Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35d6e188-30dd-33ac-a7dc-46e588dea154.roa
File: 35d6e188-30dd-33ac-a7dc-46e588dea154.roa (raw, json)
Hash identifier: KjxoniV+bcLoecp08xma8RQ82T81o6eFT0LmwQUN+gk=
Subject key identifier: 74:54:5F:08:A5:D9:A8:B6:B6:C9:96:72:B7:13:8D:EE:48:31:0E:CF
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F03770BEF6502DE8534EA0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35d6e188-30dd-33ac-a7dc-46e588dea154.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 202
IP address blocks: 130.174.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:37:70:be:f6:50:2d:e8:53:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=9120664c-0693-4722-a819-d5129676a5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:0b:24:46:54:3f:04:92:78:94:55:11:88:
5d:a3:cb:2d:a6:c8:9d:98:05:b9:17:a9:45:ab:ef:
df:76:c1:fa:4d:f9:0c:95:9f:2f:d2:22:0e:98:c6:
ec:d7:4a:4b:59:05:e7:b8:4b:c2:c8:c9:fe:85:59:
5b:07:e8:3c:33:f1:a3:9e:75:12:28:87:8e:23:62:
6f:22:65:70:e3:ca:d9:29:40:d4:77:90:be:d3:8f:
88:cc:a9:f3:a3:2a:86:d3:e3:8c:0b:b1:4b:9d:83:
06:a2:ba:6f:e8:b5:67:43:02:05:a3:f3:bc:1d:44:
f8:ea:17:cc:33:32:75:b9:f3:42:8a:d2:bf:52:34:
f1:09:d7:e8:44:41:5d:d9:c9:b4:c9:7a:71:f7:04:
35:74:8b:f9:2d:f5:e7:39:66:f9:04:b9:54:45:14:
fc:9b:24:29:e3:a5:81:99:1b:e0:fa:f9:bb:95:cd:
f4:9d:e9:58:42:83:b7:ba:56:85:dc:26:12:17:c8:
c8:e8:71:de:e0:1c:d9:0f:38:68:c6:e7:79:50:53:
1b:27:f1:d1:cd:82:45:7a:01:15:05:26:9d:d8:af:
0b:f7:de:df:9c:90:6b:2b:35:2e:6c:77:8f:90:a8:
4c:65:90:e6:79:19:cc:42:b3:55:a0:e0:d5:a7:aa:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:54:5F:08:A5:D9:A8:B6:B6:C9:96:72:B7:13:8D:EE:48:31:0E:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35d6e188-30dd-33ac-a7dc-46e588dea154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:33:ed:36:d4:90:79:c4:c1:94:40:13:0a:25:d0:e4:85:d6:
5f:47:2c:d3:8c:91:e9:0c:f2:3c:e9:a4:d3:87:8d:48:54:b9:
71:04:83:32:69:4e:82:b5:12:fc:73:b3:f1:aa:7f:18:53:65:
f6:2f:7e:5a:08:d6:12:dd:91:bd:52:46:52:40:e4:28:6b:5b:
86:4b:05:9c:b2:9d:ef:5a:c2:7e:0f:80:73:c3:ad:01:86:4b:
e8:8b:d9:d1:93:74:db:8c:a0:e1:5d:f6:82:a6:ca:c4:a2:80:
14:b5:ec:a1:66:7b:c0:72:a9:f3:f0:0d:ce:22:d4:57:09:34:
30:e6:56:d0:9d:9e:c3:b9:58:69:cd:dc:a1:b8:67:6b:33:7a:
de:a1:9c:c9:df:e1:50:2f:16:89:f3:82:87:83:dd:fe:38:43:
e8:b7:e7:d4:f4:b2:84:00:c2:ca:53:85:a9:96:a2:01:98:07:
d9:f6:3c:ba:87:c6:8c:48:56:97:c8:1b:4b:1e:d5:63:de:9a:
0d:65:79:be:41:f7:45:08:30:f4:d8:5a:0e:12:40:c1:1e:48:
6d:ac:fa:11:a9:64:17:eb:fb:0f:69:73:76:92:3b:e3:f3:19:
6f:1c:3f:08:52:9d:96:d5:8f:a9:ed:0c:4b:a9:ce:b6:2a:2e:
a5:ec:2c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:37:46 2025 by rpki-client