Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c47c49f3-6a10-32a5-a57f-f50a4f0541fc.roa
File: c47c49f3-6a10-32a5-a57f-f50a4f0541fc.roa (raw, json)
Hash identifier: 4ZvD1B+JyKk/Nk5timORj4CkGZMaBYKCEvi+LkBFLTU=
Subject key identifier: FA:73:03:CD:15:6E:70:99:DB:A4:1B:1E:4A:C4:B1:B7:89:78:2C:25
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584834556BD6A6EC857B128DD100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c47c49f3-6a10-32a5-a57f-f50a4f0541fc.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 202
IP address blocks: 130.174.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:6b:d6:a6:ec:85:7b:12:8d:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=bf9ca105-1c04-4f25-8d05-9ed34b80531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:d4:77:bf:a8:da:49:64:61:0f:2c:d7:17:
ed:5c:2e:ed:61:fe:46:7f:3f:97:b6:d4:fd:c2:04:
a8:d0:06:bb:21:07:56:b8:6f:2b:d1:67:69:6b:b3:
76:2c:ca:e9:b7:71:7a:b3:2f:4e:ea:63:87:ed:4c:
6d:5c:37:df:ea:4a:57:70:57:46:7f:62:5a:87:e3:
a6:b6:a1:4d:d8:8e:7d:a2:98:f8:4f:7b:e7:bd:58:
6a:ed:04:b1:d2:34:f0:59:04:ab:84:1e:78:d4:a7:
c0:a6:40:5c:26:13:36:bd:24:f1:1e:42:0d:95:e1:
4a:b4:75:4d:a4:fa:0b:a2:e4:a3:83:1a:2c:e0:19:
28:37:a9:0b:49:63:4b:09:70:60:b6:f0:8b:1c:97:
76:ef:02:65:ad:1f:6e:c8:29:ae:e4:ae:01:07:3b:
81:61:4d:e8:75:9d:6c:2c:0b:f2:ea:0a:39:05:d6:
97:25:d2:e3:3e:96:00:79:df:ad:27:8e:b6:28:48:
1e:06:55:59:a0:ff:cf:6d:6b:d6:a6:44:ea:63:67:
b4:b2:67:ea:78:76:d6:45:bd:17:a0:99:da:b9:2f:
21:ba:4b:90:1d:da:06:a6:d9:12:bc:f0:b7:c8:e5:
ef:e2:7a:e9:60:07:8b:13:32:e2:21:5c:5f:1c:41:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:73:03:CD:15:6E:70:99:DB:A4:1B:1E:4A:C4:B1:B7:89:78:2C:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c47c49f3-6a10-32a5-a57f-f50a4f0541fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:e5:ae:1f:fb:ed:9e:66:21:a3:58:f9:74:80:d9:51:b2:a5:
05:8d:f8:23:3f:36:dc:8f:0a:d9:fb:8c:17:35:08:28:52:27:
d3:b1:77:a6:67:36:e4:7e:6a:ba:c0:ca:30:e2:31:78:26:2f:
ac:56:66:1f:61:96:f2:c2:ee:6f:1c:1e:c6:03:bb:25:7b:b0:
75:c8:0f:42:5b:c4:79:18:18:42:f8:8d:78:72:1f:87:dd:17:
6b:04:66:20:4e:94:58:02:d4:fd:98:14:38:ae:03:be:93:a2:
16:57:d5:51:67:22:2b:ff:4b:93:4d:48:7f:c4:e3:9c:c6:98:
e9:b4:2d:60:de:cb:6d:c0:46:04:39:80:98:f4:38:d3:af:7a:
a1:fb:d6:e4:85:bf:ab:80:52:6d:3f:a4:d7:d6:43:0e:72:26:
47:d6:44:2f:b6:79:46:d3:03:15:d5:cb:2a:be:70:c3:75:18:
d5:30:47:05:9a:5b:80:c0:ff:8a:4b:18:4e:8e:61:e8:6a:5b:
b6:ea:c1:97:77:d3:ff:c2:a6:3b:cf:bc:e6:d0:c6:ae:b5:37:
94:ef:22:42:bf:69:75:92:c2:64:28:b6:eb:3b:b5:b1:80:a0:
1b:63:85:e9:d0:ad:e6:f3:c8:d6:c4:6f:ef:5d:05:a9:fb:3c:
ef:83:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:04:23 2025 by rpki-client