Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa
File: 625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa (raw, json)
Hash identifier: t7f5i6z6GddaBibS7O5yOx1v10jQ8LBHjbmmQ2U6DYw=
Subject key identifier: A7:A4:B8:F8:DA:0E:69:91:12:EA:64:B6:B6:A6:34:97:47:84:F0:1E
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848345570BE24BDB820B85AD500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 203
IP address blocks: 130.174.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:70:be:24:bd:b8:20:b8:5a:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=18d9f884-810d-499c-8f35-8aff7bebb164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:c8:d4:20:21:b4:ce:e1:52:12:c1:5f:f4:
02:67:c6:c7:93:e0:dd:12:bd:2c:5f:5a:49:19:ae:
7a:0f:53:ce:a8:1d:b2:b1:40:29:b7:47:93:a8:30:
7f:27:5f:ae:5f:f7:87:ad:55:33:3f:24:d6:02:e5:
62:e5:b7:a8:e2:6d:d9:ed:35:6f:b9:f1:61:18:f1:
ca:02:5f:29:07:ee:a4:43:52:ce:83:d7:00:bc:f9:
18:f2:67:70:97:3d:f4:d3:e0:82:78:c5:e6:2e:cf:
38:ad:33:06:5a:44:aa:1d:63:41:f8:d7:65:e5:f3:
19:66:f4:1b:52:2b:e4:b6:83:e6:6f:9e:2f:ff:b3:
73:ed:33:22:de:3a:1b:84:51:de:33:25:11:1e:e1:
c5:4c:b3:77:4e:d9:b5:c1:0b:50:6c:ee:85:59:f5:
2b:3f:3a:50:c0:69:1b:e9:a5:da:7f:e1:15:31:b0:
03:a2:61:0e:c9:f0:f5:15:60:9b:c4:8e:65:f2:1d:
01:e4:91:df:79:65:c1:d1:cb:87:b7:47:c6:2b:ff:
5d:15:bb:8e:96:88:7d:66:56:b0:6d:ff:d6:f8:6c:
3c:cf:c9:d5:5e:f1:20:ac:0a:22:3c:01:05:0f:6d:
22:e1:be:da:e6:f1:53:f4:43:b4:e1:5f:d7:6a:b5:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A4:B8:F8:DA:0E:69:91:12:EA:64:B6:B6:A6:34:97:47:84:F0:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.75.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:79:b2:7d:1e:cb:ee:8e:cd:3d:ee:e9:9a:46:25:b9:3c:5f:
26:22:d8:a9:be:48:5e:bf:95:e0:a4:8b:8f:b2:02:b5:22:cc:
1f:f1:1e:3f:4c:31:3b:d6:6b:f5:88:0f:64:6d:a2:2d:df:92:
8f:98:3f:b8:b1:a0:4b:ff:fb:0f:36:34:a4:26:16:24:be:40:
de:5b:0f:4c:f7:73:c1:be:c7:d9:3d:a3:ba:67:f2:f1:c0:87:
cf:9a:77:d6:cf:9b:36:1f:ff:1f:a6:35:9e:da:13:86:9f:f2:
43:fe:b5:f3:07:06:ad:a5:b4:3f:96:6d:74:88:c2:a1:a3:23:
f7:45:be:9a:ab:55:d7:06:a6:33:a1:f0:4a:95:15:46:c5:a1:
df:c9:de:13:f9:b3:53:0d:f4:ce:8c:86:3e:c7:90:f6:96:50:
53:2e:f9:67:dc:f8:48:0b:ce:5e:23:91:e4:d9:2f:f9:8e:79:
fa:70:68:1d:81:ce:fa:55:7c:8e:b7:c9:d8:7a:ef:91:1e:13:
ea:87:aa:e3:34:aa:1b:27:ea:d9:c8:b6:69:4c:1d:0d:e0:ba:
55:98:5e:da:9d:69:81:03:8f:d8:04:56:f8:ab:76:1c:d6:f1:
d9:e1:dc:be:cc:62:a0:2e:88:91:74:fe:dc:63:b9:e3:3f:50:
06:31:c1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:37 2025 by rpki-client