Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/278739d1-c2bf-35c1-87b3-d8a2fbf9a412.roa
File: 278739d1-c2bf-35c1-87b3-d8a2fbf9a412.roa (raw, json)
Hash identifier: HcJwaR7Eg7rscy83hDOM5sR7wNIrcmnwOi/NTlgkd+0=
Subject key identifier: 12:33:4E:9D:BF:0B:B0:D8:0F:96:53:8E:E2:AD:C6:B8:5A:0B:2A:8A
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC279AB8BAA6FA5E27B780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/278739d1-c2bf-35c1-87b3-d8a2fbf9a412.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 202
IP address blocks: 130.174.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:27:9a:b8:ba:a6:fa:5e:27:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=33a95704-6c3d-485c-981d-4b2f8f8f0fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:cd:04:0f:fb:61:fb:f0:3b:ab:8b:9d:85:
b7:35:30:80:33:cc:5d:bd:be:33:a4:54:ae:9f:25:
10:c9:9e:00:6f:c8:23:01:95:29:9c:c3:06:c7:8d:
75:3b:ae:36:bf:02:9a:89:e7:2c:e1:58:08:56:af:
90:51:6f:0f:8b:cd:98:a3:a4:40:e3:fc:85:ae:fb:
46:f9:90:ba:fd:43:77:3e:7c:f1:a8:87:0d:a2:97:
46:7b:d1:b9:8f:b2:f2:2d:cc:03:b1:53:73:23:2a:
65:22:3e:e1:bb:38:14:67:19:d0:24:23:2d:37:15:
b8:0f:4c:8a:85:57:ae:b8:ac:7d:79:90:f7:65:b3:
3d:90:2a:61:ed:77:c9:97:ce:0b:3f:ad:6b:a8:3c:
90:65:15:c6:84:78:24:ff:26:69:ef:d2:72:c4:6f:
5d:0e:7e:7a:13:3e:1f:3e:a2:b6:d3:0a:7f:93:28:
13:46:00:06:0a:70:cd:ba:4f:59:76:c9:de:38:fc:
8b:8a:2d:dc:f4:b6:af:7d:cf:76:5d:b6:21:48:f9:
b4:d5:03:f6:40:7b:d0:a3:e8:40:1a:ed:f1:cc:7e:
ab:95:76:e2:f0:fa:6a:34:64:d6:e7:07:c3:66:7b:
33:48:7e:69:13:b8:82:92:11:ef:3c:1c:24:c1:70:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:4E:9D:BF:0B:B0:D8:0F:96:53:8E:E2:AD:C6:B8:5A:0B:2A:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/278739d1-c2bf-35c1-87b3-d8a2fbf9a412.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:5b:ca:1f:17:22:56:3f:9d:3d:a9:19:a8:0a:95:a4:3c:c4:
37:d8:c4:78:db:a7:50:d6:77:68:7c:17:d3:12:5d:d2:4b:0f:
b9:9a:fc:af:f8:2e:5e:41:16:3f:99:57:1d:f2:21:03:7c:eb:
26:dd:5e:5d:7a:5b:a8:01:9d:93:39:82:1a:31:78:85:a6:ee:
35:be:3b:21:42:bb:46:26:10:5f:79:f0:19:d0:19:7e:d5:49:
14:a9:93:d1:ab:5f:06:53:4f:b6:be:25:84:02:bd:0c:9d:9e:
c7:93:55:a4:1f:ea:ec:b2:86:73:72:4c:ea:43:7d:0b:db:ea:
a0:96:69:06:a2:ab:55:21:3d:63:8e:cb:2c:a1:b4:a6:60:39:
f5:d1:69:32:3b:28:01:fe:ba:d0:48:9d:27:87:38:0d:98:5d:
36:46:33:47:ba:84:64:b5:43:32:88:0d:bc:21:a1:47:4a:b1:
c8:62:ca:45:95:c0:a6:e5:58:25:e4:37:db:60:25:59:ee:e0:
aa:33:53:db:af:98:cd:5b:94:03:51:06:28:73:5e:9b:ee:56:
c3:e6:e0:ae:f9:a0:06:24:5f:29:f9:f0:a1:7f:1b:98:bd:34:
c2:f9:c0:4f:bb:ab:e8:e0:f1:79:cb:44:83:eb:c3:19:85:2a:
4e:11:24:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCeauLqm+l4nt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
MzNhOTU3MDQtNmMzZC00ODVjLTk4MWQtNGIyZjhmOGYwZmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqejNBA/7YfvwO6uLnYW3NTCAM8xdvb4zpFSu
nyUQyZ4Ab8gjAZUpnMMGx411O642vwKaiecs4VgIVq+QUW8Pi82Yo6RA4/yFrvtG
+ZC6/UN3PnzxqIcNopdGe9G5j7LyLcwDsVNzIyplIj7huzgUZxnQJCMtNxW4D0yK
hVeuuKx9eZD3ZbM9kCph7XfJl84LP61rqDyQZRXGhHgk/yZp79JyxG9dDn56Ez4f
PqK20wp/kygTRgAGCnDNuk9ZdsneOPyLii3c9Lavfc92XbYhSPm01QP2QHvQo+hA
Gu3xzH6rlXbi8PpqNGTW5wfDZnszSH5pE7iCkhHvPBwkwXDrHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIzTp2/C7DYD5ZTjuKtxrhaCyqKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjc4NzM5ZDEtYzJiZi0z
NWMxLTg3YjMtZDhhMmZiZjlhNDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBbyh8XIlY/nT2pGagKlaQ8xDfYxHjbp1DWd2h8F9MSXdJLD7ma/K/4
Ll5BFj+ZVx3yIQN86ybdXl16W6gBnZM5ghoxeIWm7jW+OyFCu0YmEF958BnQGX7V
SRSpk9GrXwZTT7a+JYQCvQydnseTVaQf6uyyhnNyTOpDfQvb6qCWaQaiq1UhPWOO
yyyhtKZgOfXRaTI7KAH+utBInSeHOA2YXTZGM0e6hGS1QzKIDbwhoUdKschiykWV
wKblWCXkN9tgJVnu4KozU9uvmM1blANRBihzXpvuVsPm4K75oAYkXyn58KF/G5i9
NML5wE+7q+jg8XnLRIPrwxmFKk4RJFY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:31 2025 by rpki-client