Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a1815e0-ac44-3f67-b773-28a2250fbced.roa
File: 0a1815e0-ac44-3f67-b773-28a2250fbced.roa (raw, json)
Hash identifier: a/iePH7MUxssX6cC9cVtpNUpWR7Q2Tf4OLaXPhqhG+g=
Subject key identifier: 68:D2:C5:B0:8B:D4:0D:E8:98:27:AB:3E:1A:80:54:F6:4C:A2:16:60
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC22DA3BEC8B93824DCE40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a1815e0-ac44-3f67-b773-28a2250fbced.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 203
IP address blocks: 130.174.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:22:da:3b:ec:8b:93:82:4d:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=6db8a45d-7e3c-4ca3-b890-7e68055edc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:31:d9:53:76:55:e2:53:4f:38:a0:f5:50:
f0:20:c0:b8:cd:b6:ab:f0:ba:48:d7:64:be:0c:e1:
7d:72:2a:52:30:ca:7e:c5:21:27:51:95:ff:58:9f:
b9:74:4c:e6:c9:96:f5:5a:41:b8:3c:15:6c:d5:0e:
e6:9d:58:13:82:c0:1b:6f:cd:66:da:67:2b:d0:9b:
e0:de:ea:59:c8:37:fc:03:0c:77:9d:d0:00:7d:db:
8f:ea:dd:ab:b7:2f:b2:11:fe:d7:91:b1:9d:21:c6:
b4:e8:f6:cc:34:71:07:f4:93:b0:c0:ab:67:b0:0d:
2e:49:fc:48:c5:40:35:ef:dc:36:33:41:06:ca:38:
66:71:42:7d:1d:19:06:f0:54:c8:65:89:60:1d:e6:
d4:fe:20:72:13:32:67:9b:7d:54:1b:08:e6:6e:53:
b5:3a:ad:6b:e7:35:db:ab:f5:ac:04:87:8e:da:d7:
d3:df:dc:46:b6:84:5b:5b:42:dc:dd:3d:47:73:32:
d2:3c:23:bf:23:f8:9e:91:48:45:6e:43:15:e6:d0:
24:32:ee:94:30:bc:74:ed:a5:aa:60:b7:4b:d8:32:
6c:02:39:78:ed:07:5c:b6:9e:09:84:3b:99:02:32:
88:ab:54:76:a9:80:2c:e4:ab:d2:02:29:a8:54:c8:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D2:C5:B0:8B:D4:0D:E8:98:27:AB:3E:1A:80:54:F6:4C:A2:16:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a1815e0-ac44-3f67-b773-28a2250fbced.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:32:ce:d8:aa:d3:6b:ed:9e:ae:d5:d6:ad:9d:bc:90:56:5f:
f5:08:eb:f5:43:f0:5b:ec:e0:25:be:26:e3:43:9c:3a:bf:6e:
38:95:20:e2:24:b8:5e:84:99:82:8a:8b:0d:c4:4d:8a:c3:6c:
79:81:bb:c6:39:1f:16:6a:af:0b:b0:52:38:fb:27:46:7e:54:
ef:55:c7:08:88:5b:19:54:55:90:be:c5:9a:fb:ce:6c:dc:e4:
e5:01:01:ad:ea:db:91:50:48:53:3b:4e:95:46:89:3f:8b:cb:
4a:85:cf:0b:ae:1f:96:00:bc:69:69:f4:7e:8f:16:4b:e2:25:
27:b2:ee:4f:58:41:50:0f:e1:ff:18:4c:90:e6:5b:a3:82:39:
e6:07:e4:e7:2c:17:f6:cd:8c:1e:a1:58:6b:d2:45:d4:f9:7f:
24:39:62:5a:da:77:c7:05:31:4e:27:b4:f6:cb:dc:0d:bb:4b:
85:4b:cd:78:b7:8f:9e:d0:e4:80:35:19:57:37:fb:b0:6c:d5:
39:00:77:82:cf:2f:9f:a1:a3:50:da:94:34:38:4d:85:7c:a7:
89:cc:32:5c:34:bb:b5:88:6c:7f:44:dc:27:0c:88:05:81:80:
59:3a:32:a7:e6:9c:a1:b5:17:83:f8:af:3b:ea:b4:04:c6:5f:
10:f4:73:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCLaO+yLk4JNzkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
NmRiOGE0NWQtN2UzYy00Y2EzLWI4OTAtN2U2ODA1NWVkYzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Bgx2VN2VeJTTzig9VDwIMC4zbar8LpI12S+
DOF9cipSMMp+xSEnUZX/WJ+5dEzmyZb1WkG4PBVs1Q7mnVgTgsAbb81m2mcr0Jvg
3upZyDf8Awx3ndAAfduP6t2rty+yEf7XkbGdIca06PbMNHEH9JOwwKtnsA0uSfxI
xUA179w2M0EGyjhmcUJ9HRkG8FTIZYlgHebU/iByEzJnm31UGwjmblO1Oq1r5zXb
q/WsBIeO2tfT39xGtoRbW0Lc3T1HczLSPCO/I/iekUhFbkMV5tAkMu6UMLx07aWq
YLdL2DJsAjl47Qdctp4JhDuZAjKIq1R2qYAs5KvSAimoVMim9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjSxbCL1A3omCerPhqAVPZMohZgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGExODE1ZTAtYWM0NC0z
ZjY3LWI3NzMtMjhhMjI1MGZiY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIoyztiq02vtnq7V1q2dvJBWX/UI6/VD8Fvs4CW+JuNDnDq/bjiVIOIk
uF6EmYKKiw3ETYrDbHmBu8Y5HxZqrwuwUjj7J0Z+VO9VxwiIWxlUVZC+xZr7zmzc
5OUBAa3q25FQSFM7TpVGiT+Ly0qFzwuuH5YAvGlp9H6PFkviJSey7k9YQVAP4f8Y
TJDmW6OCOeYH5OcsF/bNjB6hWGvSRdT5fyQ5Ylrad8cFMU4ntPbL3A27S4VLzXi3
j57Q5IA1GVc3+7Bs1TkAd4LPL5+ho1DalDQ4TYV8p4nMMlw0u7WIbH9E3CcMiAWB
gFk6MqfmnKG1F4P4rzvqtATGXxD0cw0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:29:22 2025 by rpki-client