Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/310cab60-ebb3-3938-9bf8-64c91be785eb.roa
File: 310cab60-ebb3-3938-9bf8-64c91be785eb.roa (raw, json)
Hash identifier: SPa7trQFscUPjeY49fGhvL9wJCTjyOGKHm7KWa9CJiQ=
Subject key identifier: 09:9E:87:2E:CE:A6:C7:3F:9B:09:C3:2A:09:C4:55:5F:E7:1C:F2:B4
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246BE596BF8F0DB4F9F0B04
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/310cab60-ebb3-3938-9bf8-64c91be785eb.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 202
IP address blocks: 130.174.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:be:59:6b:f8:f0:db:4f:9f:0b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a1816dd4-fae7-4114-82e0-f647189b6f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:ed:21:ad:2e:c5:73:f0:f5:d2:25:29:9a:
c7:6f:8e:28:3f:3b:47:90:ec:61:bd:8b:ec:a5:f0:
bc:be:ea:08:57:b4:48:4c:e2:64:83:47:52:07:ef:
47:4e:f8:82:cb:14:bf:48:18:9d:e3:99:a2:d1:22:
94:f8:e7:8f:74:0b:27:90:93:bf:47:bd:b3:19:8a:
5c:f3:4d:ad:49:2e:f6:be:09:e9:a3:28:c7:6a:f8:
1f:7c:51:5d:97:47:ad:82:13:bf:09:66:9d:e8:0c:
9e:92:8a:92:d8:f7:36:77:96:02:7c:3e:91:2e:e9:
10:c3:23:df:2d:96:22:ff:44:37:f9:dc:e4:0b:69:
bc:83:05:29:81:da:56:9c:6f:b9:e2:1d:a9:58:2c:
82:e0:b4:cc:08:21:c3:71:1a:f2:3c:53:c6:40:40:
2a:4a:6e:31:67:1a:9d:49:d2:83:5b:dc:58:b8:fc:
2d:56:bd:64:3e:09:a6:08:47:41:47:bd:44:d1:ce:
f5:e0:65:80:c0:65:7d:e6:03:78:12:24:1e:3a:4a:
d5:3a:35:c4:1e:7e:47:bb:29:32:12:d6:91:38:d9:
fc:64:a0:cd:5e:ec:4e:c2:1c:3d:73:d1:2f:27:7a:
91:19:b5:54:04:8a:5e:89:66:df:60:05:5b:1e:e5:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9E:87:2E:CE:A6:C7:3F:9B:09:C3:2A:09:C4:55:5F:E7:1C:F2:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/310cab60-ebb3-3938-9bf8-64c91be785eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:d9:b1:8e:ff:aa:c4:2e:ae:50:a5:26:7a:ea:0b:7e:6f:f7:
3e:40:e1:e9:f5:52:f5:9d:01:c4:69:25:42:bf:81:e8:0c:16:
1e:bd:e2:ed:f9:d0:44:74:e5:c6:95:69:00:a0:3f:46:d5:ff:
e9:c7:0c:0e:69:b6:c7:21:01:8b:d9:51:3b:f9:d7:6d:a6:e0:
01:cd:02:0c:ce:cf:cf:f4:63:a6:78:2c:5f:f6:d4:08:19:e9:
7a:58:99:3d:4d:6f:8e:dd:98:2b:3b:75:c7:03:43:c5:49:7f:
01:e4:6d:d9:6c:3e:d5:ac:1e:51:a1:bb:be:7b:65:85:66:62:
21:32:4e:75:6b:96:83:3b:b0:fe:4d:f9:8f:9c:e8:4c:22:c8:
d6:b9:73:14:00:8f:3d:b9:80:b5:23:18:79:ab:cc:00:ee:1f:
6e:9b:f8:e7:77:bb:5d:fe:71:99:b2:80:89:1b:c6:46:a6:01:
0b:4b:29:53:86:ba:c0:4e:a2:5c:1d:0a:0c:70:23:92:f5:2d:
09:1d:ea:e9:dc:50:ef:f4:b1:77:ca:76:e1:ae:d3:61:62:6e:
58:38:17:aa:26:d2:7a:3f:5d:c6:df:57:bf:83:dd:18:97:98:
dd:6a:ad:11:7a:7f:5e:87:e8:6a:ac:5d:84:8a:49:8e:f1:3f:
af:ab:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:46:56 2025 by rpki-client