Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1457a717-f59d-34d5-9479-455a8064058d.roa
File: 1457a717-f59d-34d5-9479-455a8064058d.roa (raw, json)
Hash identifier: l5Mi8rNKaJ2hzwZzmRHhremrPMVTPq0H4sTE+MPQo3M=
Subject key identifier: 5D:C1:1E:D3:A5:59:60:CD:00:2F:7C:FC:AB:E5:D6:71:DB:46:36:E8
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246B0FB24B0AE2272B75C20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1457a717-f59d-34d5-9479-455a8064058d.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3356
IP address blocks: 130.174.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b0:fb:24:b0:ae:22:72:b7:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=80ae15c8-9b63-44de-b2f0-5262ec1cc599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:56:3d:52:2d:25:2b:62:1a:bb:fb:7d:fa:eb:
55:6b:8b:19:a3:c6:17:bb:21:7f:04:22:e2:38:f7:
14:7c:32:3a:1a:ba:4f:ad:cf:b3:49:76:1a:52:fd:
f3:31:82:29:8f:1f:e9:50:ab:21:19:72:72:c6:a0:
8d:db:38:87:81:d2:7d:0c:c0:d9:cb:68:91:cf:65:
f9:71:62:c9:03:c2:73:ee:06:63:d9:a1:72:a4:eb:
27:f7:8e:f8:78:71:79:9f:a4:20:eb:89:1d:57:01:
e5:9c:e7:55:52:97:c3:96:19:c0:16:89:bb:d5:da:
e3:03:64:ee:7e:14:35:dc:7f:ff:b4:2e:d9:3c:d9:
56:07:bf:a1:1f:41:75:61:e3:bc:cc:ab:26:1d:25:
3c:07:fd:9b:c9:e2:f6:77:a0:b8:d0:d9:93:f3:fa:
6f:21:ee:25:8d:63:23:95:0d:97:a3:28:d6:46:30:
b8:66:9d:ce:7a:c7:44:22:df:c9:45:c4:34:f0:d2:
1f:31:f7:dd:b3:8a:7b:30:42:af:ec:a8:a9:be:b1:
34:3e:ef:09:df:a3:df:70:be:e7:be:7d:c5:ea:b3:
24:a9:33:3f:7a:4b:82:14:23:0e:b9:08:18:8d:8f:
e7:1c:8b:af:3a:3f:e7:7e:41:1c:a1:84:d2:89:05:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:1E:D3:A5:59:60:CD:00:2F:7C:FC:AB:E5:D6:71:DB:46:36:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1457a717-f59d-34d5-9479-455a8064058d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:f2:20:57:4e:69:0c:3f:50:93:57:07:9d:c6:48:6c:60:de:
46:1b:0d:65:e5:66:37:99:a4:5c:58:00:ad:77:c4:c5:11:c2:
2c:1b:fb:a1:30:54:af:88:ef:ee:a4:5f:e8:e0:89:01:3c:96:
b9:aa:89:da:4b:f9:8b:80:79:c2:b1:f4:90:1e:4d:ef:c6:4c:
ed:e9:9c:b4:66:e3:f0:1b:bc:19:2c:80:97:d4:3f:73:dc:08:
57:5a:78:a3:6d:8a:0e:2a:10:6b:d4:5a:c2:6d:a5:1b:2f:aa:
a2:eb:82:4b:9a:15:e2:64:eb:af:ea:2c:07:25:a6:0a:5f:f6:
23:77:7f:b9:a5:d8:9e:5e:50:27:12:89:83:96:6e:83:e0:d3:
c4:d0:76:39:ef:89:02:80:76:55:a9:e4:fe:51:f4:d6:46:fa:
95:08:6b:68:54:05:9a:78:96:f3:a9:16:2f:91:67:19:6e:17:
fd:aa:4e:cb:a9:eb:01:90:c3:28:b5:ad:d5:13:d6:b6:fd:f9:
75:39:d6:5f:44:ee:21:45:1e:a3:c4:eb:53:e0:c3:df:90:84:
1c:c9:b7:6d:c9:42:1d:71:43:f0:0b:43:80:c6:8f:6a:4b:65:
56:34:24:0b:88:fa:0b:6a:20:8a:65:26:5c:34:b8:3e:e2:bf:
78:1f:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:13:51 2025 by rpki-client