Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa
File: 104038a4-0b27-3ddd-924e-b238fc38a0d9.roa (raw, json)
Hash identifier: nO7FRq64KlR8+4ASgFoRxjf+XJgBk0Pf30VQdq/7EgA=
Subject key identifier: 9C:FE:44:3D:80:B2:86:74:7C:50:AC:9B:AF:19:BD:FF:9F:E4:50:B6
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246C1B2852DBCD74EBB2380
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3356
IP address blocks: 130.174.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c1:b2:85:2d:bc:d7:4e:bb:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=e0aa2419-56f0-4f01-8519-a6070084bfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:d3:0d:ea:77:46:08:e4:26:ce:50:33:01:
73:d7:04:44:b6:14:40:de:d5:a9:c5:14:d4:f9:01:
98:0c:cf:f0:fa:9c:d1:16:9c:6b:dd:b4:f9:2f:6e:
ad:0e:02:25:1c:8b:7d:7c:c8:f6:df:2a:b1:96:34:
35:01:f9:31:60:16:01:6c:21:3e:74:aa:9b:4f:aa:
05:0d:60:2b:ef:78:67:9a:cd:bc:92:7a:81:12:52:
51:86:ab:b9:2b:98:43:57:88:1a:b4:72:9e:f0:ee:
b8:b8:3d:02:f4:73:1d:19:48:91:62:3a:3e:d2:b9:
4c:ea:15:46:6e:cf:03:cf:75:a0:8e:44:b0:40:ec:
ff:8e:ef:02:43:66:e1:c2:d9:f5:1b:38:64:38:11:
95:b5:7e:28:a1:b0:64:de:b1:1a:f0:70:b9:4d:dd:
85:bd:ec:7b:88:51:23:9f:86:df:2e:fb:ee:95:c8:
50:c7:be:0b:36:b3:99:67:d7:5a:c5:a7:ee:63:1b:
de:74:47:ae:af:42:9d:a2:9c:bd:a2:8f:fb:77:c2:
87:e0:e2:ce:9e:7c:57:82:75:07:e3:0d:bb:7f:0b:
c7:5c:f4:72:d8:13:af:ea:f5:c4:84:e9:20:01:51:
4b:53:cc:74:e6:3e:62:ee:1d:57:56:96:9c:63:4a:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FE:44:3D:80:B2:86:74:7C:50:AC:9B:AF:19:BD:FF:9F:E4:50:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:67:2f:87:c2:2f:15:08:d9:7b:58:d3:13:bd:74:57:c9:90:
b4:05:39:d1:2f:e8:a4:86:b4:82:8c:ae:36:c9:f7:60:35:c9:
6b:82:70:96:5e:8c:4a:f0:cd:fe:c4:08:0d:d9:b8:3f:71:af:
ff:ab:73:e4:19:21:f3:01:35:39:72:02:bf:50:1e:d0:20:ab:
dd:54:17:06:df:ae:99:b8:5b:94:e5:ca:cb:96:b5:31:e7:5f:
19:d0:30:63:22:79:7e:1b:a4:f4:21:76:a2:3d:65:77:2b:84:
d3:3b:1c:03:20:d8:dc:a2:0e:64:6e:c5:94:47:15:c1:af:99:
2e:c2:bc:39:09:91:2c:e0:99:10:ff:5a:a2:37:29:2f:1a:aa:
a5:a0:d7:d2:8a:a7:7d:f3:8b:c3:42:69:14:da:b8:29:57:49:
79:4a:83:6c:33:8c:7c:2b:a4:31:21:08:02:49:06:21:68:83:
25:85:bd:16:b0:53:4e:72:47:4b:b2:a1:30:cb:e1:93:25:31:
53:ce:1d:cf:1b:8e:86:d9:a3:c3:6c:6d:a9:c3:46:a1:a0:b9:
30:86:3c:51:fe:aa:86:7f:ea:cc:58:0d:ca:bd:c0:e4:39:96:
d5:52:9f:c9:17:a1:7b:15:a9:b1:d3:41:ee:0f:dc:5a:c9:22:
e0:36:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:49 2025 by rpki-client