Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35d6e188-30dd-33ac-a7dc-46e588dea154.roa
File: 35d6e188-30dd-33ac-a7dc-46e588dea154.roa (raw, json)
Hash identifier: 5t2f2cL8ki+CIWnVqbP9eBRrgCJfjOTbsaxlgjFqWyc=
Subject key identifier: EA:54:7D:43:30:69:3E:1F:67:E6:AA:FD:D8:E0:58:86:87:09:04:1F
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246BC1F2A8A2A5FE10DA200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35d6e188-30dd-33ac-a7dc-46e588dea154.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 202
IP address blocks: 130.174.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:bc:1f:2a:8a:2a:5f:e1:0d:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=4b05763c-9329-4343-92c1-cdf35b56c33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:05:43:a1:7e:8f:b0:5d:52:07:f2:38:05:
b8:22:12:2f:18:f7:0d:e5:6c:36:44:7f:e2:ea:bd:
65:9b:ee:b3:2f:d0:a5:66:6f:11:f7:92:90:de:3a:
68:bd:6d:96:f0:2a:c0:f7:11:ef:2d:11:02:5d:71:
0f:8b:14:1f:d2:1e:50:a3:c6:5d:df:cf:84:99:72:
79:69:24:b8:7b:67:be:7e:ed:fb:30:c3:ff:37:cd:
b3:59:9b:dc:6f:92:a5:93:e9:5e:e9:a6:f2:b1:fc:
18:79:c5:93:59:75:42:93:ed:97:30:03:14:06:d1:
ed:7f:5a:94:e4:1d:0c:7b:7f:2c:36:30:56:5c:c6:
db:54:bc:e8:f5:31:48:c2:6e:79:e9:ea:b0:db:bd:
53:18:84:93:a1:1a:5e:ba:9e:41:51:13:70:18:9e:
8a:8f:21:36:57:4c:f2:f2:bc:29:9b:02:4d:53:2a:
aa:6f:2d:18:a0:db:fe:db:6a:bf:89:78:a1:46:c6:
71:a8:cf:2c:4a:77:21:b2:b1:22:2f:f9:72:42:6a:
f5:ea:e1:c5:95:f1:ce:16:54:d8:82:d7:87:7c:77:
92:0e:f4:df:b5:04:cb:da:f2:07:a6:fd:09:13:c2:
7e:16:38:ba:3b:de:ff:32:d3:ed:f7:af:2f:8b:de:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:54:7D:43:30:69:3E:1F:67:E6:AA:FD:D8:E0:58:86:87:09:04:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35d6e188-30dd-33ac-a7dc-46e588dea154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:ef:9e:65:bb:80:65:d0:2a:40:2c:69:ed:55:8e:3e:8b:81:
d5:41:f3:bc:e0:e8:ba:13:89:09:10:e6:50:28:9b:d4:b3:c7:
03:9d:b1:5a:20:05:da:67:e3:79:ce:34:de:b2:b4:8d:ba:5b:
d8:31:92:a9:92:0d:a7:59:3f:62:92:0d:c3:76:cc:c1:69:a9:
69:05:17:43:9d:54:f2:39:9e:89:fa:4f:df:a6:a1:6a:b1:53:
02:7b:55:76:ab:bb:a2:78:bb:24:26:4a:01:5a:e7:7f:6c:e1:
7e:b3:da:f3:ae:e7:2d:a3:82:c9:cf:ec:8a:fc:1f:b0:45:74:
85:5e:32:ee:6a:e5:72:11:b4:40:b8:78:9e:0c:44:10:00:a7:
ad:e7:12:6c:a2:90:e1:bc:ed:95:7c:04:7d:3b:cc:9f:7b:d1:
87:88:15:ab:75:95:c8:32:80:f3:4c:c0:63:e1:73:4a:0a:30:
02:07:f3:60:ea:41:5e:d8:4b:43:87:2e:40:ff:8e:45:52:a0:
c9:36:82:ac:16:d1:e6:fa:8c:e3:e1:7d:86:39:9a:22:b5:54:
a3:2f:7c:9c:72:f4:a3:88:b2:aa:13:4a:00:67:82:5e:e4:8e:
2d:eb:68:55:cd:67:c9:77:a9:81:19:66:74:b1:6a:91:d4:ad:
0b:8b:ff:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:59 2025 by rpki-client