Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa
File: d285b726-e3ef-3abf-8761-d6f1f21f4450.roa (raw, json)
Hash identifier: SU+qnXJnbUsRmSdO0ts3u6h/rii4adrUlOEaDnhibb4=
Subject key identifier: 65:9A:27:80:B9:32:67:69:76:2D:41:0C:D8:AB:18:D9:4C:29:F9:CE
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285847DE1394BB152826F638919EC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa
Signing time: Wed 13 Nov 2024 16:28:51 +0000
ROA not before: Wed 13 Nov 2024 16:28:51 +0000
ROA not after: Tue 11 Feb 2025 16:28:51 +0000
asID: 202
IP address blocks: 168.87.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:de:13:94:bb:15:28:26:f6:38:91:9e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Nov 13 16:28:51 2024 GMT
Not After : Feb 11 16:28:51 2025 GMT
Subject: CN=a774e494-1e7b-4014-8512-fcdb11aa57bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:a5:4f:af:f0:01:31:26:b5:40:68:35:3f:
5b:80:99:d6:04:0f:c4:bf:4b:22:8b:2d:da:c2:06:
06:a2:36:de:8f:ee:e2:ee:75:c4:e8:db:92:98:6b:
5a:5f:3c:dd:79:08:29:d4:d1:58:bb:f9:fc:04:3a:
13:32:da:0d:ea:c3:1b:9a:4b:c4:85:1d:12:53:97:
f6:f1:87:4b:76:e7:d9:a6:a0:6a:98:48:4f:c4:bc:
42:70:d3:08:fd:b5:4b:62:01:4a:1e:cb:87:8d:13:
45:43:5c:e7:67:e5:cf:04:c5:f4:57:84:2a:8d:14:
15:54:17:79:ca:01:02:92:f1:03:ba:4b:e3:a1:d7:
89:b0:e5:25:d4:45:e7:7b:1b:ac:5f:f5:31:8c:6b:
61:85:fc:c4:d4:9d:86:d1:1c:09:99:dc:56:03:6c:
75:d4:eb:99:41:fe:25:0f:ca:89:dc:80:0f:77:75:
6a:b1:79:73:62:9e:12:86:60:54:b6:8c:10:79:ea:
8e:85:aa:e4:f2:ea:af:c9:0d:ba:46:e4:7c:da:99:
48:3b:d8:ed:77:80:3d:bf:29:db:a4:f6:cd:fa:c1:
b4:1e:9b:62:a6:16:0a:22:8c:21:15:68:2b:12:e9:
f8:91:b1:b9:31:1f:a1:9e:3d:0f:40:af:bd:8e:c8:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9A:27:80:B9:32:67:69:76:2D:41:0C:D8:AB:18:D9:4C:29:F9:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:2a:d9:6c:3c:5a:10:74:ec:dc:61:20:f2:cd:3e:e3:e8:17:
17:62:ef:2f:39:c9:58:1b:c2:c4:3b:60:e9:8b:78:6a:fe:dc:
a5:ba:44:97:34:42:a8:c3:22:98:cc:8e:52:cb:b1:17:a2:24:
fa:85:d7:6e:7d:f5:d4:1a:44:2f:06:f4:12:6b:40:fe:60:a6:
d0:17:00:43:65:0b:b4:dd:aa:02:b7:05:2e:4d:34:38:d3:e0:
f3:c7:0f:76:a8:ed:d9:d7:55:2e:a2:cc:c0:df:fa:32:85:a2:
33:be:1f:01:64:fa:31:86:12:f9:fe:a2:9a:6e:6a:26:9e:ea:
48:5f:f3:3a:11:13:04:04:3e:49:2b:20:55:7b:df:5a:ed:37:
06:6c:7d:95:b2:e5:d3:ff:49:71:99:4e:42:7b:09:48:a8:46:
16:82:f7:79:a5:b6:fa:9e:e4:6d:a4:57:04:ca:15:22:84:fc:
79:73:0d:ff:fc:8f:e6:62:a3:fc:07:d7:d8:a0:fb:c5:75:7c:
86:82:fa:54:c5:da:2b:41:a0:88:b0:5b:07:ad:21:8c:45:10:
a3:2e:a9:02:96:e1:2e:33:ad:ac:96:6e:d1:a2:fe:33:f5:43:
89:19:79:2c:4c:d2:62:35:fd:32:aa:42:bc:80:a4:ec:03:fb:
4d:bb:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:31:49 2025 by rpki-client