Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31b1ec2c-a28a-3204-ab8c-63b2836a1719.roa
File: 31b1ec2c-a28a-3204-ab8c-63b2836a1719.roa (raw, json)
Hash identifier: nKFnXgsKdpOogeKckID0FKZ1n2/nKQQX/BToEsY7JJU=
Subject key identifier: 46:3A:CF:C9:D2:D5:77:EC:97:BE:44:24:D4:AF:AC:12:9D:5A:1E:21
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F02ED151CAE1FCC8CCA500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31b1ec2c-a28a-3204-ab8c-63b2836a1719.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 202
IP address blocks: 130.174.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2e:d1:51:ca:e1:fc:c8:cc:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=a2f9a5cc-92f9-45e8-a204-c2a51cee12e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:1d:43:84:9e:0e:78:78:ae:4b:28:f4:5e:
c7:f6:91:28:d1:0f:ad:44:3a:18:63:98:3c:de:15:
50:79:d5:e9:7b:2e:30:b7:65:04:07:16:80:75:f5:
be:b9:54:d1:5c:d8:8c:f8:e1:70:1a:0a:fe:e7:20:
05:81:d5:55:a9:d7:13:fc:1f:69:7b:30:a6:bb:28:
a3:ea:e6:c9:fb:2c:d0:e8:22:0b:0c:3b:44:f6:91:
ee:24:b3:5d:10:24:f8:14:48:9b:2e:77:80:a0:7f:
b0:e7:ad:b5:05:07:1b:f5:0e:bf:4e:14:8b:f8:b5:
9e:f1:0a:bc:63:c2:fa:40:71:fe:34:bf:41:5c:6b:
75:0d:bf:c5:82:d4:9c:d7:d0:d6:bb:df:18:98:26:
9f:76:6d:9e:db:73:08:34:f7:d7:c9:ee:bc:b1:8f:
aa:5e:31:03:8a:f6:46:32:16:11:31:5a:72:8a:5c:
64:46:82:39:19:d5:83:ef:6d:f3:91:18:78:95:dd:
65:43:3e:eb:a7:63:c2:55:04:07:9d:6c:b0:11:5a:
8a:9f:fc:61:6a:69:34:90:19:a3:c5:be:9d:da:42:
16:8a:e9:d6:9d:f1:b7:82:76:21:e7:59:ee:bf:48:
23:68:9c:77:d9:08:35:a9:b4:07:64:95:3c:72:9a:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3A:CF:C9:D2:D5:77:EC:97:BE:44:24:D4:AF:AC:12:9D:5A:1E:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/31b1ec2c-a28a-3204-ab8c-63b2836a1719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:55:8f:1f:1d:72:c0:32:ce:3e:b2:0f:46:23:ac:4b:5e:32:
ef:80:8f:30:74:b4:81:d4:6f:ae:8e:cb:0a:01:01:47:dc:5f:
65:f1:77:b0:7e:21:b6:8f:bc:89:90:23:b0:a2:5f:d8:f2:33:
66:f6:a9:8f:25:25:6e:d7:4f:6d:19:33:31:2d:a2:4b:bc:30:
90:08:53:ff:36:29:bc:46:2b:d5:ad:aa:1d:59:0a:9f:e2:c5:
95:a2:05:6d:3d:4e:74:8a:2d:0d:32:86:88:a9:c4:a1:9f:08:
0d:24:59:b6:ff:d1:2a:81:db:b6:7e:ea:15:92:38:ad:7a:b7:
84:09:c3:e4:b5:ce:15:e8:93:2e:be:ec:07:43:1c:ab:95:84:
a6:d4:b3:1c:38:b6:e6:e1:5b:93:71:2c:d5:52:59:f3:44:c3:
12:90:64:4d:e0:b5:4b:0a:4d:5e:32:52:2a:e2:a7:1f:95:5b:
62:2d:35:6c:5a:09:1c:3b:ca:2c:97:b7:0e:56:27:29:5c:0b:
a1:74:99:e3:6f:5e:73:a3:58:26:94:5c:95:de:54:58:bb:b1:
a4:f5:30:65:86:1b:f9:ab:ea:4a:ed:fe:d5:00:5a:6c:3e:5f:
f0:86:6a:ca:e2:c4:2a:f5:df:0a:75:8e:94:e2:34:9f:d1:a7:
a4:f3:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:01:36 2025 by rpki-client