Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa
File: 0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa (raw, json)
Hash identifier: OyyD/rvZvL+/iq2PlMxbpu4X8IkY7wzoYp+33G9K7zQ=
Subject key identifier: DE:FB:0F:13:D7:14:BB:0D:5B:06:29:A2:1D:64:B3:C1:36:8E:8E:44
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246BB841ABFBF7112789B40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3360
IP address blocks: 130.174.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:bb:84:1a:bf:bf:71:12:78:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=e124821d-500d-440f-bbaf-d701e26718c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:d9:55:6d:31:7d:5e:41:34:e9:f5:42:2a:
92:57:54:f7:c5:16:d7:51:4d:93:5a:5e:cc:55:45:
60:18:2e:c5:5a:51:5c:96:b7:b1:2c:80:6a:52:71:
fa:de:45:2e:2f:b4:36:db:0a:16:12:4d:14:59:31:
dd:45:1a:fb:b5:61:e5:3f:0e:37:22:4f:ca:17:8b:
01:4b:50:e1:0c:e8:6a:b1:10:e5:59:5d:8b:aa:8c:
f6:32:34:09:9e:de:4d:71:4b:f7:f7:66:7b:e6:a8:
b4:3b:e1:94:28:19:f5:8a:bd:f2:28:78:2c:77:ad:
86:a9:77:d0:22:4d:59:36:36:6a:bf:7d:71:a9:19:
ea:ed:24:ed:11:d3:db:59:88:4c:23:a2:da:5c:80:
75:85:e4:af:10:5a:fa:3b:66:9a:4c:1c:68:f4:c3:
e9:ea:41:9a:e6:a3:2d:a3:14:3a:14:14:57:4a:d7:
5e:58:0b:57:28:00:7c:83:f0:98:24:7c:1c:39:38:
13:19:99:21:08:0f:df:41:b8:37:72:bf:00:b4:c0:
51:03:bd:5d:12:d3:f1:f2:df:3c:97:58:e8:af:d0:
ae:4a:39:03:d4:a6:bc:fa:2e:71:86:5e:62:9d:05:
26:70:68:50:48:94:53:ab:da:34:bf:f9:bf:e4:7b:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FB:0F:13:D7:14:BB:0D:5B:06:29:A2:1D:64:B3:C1:36:8E:8E:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:1c:01:b3:e1:40:da:a1:29:87:bd:62:f2:c4:af:28:01:af:
77:bc:86:bf:f0:3f:af:0b:21:22:53:48:b6:da:04:9e:79:ef:
6a:3d:0a:d4:15:b5:ae:de:a8:cf:dc:0f:2c:b2:69:4d:20:74:
f3:47:e8:27:5e:ed:e1:c6:d0:16:fd:0d:e7:9a:d5:b4:7f:bf:
6c:28:e4:c9:42:67:d2:37:af:3a:6e:80:89:88:05:c7:26:c0:
13:53:bb:1d:fc:a2:20:d7:be:01:b1:7f:9a:58:5a:c2:98:b1:
1b:84:29:bd:29:62:e4:2b:0a:9a:34:06:de:38:80:42:e2:78:
f5:79:b0:0b:42:fa:c7:83:d3:3a:4c:40:86:7d:dd:af:d7:34:
df:ba:73:63:74:c6:00:ed:8e:b6:3b:ce:fe:da:2a:c6:6f:0c:
e8:e3:d9:e2:df:18:e8:11:b6:63:6d:61:fc:87:63:0c:ab:58:
ba:fa:98:39:62:b2:58:f5:e5:03:67:ed:ef:45:04:e1:e3:85:
c7:0e:db:08:b3:0e:51:53:3d:58:74:4f:de:38:a2:bd:e8:8b:
a6:44:d7:2a:86:ff:fa:58:b7:72:05:34:66:d2:93:35:c8:1d:
a9:66:13:f3:a4:2d:e1:a1:02:ae:12:15:f4:23:b4:96:dd:72:
35:f1:76:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:54 2025 by rpki-client