Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa
File: d665c16c-aafb-312c-9ec6-e661450e6510.roa (raw, json)
Hash identifier: Z6X/yyVaGxNA1EY+En8Yjx8gF9+rezeCGfSl7fPFcUw=
Subject key identifier: 63:5F:A3:B6:2E:5B:67:73:AE:D0:AA:36:67:F8:AE:1D:81:4F:5D:72
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246CD3E8FFC1CFF5C9B9BB0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 202
IP address blocks: 206.164.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:cd:3e:8f:fc:1c:ff:5c:9b:9b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a79e7b00-9ad2-4e74-9d3d-3f91353f927f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b9:c7:99:d6:1a:4f:35:a2:fa:52:63:f8:03:
b8:0e:33:75:26:ce:89:47:dd:24:90:2f:54:f2:27:
d5:96:38:88:16:c5:d4:40:97:47:01:9c:95:9d:cf:
96:bc:54:f0:d1:3b:5e:c0:c4:4f:25:e4:34:a6:b9:
6f:2f:68:1b:f6:b1:21:29:b1:0f:82:1f:57:c7:71:
b2:65:3e:2f:85:58:04:03:05:fc:ab:95:e7:64:c5:
27:fb:c5:cd:c2:f1:7e:ff:e7:95:a6:6b:8e:2b:82:
19:d2:18:47:92:af:e2:e7:19:8f:2b:91:f3:a7:93:
45:7b:76:6b:71:2f:f5:ca:83:2a:24:17:cc:2c:05:
d4:a3:e9:3c:a9:19:1f:9c:b7:a4:60:3e:7f:48:dc:
49:94:07:3b:e2:25:a7:38:2d:02:7d:82:4e:84:1b:
45:95:a5:df:ad:bb:7d:80:c9:3e:f6:74:e3:86:62:
b2:71:fc:01:42:9b:93:b7:0b:e6:30:16:a3:8e:e5:
ac:85:99:d5:e2:a4:3b:a4:39:76:e5:db:f8:63:06:
ea:85:72:ac:02:d9:17:bb:dc:33:fd:1f:a8:e5:7e:
0b:83:b9:22:83:5c:b8:0d:08:d9:57:97:e6:36:d1:
4c:ae:98:b4:08:e6:d4:37:0f:f7:e0:40:32:c0:f5:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5F:A3:B6:2E:5B:67:73:AE:D0:AA:36:67:F8:AE:1D:81:4F:5D:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
206.164.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:95:b4:2d:8f:47:ea:49:fe:ef:d7:8b:53:8a:68:8f:53:7e:
47:91:24:67:9c:6d:7e:9b:ed:dd:69:fa:f9:a0:a8:c9:0d:2b:
e7:4e:6d:d2:b4:8b:ff:1b:dd:84:e5:84:be:86:e9:c4:3a:be:
ce:b7:33:c6:e7:3a:b0:c7:b1:0d:8a:d3:f4:12:d9:90:8a:97:
64:af:18:31:d7:df:eb:2e:73:20:af:f1:94:a5:35:52:0f:fe:
af:e9:ab:9c:fa:92:6c:3d:d0:5f:48:c6:9a:26:1a:2e:af:78:
fc:9d:6b:5a:6c:93:f5:4d:de:cc:c4:82:0d:49:dd:45:90:4f:
61:36:3b:59:e2:09:49:c2:10:7e:af:38:60:62:10:79:10:67:
0c:ab:74:a4:0f:c5:3a:29:ef:b0:d6:fa:23:26:b3:4c:46:72:
52:63:bd:95:41:b5:5d:b6:2b:7a:08:f5:a8:ca:6f:8a:bd:19:
b7:06:de:bb:7a:7b:25:40:b6:8e:30:2a:7b:37:80:f2:74:1b:
d6:eb:58:90:30:89:3c:db:ad:04:79:38:03:0e:b2:06:ef:ee:
b9:b4:b2:cd:99:f1:d1:71:b0:51:28:78:b1:a8:18:8d:c1:b0:
9f:95:e7:5d:05:23:c9:d6:c8:0a:29:fa:22:65:e2:b8:c7:22:
18:0e:ef:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:04 2025 by rpki-client on console.sobornost.net