Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa
File: f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa (raw, json)
Hash identifier: L9Jz/12LknE9c8YvenUZcuoa6WjxND3tnfLB9ZNTh8g=
Subject key identifier: AD:23:8A:72:1F:01:D2:13:CB:24:0B:A7:48:92:1C:D5:43:2F:7F:1B
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858486695C7F1B33D361DEC10BF80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 3356
IP address blocks: 168.87.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c7:f1:b3:3d:36:1d:ec:10:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=eadbb5e4-c8be-411c-b69b-159e2893534f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:20:3d:ce:3e:15:3a:84:c6:9c:32:64:23:
c4:6f:95:ff:44:da:79:00:7c:b8:07:85:32:ce:ad:
7f:10:83:c2:e4:45:80:07:54:c4:9f:df:b7:5a:51:
f8:5f:60:96:c0:3f:c7:03:24:91:29:c0:01:48:a7:
90:3b:18:d5:e5:1a:d6:31:38:7c:1c:22:b4:57:00:
6f:ed:cf:c8:29:09:d9:a2:c8:2b:04:ba:1a:9d:0a:
bc:cb:73:c1:1c:30:15:d5:6e:3a:28:05:3a:ba:00:
2d:97:e3:6b:30:58:f2:d5:b1:2a:af:40:77:56:ac:
22:e8:4e:dd:93:1d:a6:f4:a9:3a:c3:5e:4a:b6:fc:
4f:b5:80:82:2f:b1:38:d8:b6:9f:23:07:ec:60:9e:
4c:09:d2:a5:be:1c:05:11:73:7b:1d:bf:b7:33:05:
07:cc:4a:cc:22:6c:07:db:93:d1:95:02:46:f7:50:
ab:40:a4:7c:e5:75:47:3d:4b:44:cf:68:05:74:17:
a7:74:e2:f8:24:fb:de:ce:30:5e:5c:8f:d5:50:f4:
24:f0:54:49:56:b8:c8:c0:10:85:b2:5c:e4:d9:bb:
2c:28:aa:c4:1e:47:9b:32:26:cf:28:ae:2e:e0:af:
3f:3d:83:0e:4b:33:07:d8:43:c4:b4:5f:56:98:a3:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:8A:72:1F:01:D2:13:CB:24:0B:A7:48:92:1C:D5:43:2F:7F:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f1f77be5-daf4-345a-99b1-f4bee4f839d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:5b:9e:1e:e0:90:6b:4e:72:d8:84:82:35:43:16:bc:df:02:
33:37:4a:dc:3d:9b:27:f5:12:da:59:1b:24:e7:4d:05:83:ff:
65:35:8b:e6:ff:a1:a4:e3:4e:98:55:a9:0c:2e:1d:b9:f8:0a:
19:5c:b1:d6:9d:8e:42:07:ff:3b:67:90:fa:45:01:5c:ec:fe:
c6:33:c8:29:f1:b0:e1:2b:20:cd:66:62:4d:aa:a3:71:93:c7:
dd:c1:48:98:32:9d:e5:3b:e8:4b:33:01:19:f4:0c:9d:b8:92:
95:d4:e7:2e:3f:3b:40:c7:97:3c:61:b4:69:e4:77:90:fd:c2:
36:87:43:87:7c:71:1e:1d:39:27:2a:7e:52:50:27:26:5f:5d:
62:b5:c3:21:57:ab:c2:68:c1:53:08:e8:3f:86:8f:4c:d5:b9:
82:3f:8e:05:a1:8b:73:00:a4:5e:71:84:db:4b:2f:5b:cf:69:
52:49:8b:78:ee:9b:1c:cb:2a:83:f1:89:64:45:2d:fa:02:71:
a9:cd:e1:0f:a0:5f:80:75:25:28:e5:64:80:68:f2:52:cb:4a:
69:89:88:4f:a7:ba:bb:70:c4:2d:27:c1:17:4d:a4:23:1f:fc:
be:76:0d:48:44:11:80:4e:95:ff:36:53:ea:d5:5a:e6:35:ce:
8b:b4:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:16:34 2025 by rpki-client