Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f11817d1-a5e3-3030-8df3-8ad689cd1bd4.roa
File: f11817d1-a5e3-3030-8df3-8ad689cd1bd4.roa (raw, json)
Hash identifier: gdWqxSWo3F+7NrLcvSqr/tSt7G858TZ28MVec9wzfoI=
Subject key identifier: 9B:85:EB:9F:29:8A:F4:8D:AE:2E:AC:C8:EF:8E:D2:DE:EB:E3:37:06
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584865303A8F9C472AE790910AA0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f11817d1-a5e3-3030-8df3-8ad689cd1bd4.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 203
IP address blocks: 168.87.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3a:8f:9c:47:2a:e7:90:91:0a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=74a2523f-23f6-49ed-861c-2d42fbc3216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:82:7d:cd:e0:33:a4:c1:32:3c:de:7e:38:
c5:2d:cd:48:1d:b5:e8:2e:77:b4:c1:7a:e7:28:56:
43:95:2c:08:7d:a4:69:38:43:eb:53:91:56:a0:83:
b9:88:15:74:c1:3e:98:bf:66:43:76:46:24:c8:55:
a0:c9:08:c1:c7:a7:b7:fb:82:31:57:c7:87:78:e9:
cc:ed:35:d6:34:b1:ca:6e:d9:46:87:20:69:c5:a7:
4d:d8:8c:e7:73:22:4f:78:8b:06:26:f7:8d:7c:1c:
40:c0:66:24:35:3c:24:7a:cf:8c:de:11:b3:93:95:
d9:f3:d2:15:87:69:f3:00:45:c5:91:a2:db:64:71:
43:72:21:76:2c:4a:af:64:a3:3b:bc:97:31:36:b1:
e0:04:74:d6:d6:a2:c4:60:cb:34:d0:77:c5:ad:0e:
ce:1a:68:37:35:55:7e:fc:72:57:b3:42:60:1b:c8:
e4:66:1f:75:6e:ff:b0:c6:de:fc:ed:83:31:01:68:
0b:64:49:71:c5:43:a4:27:51:a7:1d:4d:e0:d8:31:
6f:9a:21:6f:d7:27:89:97:19:05:14:3d:41:98:93:
d8:da:ef:a9:89:d9:00:b2:0b:7b:48:cf:ce:f6:74:
b3:4d:1c:82:cb:76:3f:f3:06:3d:9f:b2:56:32:d5:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:85:EB:9F:29:8A:F4:8D:AE:2E:AC:C8:EF:8E:D2:DE:EB:E3:37:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f11817d1-a5e3-3030-8df3-8ad689cd1bd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:4f:c2:c2:6b:08:c2:78:c4:a0:cb:47:bc:34:6f:fc:94:bd:
6c:8a:6f:61:6b:94:42:1a:51:67:18:21:f6:01:2e:2b:95:55:
31:79:92:3b:1d:51:6f:25:6a:83:a5:65:42:64:f0:2c:89:96:
98:c4:63:97:e8:7a:53:54:18:da:8b:70:79:89:f7:86:e2:a0:
68:a5:35:70:fe:aa:80:77:52:b8:13:44:5f:48:91:2f:7d:05:
47:9c:0d:d3:36:98:8a:4c:fc:44:d8:b7:41:d0:a6:22:59:2b:
54:b2:77:39:13:ef:34:a2:2f:6c:1c:81:c0:b9:cd:fc:24:a9:
b3:1d:5f:f8:97:21:3d:df:c2:55:1f:9f:f6:02:ff:cc:76:74:
12:81:f7:ce:16:28:76:1d:e2:7e:9f:c5:b9:94:e7:ee:f9:3a:
d9:98:35:35:28:64:10:2f:20:38:b7:2b:53:bd:85:10:4b:69:
d0:b1:62:1f:c0:c7:04:21:cb:2c:2c:b9:4e:8d:92:73:e6:5b:
29:a1:ca:87:d0:87:7f:01:83:6a:7b:a6:fd:bf:99:eb:0a:83:
ca:60:ea:59:f0:31:75:9b:bd:18:52:ce:bb:e8:10:ef:ca:7e:
bf:08:5c:33:d1:88:87:14:03:d3:5d:9d:6c:6c:c0:a7:c0:9f:
69:b3:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:37:27 2025 by rpki-client