Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/336b5740-37b8-3799-952c-a5a74c6dcffe.roa
File: 336b5740-37b8-3799-952c-a5a74c6dcffe.roa (raw, json)
Hash identifier: i8U2XxSdr52hVhPAsFEtGTV5Xd6tx6WVbt+VA+fbu1g=
Subject key identifier: 8B:61:FC:98:4F:29:9D:E9:33:F5:5E:CE:4F:88:4C:74:40:FA:FE:09
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F03AAD9E5EB45F76853B20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/336b5740-37b8-3799-952c-a5a74c6dcffe.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 202
IP address blocks: 130.174.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:3a:ad:9e:5e:b4:5f:76:85:3b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=65dc8e23-50e8-4cb5-bd0b-78dfcd16e154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:54:c7:9e:b6:fb:75:d1:52:12:f3:83:fc:
ec:b7:38:f1:32:d7:82:5e:11:96:12:de:c3:55:47:
79:62:6a:f8:97:87:b1:14:24:6c:8d:17:a0:b4:9f:
2a:c5:f4:82:00:40:b2:60:97:ef:eb:d5:35:21:c5:
e9:f4:ad:a9:83:0c:fd:07:0e:91:5f:6f:92:76:91:
68:3f:36:02:95:42:3f:94:57:e8:b0:08:6c:19:b9:
32:34:f8:02:4e:ab:38:8e:18:da:57:a7:08:35:5c:
2b:77:f3:d5:4e:95:65:a5:a8:e1:0f:e9:8b:2b:d5:
ef:31:15:4c:6a:45:0c:c0:d3:89:32:39:d8:57:23:
34:02:bd:04:4f:4b:63:03:ca:52:dd:65:81:21:06:
97:03:24:b3:e2:99:7e:43:7d:e9:cb:fb:50:73:59:
b2:09:71:45:cd:01:13:36:34:df:79:f8:1f:c6:ca:
92:47:66:43:46:43:b9:93:27:53:c6:e4:ca:78:c0:
64:a1:c0:66:ea:1e:4b:82:64:f9:5c:f3:56:6b:39:
51:70:75:99:b9:62:bd:a2:d0:3c:8b:8c:14:99:58:
55:cf:94:9d:ab:4b:2e:6d:4b:d1:2e:2d:a0:b6:ce:
79:a8:b7:8e:e2:b0:17:4e:8e:73:df:bb:29:a3:e7:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:61:FC:98:4F:29:9D:E9:33:F5:5E:CE:4F:88:4C:74:40:FA:FE:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/336b5740-37b8-3799-952c-a5a74c6dcffe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:04:fa:cf:42:ad:b3:8c:c7:21:9a:3e:61:5b:88:4f:55:fc:
fa:b9:58:98:2f:03:e8:a1:96:7c:69:60:bf:85:fc:7e:39:f6:
ae:12:6d:03:92:77:f4:69:8c:6b:4e:90:a5:70:4a:56:a6:96:
21:21:27:bc:1b:1c:5f:3b:99:5e:63:0a:a2:0a:88:f0:24:7e:
66:ce:16:66:b5:f1:9c:64:11:71:14:ea:e9:6d:09:4d:fa:ea:
3d:3b:29:ad:ce:e7:84:31:c1:67:fa:84:cb:c0:d2:46:49:17:
10:38:32:9b:58:f9:89:2c:6a:1a:ea:08:d7:0e:08:1f:bc:f7:
85:23:3e:c6:6c:0d:cb:ce:0f:f8:ef:1e:d5:a2:e7:33:64:2f:
4c:19:3a:c1:29:3d:a1:12:6e:f0:b6:42:71:76:97:27:d4:b9:
5b:9a:8f:d7:26:28:dd:84:07:93:7f:71:86:20:eb:c3:89:33:
43:a0:50:43:00:66:fa:25:7f:cd:a7:97:3d:95:9f:ca:81:d8:
9e:e0:15:47:df:85:a2:74:9e:ba:89:12:89:97:4d:a4:9e:f3:
7c:7d:9f:ff:5b:ef:5d:f1:d5:3f:c3:d1:b3:8a:06:c0:cf:42:
ae:8d:d1:ef:24:1a:06:5f:ac:35:be:5a:6c:84:59:74:ae:88:
9f:54:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:46:04 2025 by rpki-client