Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e8f127bb-b13e-394b-ab08-c9ae5199e682.roa
File: e8f127bb-b13e-394b-ab08-c9ae5199e682.roa (raw, json)
Hash identifier: CxQ8pV/MfgXK163dMle7qeAdt2hz/7WaPStxAO5kCz0=
Subject key identifier: B8:0D:61:80:50:FC:87:F1:C6:6C:A1:DA:FB:22:71:11:FB:F5:A6:6F
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285847EFEF7AA151205C7CC9699600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e8f127bb-b13e-394b-ab08-c9ae5199e682.roa
Signing time: Wed 20 Nov 2024 02:00:39 +0000
ROA not before: Wed 20 Nov 2024 02:00:39 +0000
ROA not after: Tue 18 Feb 2025 02:00:39 +0000
asID: 3360
IP address blocks: 130.174.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ef:ef:7a:a1:51:20:5c:7c:c9:69:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Nov 20 02:00:39 2024 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=5006563b-e499-48b4-9472-f31fc0e5535c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:85:8e:37:bf:90:7d:c4:b3:84:3d:5a:e7:ef:
bc:ee:bb:3c:ea:e7:aa:59:ba:72:6d:f2:ce:53:ed:
67:0d:bb:d8:b5:f4:ee:ce:ca:c0:81:ab:83:b9:20:
51:f7:6e:a1:17:c8:d2:d7:37:20:f3:36:7f:a1:97:
82:3e:dc:3d:92:6d:d8:cf:04:43:c3:1b:1e:6c:85:
89:8b:44:36:b4:d5:6d:51:95:9c:e6:a8:8f:37:8a:
cc:11:43:b1:55:72:57:48:53:31:d7:df:90:81:40:
84:4a:33:4d:e3:4b:94:f1:1f:e3:f2:b2:1f:00:64:
11:07:83:04:32:a0:22:f6:c9:14:46:92:b3:87:ff:
1f:b0:50:26:94:01:fe:9a:7e:cf:f8:c5:71:ae:14:
7f:d9:1b:0e:d5:c1:ff:b0:3b:46:8e:26:64:94:19:
a7:41:a6:e1:5d:9c:a0:d3:8a:1f:8b:83:78:ed:35:
e8:9f:01:39:a4:71:82:29:84:35:8b:ec:b4:56:a2:
a5:2f:2f:38:1a:52:59:a8:b3:97:70:40:31:8f:be:
93:cc:b6:c0:08:60:37:39:c0:49:93:a5:59:57:9f:
e5:fb:f6:8a:d5:c7:bb:a0:77:ca:f8:cc:59:19:b2:
99:99:66:6b:f3:1d:83:87:4c:a7:2a:57:ff:f3:89:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0D:61:80:50:FC:87:F1:C6:6C:A1:DA:FB:22:71:11:FB:F5:A6:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e8f127bb-b13e-394b-ab08-c9ae5199e682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:34:fd:bd:01:e4:1e:e0:df:77:c8:52:51:60:c6:61:13:57:
59:08:68:b2:38:0a:da:b4:89:25:b8:1a:53:b9:07:50:86:9a:
52:84:2b:35:5a:cf:e9:f2:ee:90:0c:fd:88:ee:bf:ed:14:26:
ab:7f:ba:09:e6:b4:6f:1d:d3:1e:a4:32:ff:e9:1c:2e:17:c1:
d9:03:f6:48:b8:f2:40:9f:89:f1:4f:74:f1:d4:8b:39:4b:40:
7c:b6:d4:90:fd:1d:54:5a:31:24:8e:b5:67:f1:7d:25:ad:6b:
be:d6:86:b6:97:ed:7f:24:34:47:56:ca:92:8e:7b:e5:ea:b3:
de:30:84:f7:ac:8d:6f:73:e7:ec:62:9c:5f:14:bf:ea:fe:b2:
ff:9a:64:25:9b:7f:7e:59:0e:ba:4e:21:ae:f1:c8:33:96:64:
4d:0e:44:df:75:73:13:b5:8e:43:7c:60:ca:89:b4:74:91:dd:
e6:b2:e4:d4:d7:db:91:13:09:84:8f:2b:eb:e2:c7:79:58:ee:
d8:7d:c2:8d:f0:31:2f:05:2f:cb:ea:b1:ab:55:27:43:4a:87:
32:79:9c:e4:10:80:34:7c:39:f2:08:e6:28:25:ab:81:f9:f4:
92:7d:86:0a:61:10:1e:9a:93:c3:25:49:a2:bc:10:44:e0:6f:
cf:8c:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:44 2025 by rpki-client