Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fd6e49d-0052-3d4d-985f-60128f453034.roa
File: 0fd6e49d-0052-3d4d-985f-60128f453034.roa (raw, json)
Hash identifier: 6pOo3LPI50FNMRcJnq30TD2bVznw3QTTthaz7sfbzkk=
Subject key identifier: B9:BE:0D:B4:FB:D1:63:5A:6C:8D:D8:BA:0E:C0:E8:3D:0A:C5:FC:A5
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848345571E0B5287E609DCD7600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fd6e49d-0052-3d4d-985f-60128f453034.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 203
IP address blocks: 130.174.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:71:e0:b5:28:7e:60:9d:cd:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=582e3124-7773-45e6-b0d7-2e0651435b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:13:a7:d6:5a:7f:7b:23:d6:e9:25:f9:3e:
7d:b7:62:a1:36:36:9f:a2:f2:3d:40:ab:7c:9a:46:
e4:c3:0c:29:01:95:9e:fc:08:73:ea:a7:01:8a:11:
92:ec:4a:89:ad:ba:a4:34:11:4d:e1:ee:f2:85:7b:
f7:9c:4a:1b:83:b7:a3:5f:6c:39:fb:8e:17:45:78:
a4:11:33:6b:a3:36:65:f1:6f:5b:b3:13:cc:09:a2:
1b:3c:66:c9:3a:2b:7c:89:59:1d:3e:29:9f:27:b0:
2f:97:b9:9a:c3:67:2d:fa:72:f9:07:ca:f5:20:e4:
da:91:44:2c:8a:01:46:15:94:f3:86:1b:2a:44:7d:
12:3b:5c:9a:f0:fc:d8:9c:84:5e:ab:68:29:50:41:
20:7a:f9:f2:e7:77:80:92:7d:bd:62:9b:02:5d:a9:
66:5a:ae:d4:0d:ce:69:d1:40:c6:08:5e:84:9e:02:
67:48:ff:55:1c:81:45:b0:af:42:b1:a7:2a:da:00:
16:fa:8d:f1:67:18:a0:52:4b:9f:ef:34:f8:e3:f6:
c3:fc:18:cb:66:44:ce:6c:61:b9:ea:99:f9:6a:e1:
75:6b:39:f2:bc:02:19:7f:f2:24:77:74:f8:66:5d:
dc:65:5a:8e:0b:e2:cf:8c:7f:08:48:9f:54:6d:cc:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BE:0D:B4:FB:D1:63:5A:6C:8D:D8:BA:0E:C0:E8:3D:0A:C5:FC:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fd6e49d-0052-3d4d-985f-60128f453034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:23:5c:a2:65:35:1f:32:ad:9f:1f:bf:ef:4f:1f:32:30:62:
04:71:a5:9f:f5:dc:3b:68:68:f7:05:55:ff:df:dd:af:00:d0:
aa:2a:9f:f6:16:b3:c9:53:bb:0b:3b:86:ca:e3:cb:ca:69:09:
3d:97:f5:17:c9:91:88:5a:79:11:e8:eb:1a:18:c3:41:4c:6a:
1c:8b:21:e5:d8:b1:9c:99:53:41:c3:7b:10:f3:8d:95:6d:42:
df:08:f9:d2:aa:83:dc:90:c2:c1:bd:c3:ec:56:91:4b:03:85:
1e:33:07:75:7f:99:69:01:70:13:c5:bc:03:d3:b3:38:20:cd:
a5:3d:88:66:5b:92:23:43:0f:b1:cc:d0:e3:7c:fe:2d:1d:67:
c7:8b:9e:25:5f:7c:7e:3e:68:71:9d:ba:9b:0d:2f:e7:37:ee:
7f:70:47:07:aa:ef:e1:a7:80:83:36:a7:7e:f4:20:07:44:69:
12:a7:53:16:90:af:e9:83:74:bf:51:e2:fa:1b:6f:f8:47:f6:
6b:bd:d7:dd:52:f9:9a:b6:5e:fa:be:01:d3:82:9a:df:44:60:
84:7e:6e:d6:b3:6b:98:26:14:bc:cb:0e:5a:be:6a:b8:08:fd:
63:cd:4d:e3:1f:0f:7f:bb:4f:6d:2d:a8:1a:42:c6:8b:90:46:
51:4c:8d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:13 2025 by rpki-client