Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a900651-9ed8-3287-ab4b-a4083fc91759.roa
File: 0a900651-9ed8-3287-ab4b-a4083fc91759.roa (raw, json)
Hash identifier: flOxACG1yNvZVobQy1qxFpTpZDgmhyxTVY4GWFkgZ0k=
Subject key identifier: AB:46:6D:57:37:91:52:DB:4B:2E:F1:A0:13:DA:35:DD:98:B2:1B:F6
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC2485F2A27A35F46A3BC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a900651-9ed8-3287-ab4b-a4083fc91759.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 3356
IP address blocks: 130.174.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:24:85:f2:a2:7a:35:f4:6a:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=a1a9557c-71c0-443d-8756-987e1d4ad407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:87:ca:25:87:66:d2:2b:80:da:ff:08:06:
90:07:70:68:64:2b:fa:81:56:07:d2:60:99:f8:bc:
66:b4:e9:8d:93:79:bb:61:aa:1e:27:3a:61:04:4b:
09:4c:3e:d6:24:58:fb:93:da:b6:8d:2d:67:c9:ac:
f8:d5:b3:39:b7:56:59:fd:cb:9c:10:1a:4a:92:f3:
8b:24:3b:a4:68:76:8b:c6:d3:15:b0:cc:ee:93:9e:
22:29:42:67:5b:8e:0f:4e:ee:da:51:46:57:60:f9:
ca:ff:63:48:e4:b1:b1:b1:32:92:c1:83:74:c5:df:
e5:6c:df:9d:06:61:86:c8:fa:bd:2f:57:4c:ac:88:
11:e7:dc:8f:ac:72:18:2a:d7:e8:df:da:64:94:d6:
0d:a1:a9:74:d3:d6:51:75:c5:a4:92:d5:75:be:da:
42:3b:8f:17:b0:2f:4c:9b:99:fa:08:22:00:a4:9a:
8f:90:7c:f3:19:40:99:d6:66:8d:b3:56:bf:10:04:
e2:04:86:e0:17:70:91:6f:90:aa:e4:1e:be:cf:e4:
01:55:d6:1f:a8:b1:d2:99:71:87:9d:ec:7d:2e:c9:
76:6a:5f:45:2d:4a:8f:be:22:f9:37:3e:9f:32:4f:
97:d1:27:4f:b8:ee:49:1f:3a:ed:8c:9d:83:1f:a1:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:46:6D:57:37:91:52:DB:4B:2E:F1:A0:13:DA:35:DD:98:B2:1B:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a900651-9ed8-3287-ab4b-a4083fc91759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:40:28:be:a0:e4:75:e2:f6:85:5a:2d:d6:fc:17:15:9a:cb:
3a:07:a3:c5:5e:38:a6:e3:7a:b2:5d:48:95:36:a2:d6:d3:10:
cd:02:2f:4e:b2:5f:26:92:d7:ff:b5:0a:a4:6c:db:ce:e6:0d:
a0:64:6c:03:e4:ad:aa:8e:6c:ab:d5:15:73:34:c3:07:f1:a5:
c1:2f:82:3c:a0:f9:db:9a:7b:dc:a2:e2:c8:7e:7b:19:ee:d7:
9c:52:29:6f:d1:38:76:96:70:38:98:75:99:67:75:bc:9f:b4:
d8:ef:d1:83:ce:c7:d3:31:34:0c:b0:58:7d:e7:d9:dd:ce:e5:
f0:ae:1d:16:fa:0b:ba:f8:35:d0:4b:5b:8a:b3:c9:82:a1:c6:
06:79:9a:22:1a:70:67:c9:bf:6c:64:6a:ba:a3:83:64:14:7d:
f5:17:81:04:9c:45:1d:d6:9a:cc:01:48:ef:1f:d3:3a:7e:60:
ca:45:46:8d:d0:50:31:5a:51:9a:6a:60:72:f9:e5:4c:85:73:
a9:e6:b7:f7:c9:66:4d:b8:03:5b:40:dd:cd:c9:bf:cc:4f:13:
b2:74:9f:6e:f4:20:96:2b:b2:e1:62:46:9b:86:e6:8b:3e:e6:
9c:96:02:b7:32:ea:38:f8:2b:c6:6c:af:fd:d5:1e:97:69:c6:
3a:4d:38:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCSF8qJ6NfRqO8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
YTFhOTU1N2MtNzFjMC00NDNkLTg3NTYtOTg3ZTFkNGFkNDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtCHyiWHZtIrgNr/CAaQB3BoZCv6gVYH0mCZ
+LxmtOmNk3m7YaoeJzphBEsJTD7WJFj7k9q2jS1nyaz41bM5t1ZZ/cucEBpKkvOL
JDukaHaLxtMVsMzuk54iKUJnW44PTu7aUUZXYPnK/2NI5LGxsTKSwYN0xd/lbN+d
BmGGyPq9L1dMrIgR59yPrHIYKtfo39pklNYNoal009ZRdcWkktV1vtpCO48XsC9M
m5n6CCIApJqPkHzzGUCZ1maNs1a/EATiBIbgF3CRb5Cq5B6+z+QBVdYfqLHSmXGH
nex9Lsl2al9FLUqPviL5Nz6fMk+X0SdPuO5JHzrtjJ2DH6ENuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtGbVc3kVLbSy7xoBPaNd2Yshv2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGE5MDA2NTEtOWVkOC0z
Mjg3LWFiNGItYTQwODNmYzkxNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRAKL6g5HXi9oVaLdb8FxWayzoHo8VeOKbjerJdSJU2otbTEM0CL06y
XyaS1/+1CqRs287mDaBkbAPkraqObKvVFXM0wwfxpcEvgjyg+duae9yi4sh+exnu
15xSKW/ROHaWcDiYdZlndbyftNjv0YPOx9MxNAywWH3n2d3O5fCuHRb6C7r4NdBL
W4qzyYKhxgZ5miIacGfJv2xkarqjg2QUffUXgQScRR3WmswBSO8f0zp+YMpFRo3Q
UDFaUZpqYHL55UyFc6nmt/fJZk24A1tA3c3Jv8xPE7J0n270IJYrsuFiRpuG5os+
5pyWArcy6jj4K8Zsr/3VHpdpxjpNOGE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:35 2025 by rpki-client