Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9cf65e0b-1c98-3ca4-ada3-becc25696d2f.roa
File: 9cf65e0b-1c98-3ca4-ada3-becc25696d2f.roa (raw, json)
Hash identifier: zgLYpDEWmBw6fsey44wyfxEYjyvyvexTfAY6txQzK8A=
Subject key identifier: 2F:52:FE:14:1F:DB:63:9B:58:0E:3D:E9:A5:86:47:0F:72:44:B1:8A
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F0379145A2FB7160E313C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9cf65e0b-1c98-3ca4-ada3-becc25696d2f.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 202
IP address blocks: 130.174.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:37:91:45:a2:fb:71:60:e3:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=b65f9600-5a4d-4375-9a13-4c2632c917c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d3:e0:ca:55:1e:4d:5b:57:1e:0d:cf:a5:0d:
3e:b9:cb:12:98:4a:a7:43:30:e7:64:08:9c:4c:2b:
20:15:1c:47:7c:c5:08:b8:67:08:61:e2:6a:86:44:
30:75:86:17:d3:d1:bc:26:13:8d:ae:19:e7:d4:b1:
ff:d4:03:5f:93:3d:13:71:99:f3:8b:c1:71:ab:44:
62:7d:3c:e7:23:93:a5:13:a9:2c:af:80:09:6d:b3:
14:3f:ac:c0:10:a4:0d:d2:df:66:6f:55:3e:e3:90:
b1:72:c5:5b:ac:a6:92:2e:46:0f:fd:99:17:16:4b:
23:62:00:b0:f6:f6:b1:c3:60:18:79:89:39:18:a9:
47:03:d2:73:67:7f:c5:d2:7d:e9:83:93:fa:c5:1f:
a7:bd:68:1b:a9:a1:27:12:7d:28:bc:f5:b9:0d:d6:
b6:ae:a3:83:6d:42:e0:f1:8b:a8:1c:d1:55:1a:f2:
40:f8:bf:57:d4:17:54:41:ad:47:70:a1:67:56:72:
88:3a:e4:a0:57:20:15:e0:32:63:c3:a4:18:18:db:
68:a5:ca:51:b8:fa:53:c2:aa:1c:c9:24:2d:86:9b:
39:9d:90:3c:0a:82:c7:07:a7:a0:98:ba:7a:b7:e3:
78:f8:18:ac:79:1d:9c:4d:f5:77:36:c4:9c:79:81:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:FE:14:1F:DB:63:9B:58:0E:3D:E9:A5:86:47:0F:72:44:B1:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9cf65e0b-1c98-3ca4-ada3-becc25696d2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:f2:2f:86:c5:dd:a4:2f:67:97:36:92:92:61:81:b2:c9:82:
54:a5:56:61:34:d9:81:d6:86:6e:ce:34:3f:55:0e:25:7c:fa:
1c:54:c4:a4:5a:e2:52:6c:fb:a5:2e:b5:48:dd:a2:fa:00:45:
c2:5d:d5:8d:bc:32:dd:d2:55:5c:58:6d:92:71:33:92:73:29:
24:40:3f:9e:9b:c1:c9:dc:1b:04:29:bc:53:49:60:49:8d:4d:
85:2f:ff:3c:06:3a:ee:e8:17:15:e9:a4:e5:27:cc:6a:ec:43:
d5:5a:43:38:46:75:31:d0:21:cd:3c:d5:8b:fa:85:e9:e3:80:
66:6c:c3:24:09:82:31:8b:b4:4f:a9:33:ab:e8:e4:61:db:73:
02:6e:dc:d5:3d:c1:67:c5:e0:de:64:30:d2:30:a5:61:e1:8c:
6d:65:f2:3d:37:33:03:65:3f:1e:e2:8e:30:38:ac:e0:e3:2b:
7f:05:5c:6e:40:e4:7b:c9:31:bc:0e:93:90:8c:d1:90:7e:b8:
f6:08:0c:53:7a:26:bf:65:61:9b:d0:b2:3a:6c:1c:f8:fb:14:
8b:ce:90:ef:d9:46:d1:fa:83:1d:e8:58:da:13:04:2b:61:8c:
54:85:c5:07:68:75:74:72:b3:d7:d1:be:1d:ab:bd:43:51:d0:
cf:95:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:57:22 2025 by rpki-client