A:2B:24:7D:5D:36:B1:14:F9:15:AE
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858485F9ADDB2A89675D5DA8F0340
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf76233-3c6d-35f7-8a9d-4b108593331e.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 168.87.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:dd:b2:a8:96:75:d5:da:8f:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=3021f58a-428a-4230-86d9-6ea0691ed65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:7b:47:2d:23:f8:97:d1:47:fd:ce:0b:90:
5c:ff:1c:95:9b:25:a1:b4:6e:4c:cd:5f:9c:0a:0d:
a0:07:20:f4:c7:5e:d3:7a:cf:af:38:c4:b3:2d:e5:
96:b2:82:00:6b:75:48:a4:65:e8:b2:a3:f4:eb:24:
11:43:66:9b:02:a2:f3:d6:4c:e9:09:43:53:75:9c:
91:21:5f:11:4b:1d:4d:1f:b3:25:77:5c:c7:6b:b4:
95:5a:f6:e7:e1:19:41:44:45:6a:dc:72:b0:2a:b4:
31:d7:d9:fa:05:6b:a7:db:ec:99:3a:5c:00:56:c0:
52:6f:3a:60:e4:58:5e:74:15:84:7b:90:8a:e0:7f:
c6:42:dd:96:8f:c4:30:5b:6f:32:eb:d0:aa:13:f4:
39:6d:c5:39:12:b9:00:bf:7e:d6:18:a9:e0:d0:9e:
ea:f3:0a:66:00:1c:9c:bc:19:4f:54:cf:87:eb:05:
c1:14:fd:2a:0e:6a:7c:1d:da:71:95:29:72:21:7b:
80:49:76:f0:0d:9e:03:e4:c9:0c:10:a6:e4:0e:4c:
96:d8:5d:77:1e:c2:e7:53:39:df:d3:d1:bb:73:24:
8f:dd:cf:e1:0e:af:24:8c:38:5a:02:4f:2c:1d:23:
7a:a0:bd:84:c4:fb:bb:d8:e5:00:0d:7d:37:56:b1:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8B:2D:35:DE:4C:E9:74:47:6A:2B:24:7D:5D:36:B1:14:F9:15:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf76233-3c6d-35f7-8a9d-4b108593331e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:1b:34:a1:f5:85:56:ab:64:e8:b6:26:a2:fe:15:61:a0:23:
1b:df:db:ec:87:cc:35:1e:21:5c:66:66:28:1e:36:1e:25:8b:
3f:95:b7:bc:66:54:e0:71:df:de:a7:3e:b5:f1:3c:b8:bc:23:
f1:37:b9:18:94:e8:65:10:90:9b:27:3f:42:81:4f:a2:1b:fe:
95:67:a5:0b:7d:f9:c0:e4:4c:dc:5e:e9:61:8a:ba:58:09:00:
e0:8c:fd:6b:68:c6:06:b4:cc:2b:b1:7c:56:05:b4:b1:fe:79:
71:18:4a:11:45:06:be:3f:52:37:0f:a3:90:37:df:b1:97:3d:
69:83:8a:d1:3a:41:c9:93:53:d2:ad:be:ba:92:02:e3:9c:77:
10:a7:6e:17:f7:ad:fc:2a:fd:92:1f:0b:ea:83:73:aa:a7:7e:
a0:38:d6:01:6a:a5:33:66:ba:ed:cf:78:ef:2c:9d:3a:41:ec:
5a:5b:dd:cd:0d:8e:ed:97:dc:ca:2d:f0:ce:2f:a8:d7:7d:d3:
54:27:09:e2:13:b6:66:88:16:c8:09:fb:39:30:c3:ae:a6:34:
91:8c:5e:fd:06:33:d3:a1:5e:de:2b:e4:a6:b7:dd:e5:d6:56:
3e:2f:fa:c4:6a:90:6e:c6:8e:63:67:2a:ae:dc:67:c5:35:d4:
cf:6c:55:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:36 2025 by rpki-client