Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/336b5740-37b8-3799-952c-a5a74c6dcffe.roa
File: 336b5740-37b8-3799-952c-a5a74c6dcffe.roa (raw, json)
Hash identifier: ySF+7l9CbGO1mYkxvem/t68ku83O6bVoTHnXx8aRc5E=
Subject key identifier: 31:0E:CE:B5:2C:EE:64:74:E4:2C:BB:7F:1E:BC:2D:48:82:AF:3D:7F
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246BF94F5EA93EE56804900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/336b5740-37b8-3799-952c-a5a74c6dcffe.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 202
IP address blocks: 130.174.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:bf:94:f5:ea:93:ee:56:80:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=b6bdc9b0-68d8-4d0b-a9f4-72e83ad02edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:32:86:78:5b:b1:14:33:4d:94:5b:ff:e5:
b3:1a:d1:f3:48:3b:4b:1e:70:b4:34:94:09:9b:6e:
93:c9:76:a5:08:cf:2e:b9:4e:fe:71:c8:e0:d2:28:
b4:f9:05:73:53:94:91:f1:6e:4a:fd:81:7d:25:4d:
53:0f:3d:3d:ed:2b:36:0a:bc:d9:7a:e1:f1:29:5e:
98:40:3c:b8:0c:17:60:ac:51:0d:e6:16:4e:b0:59:
c0:c8:3b:91:00:04:f4:4d:22:3e:65:ad:63:32:23:
b0:c5:ce:e9:7b:c3:39:5e:fd:ab:87:03:d0:46:f6:
23:ad:81:fe:03:b9:96:8f:d3:6a:84:40:3c:65:ef:
90:d7:4e:14:de:62:67:f7:04:c4:f7:ab:95:a1:af:
ad:a8:e5:e9:9d:77:f4:8f:67:1b:c9:c9:ec:40:5a:
bd:66:fa:8a:fc:89:2c:10:ed:af:8b:5f:27:e1:44:
52:2c:15:9c:53:28:49:9e:bd:c0:55:df:1a:cd:11:
ee:27:0b:fd:d8:b0:de:7a:ea:d3:89:9f:4c:de:39:
9e:c3:8f:a2:17:16:c6:27:ae:0b:be:ee:c6:b3:f6:
86:51:ed:ab:a1:fa:b2:1c:db:ce:d5:db:4c:bb:07:
66:3a:96:ca:4e:29:b0:c4:fe:75:e2:e8:3b:74:4d:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:CE:B5:2C:EE:64:74:E4:2C:BB:7F:1E:BC:2D:48:82:AF:3D:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/336b5740-37b8-3799-952c-a5a74c6dcffe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:81:4c:64:7e:04:2e:9c:4a:24:bd:56:0f:fd:06:d8:62:65:
0d:df:18:b1:b8:ca:c7:d6:6d:46:22:29:1b:33:84:5b:f8:58:
03:96:7d:9b:2c:7c:93:75:3d:2b:4b:36:40:90:b4:a3:94:e6:
3d:74:cf:59:6c:ec:25:51:79:d0:38:bd:82:e8:0f:24:44:d9:
b5:f5:99:09:c8:8f:60:50:59:0c:75:63:4e:53:a0:86:34:56:
e8:cc:99:51:2b:fb:61:ac:ae:8e:d0:00:2d:25:e2:7c:e9:63:
39:de:52:28:ff:77:38:5e:0b:3e:0e:dc:c8:ff:b8:cd:71:25:
46:16:d1:4d:02:c7:63:41:3e:50:20:11:30:f5:4e:ba:bd:9d:
28:36:74:0f:24:c9:c4:2d:36:62:3e:c5:85:ea:8c:1f:b2:06:
10:f6:d6:3a:a1:7b:e3:14:e0:39:bd:a4:76:3b:b7:22:50:63:
a1:b2:da:9b:6e:98:c0:f7:97:fe:df:05:7b:a5:ec:6d:ed:cb:
88:e4:ed:e6:a8:45:39:64:5e:3e:db:78:dc:32:f6:0c:53:6f:
f5:3e:a8:27:8a:2d:bf:15:5d:51:55:d7:f9:53:6d:c1:64:b1:
d1:a3:76:cc:2f:fb:99:7c:0f:8f:c4:2b:2a:54:b4:09:19:c9:
32:8b:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:38 2025 by rpki-client