Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfce70a6-ea5e-3841-b180-fedb11670175.roa
File: bfce70a6-ea5e-3841-b180-fedb11670175.roa (raw, json)
Hash identifier: t0Yx90bqpl7Q6ZcpDLUHb0dv5p/AAVU5h3XPg2Hxr44=
Subject key identifier: E6:0E:74:21:97:CF:CD:C4:55:CF:C6:E2:DB:A1:F3:63:8B:46:48:3C
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F023C4AAB6F1B7F00E0980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfce70a6-ea5e-3841-b180-fedb11670175.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 3356
IP address blocks: 206.164.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:23:c4:aa:b6:f1:b7:f0:0e:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=64c0909d-2b04-47ad-9efa-f61b3f1aaada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:64:4b:1d:c1:7f:d8:40:e0:b7:7c:f4:e4:
5d:6f:ca:df:73:68:f4:af:b4:6b:35:f6:26:80:fb:
b3:9f:ae:09:b4:a5:df:d0:d0:9f:74:26:e5:f6:55:
9e:4a:ea:e6:06:b1:76:ee:9d:8d:3c:1c:07:16:55:
75:45:a1:eb:b1:8c:11:99:b4:03:4a:ff:db:37:74:
4c:2d:9c:5d:a8:94:a2:46:fc:b3:60:80:eb:af:62:
e2:b1:97:fe:37:be:5f:d1:1d:a0:12:30:af:7b:6f:
15:cf:1f:da:05:e6:94:f4:34:79:6b:88:04:ae:28:
5f:50:4b:58:6d:cf:e2:45:85:5e:92:96:56:4e:b4:
0f:f0:ca:89:b8:dd:0f:49:9f:c8:10:a7:17:9e:56:
40:6a:46:bd:31:66:dd:e5:ae:ed:30:9a:50:c7:f8:
c9:e1:a2:72:b5:e3:d6:25:b1:c1:68:7e:b4:e9:8a:
a0:b8:54:3b:95:72:53:7e:ee:43:9c:8f:31:cb:18:
87:ce:2c:16:49:96:87:48:0c:25:53:94:5f:58:4d:
74:de:b9:89:63:1b:75:9f:16:f4:b9:3f:0d:18:bd:
1d:58:f4:37:cd:48:16:42:5b:9f:a5:c6:d4:00:d5:
79:1c:d7:67:44:19:ba:28:56:c7:b0:a0:7f:b2:4e:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0E:74:21:97:CF:CD:C4:55:CF:C6:E2:DB:A1:F3:63:8B:46:48:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfce70a6-ea5e-3841-b180-fedb11670175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
206.164.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:f2:68:f8:eb:29:b9:2a:3e:72:07:49:3c:22:ad:eb:97:1e:
41:01:30:78:81:a3:31:30:8d:45:8a:b0:72:8f:b5:89:14:13:
36:9c:06:75:70:ec:f1:e5:07:23:f7:1c:d5:c1:33:a5:ad:57:
54:49:80:01:c7:f5:08:d3:a4:de:da:c0:e7:87:c2:0a:13:2c:
06:ec:9a:e3:64:c8:f4:27:10:0b:f3:dd:14:ad:21:38:22:1c:
6f:ab:e7:c3:a0:33:f8:76:33:9c:7d:e2:e7:6a:1e:ed:18:d4:
15:20:7f:61:9d:ca:24:77:c8:69:d4:56:c1:d7:17:71:0c:32:
8e:4e:09:3f:3c:f3:69:cd:e4:5f:9c:c8:15:8f:bd:b6:25:74:
6c:7d:9e:e6:04:c1:53:75:05:d1:7e:99:c4:66:95:e7:53:70:
f4:eb:68:d8:2b:38:58:64:9f:e0:29:95:da:fa:28:48:82:96:
9e:f3:22:a2:9a:7f:18:7f:a6:b7:89:81:a1:55:7c:3e:5e:8c:
31:c4:99:4e:23:01:40:fd:27:a3:d7:a1:c4:d6:71:ee:a8:23:
11:63:4e:b0:f6:f7:aa:f2:24:63:ba:c4:64:48:9d:0a:e2:14:
b2:a2:4f:f9:15:7b:6f:2a:d1:08:e8:da:99:96:6c:8c:6a:ee:
af:73:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:42:29 2025 by rpki-client