Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/223954b1-65ee-3d7d-95c5-183cd5e169ed.roa
File: 223954b1-65ee-3d7d-95c5-183cd5e169ed.roa (raw, json)
Hash identifier: Qc/h19T4cUknQ8/HTrss3b1RzsEJuaDjp450UCozR+Y=
Subject key identifier: 45:80:46:83:F0:06:C0:EC:1C:B4:5E:BD:96:39:91:CB:2A:81:52:2E
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F031A6AA3E18BA34450380
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/223954b1-65ee-3d7d-95c5-183cd5e169ed.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 3356
IP address blocks: 130.174.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:31:a6:aa:3e:18:ba:34:45:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=926eaaba-fc6b-4b4f-b407-14e69e99420d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:e4:2f:00:92:7d:f2:95:4a:0d:7f:23:eb:
c9:94:56:9e:50:65:24:9b:14:76:ec:3a:ff:31:8e:
32:0e:c9:9d:9a:c6:fb:71:40:32:2d:92:d1:94:fe:
f9:82:a8:1f:9d:50:d2:f7:ca:78:f6:2d:2e:f7:a2:
83:1d:2f:c7:22:0e:fc:25:db:8a:f3:6c:a3:77:27:
b2:f5:f7:fe:c2:52:19:24:57:5f:75:d9:8e:79:25:
7e:de:92:f1:90:64:95:65:de:35:e4:b7:c6:16:07:
a9:25:bb:31:a0:89:92:4f:51:e2:fa:34:f1:ec:8d:
e7:94:b0:d3:0f:d6:d4:6d:85:a1:ce:71:db:a4:67:
e9:c0:a0:43:90:ca:4a:ef:77:ad:86:94:84:ea:14:
3e:fc:9c:be:55:d8:35:2b:de:57:09:40:a7:b9:ba:
51:12:8c:6b:4c:54:f9:66:16:31:91:8d:80:e1:ed:
ad:a7:fa:85:f0:52:83:c3:d3:ab:08:b4:28:3e:9a:
b3:8f:15:3b:79:7a:54:73:57:e8:2c:fe:2f:22:d7:
ea:b4:fd:32:34:cb:e9:03:b0:be:00:ea:10:68:d4:
a2:ed:a9:e6:82:87:a0:49:bc:58:71:0c:f8:0b:3c:
ac:2e:7f:f4:9c:28:f8:ab:8c:30:83:cb:19:ed:ee:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:80:46:83:F0:06:C0:EC:1C:B4:5E:BD:96:39:91:CB:2A:81:52:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/223954b1-65ee-3d7d-95c5-183cd5e169ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:c0:77:48:a6:cd:45:d1:92:a1:72:83:3f:8c:98:49:af:80:
75:ed:a1:4d:aa:d7:f7:48:97:b8:a0:64:8c:ee:b5:01:55:90:
a3:3c:80:ef:f9:ad:45:4f:d7:53:c3:81:56:61:74:0d:c0:3b:
61:42:8b:78:c0:0a:56:f9:58:7f:b0:ad:44:75:43:ed:7b:2c:
aa:72:c6:c7:87:7c:f1:3b:fa:18:09:11:2a:78:33:fa:02:5e:
f4:ae:cc:e2:5e:63:e2:95:1a:49:c6:47:d2:5b:d4:ec:1a:2d:
da:81:29:d7:6d:c5:da:4f:23:00:83:c0:db:b2:77:b9:fa:e6:
73:22:9c:60:5b:bd:fc:56:5a:0a:24:95:d1:78:77:ee:92:41:
ac:87:0a:40:2b:94:82:c3:de:77:83:10:c9:66:fa:b7:a8:2d:
60:33:16:ba:19:79:f6:1a:c3:f6:5d:99:e5:b1:80:ae:7d:13:
86:6a:7a:91:56:5b:13:86:36:3b:6a:4b:16:48:d4:58:8e:c7:
6a:32:c8:30:9f:6d:a1:f9:66:02:24:ef:e3:b5:bf:8f:df:42:
37:fa:03:bb:6f:20:41:e3:51:51:63:c6:f0:3f:b3:5a:70:d3:
e4:21:eb:ac:5e:da:3d:e1:ef:f0:a5:20:14:4f:5f:f4:8e:f6:
a3:32:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:52 2025 by rpki-client