Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d5be01-7c52-3c3c-9f1f-ec00f6d0c393.roa
File: 38d5be01-7c52-3c3c-9f1f-ec00f6d0c393.roa (raw, json)
Hash identifier: LoPOASNGS57EGjZwmNIlOLb18SrP0xr8GXySQtEWN58=
Subject key identifier: E5:93:9E:5A:B8:36:06:49:B5:91:46:6B:D2:FC:B7:BD:31:DE:F1:1D
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584834556B40813DF67186667100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d5be01-7c52-3c3c-9f1f-ec00f6d0c393.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 203
IP address blocks: 130.174.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:6b:40:81:3d:f6:71:86:66:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=1cb8cd3c-f142-4742-b345-435eeeee3b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:bb:bf:2c:8e:13:75:74:f5:75:93:65:a6:
72:1b:58:3b:fe:ba:f0:16:d0:b5:11:ae:9f:a5:42:
39:b8:b5:00:09:da:95:7d:d1:96:99:f0:f5:55:10:
79:82:14:38:8b:7f:50:ce:49:98:61:e4:dd:fd:25:
06:de:26:38:9a:c8:8b:04:ac:d6:31:0c:eb:0a:69:
a3:ca:72:7e:94:47:17:9b:4e:e3:e5:7b:bd:32:52:
1e:ee:4f:61:0d:f0:c1:26:7f:83:ad:c3:b8:7a:9f:
87:9f:6b:23:fd:30:d0:74:6d:a0:3d:db:15:2f:cf:
e4:7f:7f:24:2a:d3:02:3b:a9:a5:38:7d:e7:cc:45:
8e:a4:1c:cf:33:76:67:5e:53:7e:35:29:2f:3a:6e:
bc:ce:ff:0e:63:de:e6:29:13:57:f9:31:76:ae:78:
ff:2d:f9:19:dd:e1:29:51:6b:21:45:50:38:c8:ca:
64:de:cc:7f:f3:be:9b:fe:e3:9f:33:05:a1:47:07:
6b:52:0d:75:92:17:89:fe:7b:0d:bb:e8:29:80:85:
b6:11:8d:9f:18:92:c4:6a:74:3c:7c:40:bb:76:2d:
48:52:35:0c:ac:3d:3f:a5:80:2a:66:99:35:fb:dd:
ca:77:38:97:8a:b1:e6:29:eb:69:cd:b7:4c:34:f7:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:93:9E:5A:B8:36:06:49:B5:91:46:6B:D2:FC:B7:BD:31:DE:F1:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d5be01-7c52-3c3c-9f1f-ec00f6d0c393.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:0c:fd:6f:d6:28:2a:fd:34:26:9f:dc:31:4c:fa:46:1f:8a:
b3:17:bc:a4:15:f7:5d:02:d1:c1:92:f5:6b:57:eb:2f:38:f5:
c1:d2:f4:27:52:f0:ff:7f:aa:39:68:36:79:bc:d5:64:5a:ef:
48:f3:8d:77:61:da:b3:e3:25:de:36:77:cc:eb:fb:06:3a:05:
64:e6:42:84:7c:43:a6:dc:f4:9a:38:72:10:85:4c:89:7c:3d:
c0:84:97:5a:b3:1b:cf:40:7b:aa:6b:36:65:e9:b2:2c:65:30:
77:32:87:5f:2a:c2:61:6e:84:c2:93:ac:1f:85:0a:97:7b:a8:
17:17:c9:93:17:78:a1:dd:af:a6:6f:a9:21:9f:da:7d:9d:a6:
4c:87:22:76:ca:27:f0:4e:4c:d5:e6:42:a0:bf:60:8b:42:3d:
e2:c7:c1:a3:72:3d:9a:e5:d2:57:d1:e3:6c:34:15:b7:12:e4:
60:b0:cb:ae:c6:cf:5d:e7:5c:37:f4:d0:44:73:c6:92:00:27:
e5:ed:62:e9:71:10:ed:50:90:7d:32:c2:99:54:b1:ed:7a:cf:
4d:fb:38:a5:26:33:60:95:98:02:0b:a9:0d:69:03:50:7a:2d:
e5:d0:a8:c5:45:8d:42:af:24:10:7c:2d:60:7f:fd:75:c9:a8:
64:3b:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:46:10 2025 by rpki-client