Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a456b193-d802-32ac-b64d-8a5713f1fdf2.roa
File: a456b193-d802-32ac-b64d-8a5713f1fdf2.roa (raw, json)
Hash identifier: HyqagE9YSm56eMRO88HFVqngMbT5EpzoxC7k5pu/QlI=
Subject key identifier: 45:C1:95:C9:40:17:7A:ED:C4:0C:0C:01:C4:36:EB:D4:87:22:4C:CD
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584834556C453DE170E34F5D7500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a456b193-d802-32ac-b64d-8a5713f1fdf2.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 202
IP address blocks: 130.174.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:6c:45:3d:e1:70:e3:4f:5d:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=26f87800-190e-4e0c-93c2-def3dfac38e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:89:c0:6e:e0:69:8e:70:9c:c7:6d:7f:2f:
99:a9:1d:84:2b:2b:d3:05:c1:8d:26:2e:b0:8b:ab:
8b:8a:85:10:9e:db:04:86:d5:73:7d:d6:a9:74:cd:
9d:a4:b6:40:ce:1c:5d:b7:83:f8:42:3f:44:19:1d:
c9:3a:6e:0a:32:55:14:44:99:9c:a4:7d:ce:21:d0:
b1:78:ce:07:f5:fb:40:8b:ee:84:8a:e4:b2:c7:c0:
bf:f6:c4:1e:6e:88:ad:15:25:09:e9:55:5d:55:76:
7d:01:c0:03:78:7c:ba:13:dd:e9:19:a5:4c:3b:ae:
86:1f:fc:86:84:aa:11:02:ff:b7:6c:64:9b:d0:08:
03:a8:38:f4:fd:34:7a:3e:d6:4c:eb:3e:0e:2b:1e:
e8:ce:18:9c:ec:94:11:2c:6a:f5:ec:c5:a4:f5:50:
78:6e:ad:15:06:02:db:7c:d4:ef:57:19:cb:b0:0d:
a5:72:6b:9a:dd:dc:88:93:95:90:19:5b:a1:e7:0b:
9e:b6:71:61:f2:fe:f3:f5:41:1e:5b:d6:ee:6d:4d:
89:17:a6:09:83:a5:c0:ec:bf:21:26:3b:30:84:c8:
49:97:f4:de:be:73:84:19:98:b9:c1:28:68:35:90:
aa:36:a1:61:84:ed:91:c7:7d:ed:ea:d9:ac:3d:41:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C1:95:C9:40:17:7A:ED:C4:0C:0C:01:C4:36:EB:D4:87:22:4C:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a456b193-d802-32ac-b64d-8a5713f1fdf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:3c:70:18:0c:c2:a9:61:a3:54:5c:a2:88:c1:e2:7c:57:d1:
07:5c:cb:48:43:81:c9:d4:90:02:55:e8:1c:1c:d9:f9:bf:83:
9c:7d:9b:66:2d:1d:1f:49:37:2a:e5:4f:e8:99:c0:d4:96:eb:
70:57:1c:42:12:5a:8a:15:37:92:b8:36:ef:59:b2:4d:2d:d5:
77:4d:66:4f:41:7b:dd:6c:a6:ce:43:f5:05:e0:9a:1d:eb:fe:
4a:ac:80:5d:53:fd:7d:f5:0f:3f:d6:61:74:85:c8:1e:f2:1b:
0f:a5:22:3f:b7:8b:72:b5:a1:fb:d3:2d:4a:5f:a0:cd:13:b6:
23:91:45:c7:bf:98:3e:50:e3:9e:bd:a5:ae:70:c8:90:92:a3:
9a:4e:92:e3:fe:57:b1:f6:9f:35:d0:12:e0:a0:e8:f2:40:0a:
b3:e7:4b:fa:35:85:04:37:96:67:9f:78:29:ac:4c:da:e5:92:
cc:f1:ce:f4:de:05:c3:10:48:8e:23:00:02:17:3b:fc:61:93:
08:6d:50:89:87:e7:a1:67:92:e5:89:06:2a:39:bf:58:1f:51:
6a:21:ce:eb:b5:c5:64:2e:77:60:21:e9:30:f4:6e:f3:4a:b4:
1c:b1:4a:e8:0c:92:fa:8f:6f:ca:1e:5b:37:39:c9:0f:d2:d4:
30:a6:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:19:34 2025 by rpki-client