Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a026a2a0-d99e-3e1c-b85b-9cd3a7ab268c.roa
File: a026a2a0-d99e-3e1c-b85b-9cd3a7ab268c.roa (raw, json)
Hash identifier: CJotTf2nRfAjmNTCbP7z0CqwfR6P84Lrbr+4AbrcE0k=
Subject key identifier: 07:18:E1:80:8A:32:67:23:C0:B8:DF:08:88:4B:A8:66:E9:4B:3B:16
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F0371A972013AF686DA600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a026a2a0-d99e-3e1c-b85b-9cd3a7ab268c.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 202
IP address blocks: 130.174.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:37:1a:97:20:13:af:68:6d:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=2bdfaffe-2bf5-45d8-9b95-422b696c495e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:3f:be:fc:c0:57:81:40:91:ac:a6:cf:23:
51:15:9f:74:4a:21:44:cc:21:fe:46:98:ce:d1:61:
c4:64:9f:71:b8:58:f8:13:c7:1b:e5:cf:76:7b:c4:
44:e6:9b:5d:42:06:c0:0a:fa:83:50:b6:0b:30:d5:
96:7e:8b:a0:5d:d7:27:d7:14:37:d7:dd:81:d8:7d:
d3:91:af:6e:9c:9f:d5:55:96:a9:75:96:c9:96:7d:
7e:43:a3:3f:99:76:db:7e:d3:a4:f4:f3:cb:b1:b8:
30:47:91:92:3f:90:fa:3d:66:e9:a8:eb:5e:3d:de:
41:cb:5a:75:73:c0:b8:1e:4c:93:2c:d4:df:bf:e4:
80:c6:17:66:26:37:e5:44:33:40:9e:ae:6c:88:f3:
07:b1:28:ca:49:25:c1:61:10:aa:ab:10:82:2e:4c:
5e:e9:d2:dd:1d:7b:23:c1:23:ef:c2:d0:80:50:08:
0e:97:e7:2f:19:8c:36:ba:6a:cc:1b:8f:0a:e9:a3:
53:19:6b:b5:c1:39:4e:6d:c7:95:da:96:45:d4:de:
c7:66:bd:93:20:e9:f1:c7:63:2c:6e:35:45:dd:a8:
02:66:13:3e:e9:79:35:69:54:77:7c:2f:24:a0:a5:
c7:a8:38:b1:e5:93:6e:f8:30:5b:22:37:46:b2:0b:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:18:E1:80:8A:32:67:23:C0:B8:DF:08:88:4B:A8:66:E9:4B:3B:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a026a2a0-d99e-3e1c-b85b-9cd3a7ab268c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:87:cf:fd:ab:c1:0c:f7:eb:79:d2:c0:c6:68:54:e5:ba:87:
d3:14:ea:70:ba:05:9b:16:f7:73:c2:3f:cb:e6:50:8d:b3:1a:
ad:0b:77:fe:a9:84:d4:9a:63:c5:45:4d:46:7c:ea:9e:50:cd:
90:6a:58:ad:b0:ef:b0:1b:88:d8:4c:2d:46:b9:97:f0:4b:ca:
95:7a:8c:bf:26:8c:2b:8f:39:60:ba:e9:74:c0:01:6e:b8:10:
6e:06:85:4d:5d:37:70:26:c8:b6:62:96:fc:aa:fc:d6:62:55:
1c:d9:5c:0e:fe:f4:33:e4:b1:e2:06:cc:7f:9d:af:65:a2:23:
ac:b2:9c:3e:a2:36:d1:12:64:6b:df:f1:7e:e0:47:f3:be:62:
22:c1:aa:60:80:eb:c9:9f:5a:a4:a7:f4:3a:4a:6a:63:fc:46:
61:06:da:11:11:b6:40:5b:69:d6:c9:66:ec:9b:d4:fa:be:a2:
37:10:51:7d:e3:5b:1f:0e:ce:00:4e:47:fe:ad:b3:56:31:1d:
08:f1:91:b9:8e:cd:64:7b:5f:43:8a:f2:01:68:d2:57:d5:c4:
a0:9c:f8:ec:d0:37:9e:22:5a:08:be:3e:b4:6d:b6:19:a4:02:
fe:37:5e:58:d3:ba:b7:4d:68:51:86:57:94:06:ea:aa:3e:f7:
3c:f1:7e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:07:31 2025 by rpki-client