Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b2cbb20-468b-38c0-93c9-e58604132ad2.roa
File: 4b2cbb20-468b-38c0-93c9-e58604132ad2.roa (raw, json)
Hash identifier: P1RDbsQPmAny5dqPE1OjxpLEHnvbooMiNrh6eZllUsk=
Subject key identifier: 46:DA:D1:35:E8:ED:53:4E:8D:CB:A9:13:C5:0D:E6:02:D4:1B:2E:03
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246BFBD99325D5B45308740
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b2cbb20-468b-38c0-93c9-e58604132ad2.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3356
IP address blocks: 130.174.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:bf:bd:99:32:5d:5b:45:30:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=96fd7431-1444-4a3a-8de0-49fd85fb73bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:ca:48:89:78:6d:23:30:13:fc:be:fd:cc:
80:d9:ab:06:f4:af:66:79:3c:a5:ec:6b:0f:fc:a6:
07:47:c5:56:e8:96:f1:77:63:20:20:4b:ac:9b:e4:
aa:b7:61:eb:24:e0:5d:7d:29:7c:a0:1d:46:51:1f:
a0:51:f9:17:62:a8:aa:f1:93:b2:66:ab:b7:2c:09:
9e:54:83:84:3f:54:8e:5a:e7:e1:8f:f4:71:5e:75:
9c:79:c7:28:f6:85:5e:2c:26:7d:8b:0b:f5:17:61:
34:55:78:ed:fb:d8:9e:3d:93:d1:e2:52:96:ce:01:
01:b1:ae:35:a2:bf:8d:43:cb:02:09:cc:83:4b:19:
15:20:f5:bf:0f:31:e1:8e:ef:fd:94:59:dc:1d:5e:
35:6c:15:59:e4:a8:73:85:29:93:e8:a2:93:ac:37:
14:dd:8b:a7:ce:35:6f:80:44:99:27:ef:eb:f7:0f:
19:20:54:ba:d9:83:50:80:a4:e0:cf:d0:58:d6:5d:
ba:b8:40:75:64:c8:ce:9a:01:ef:05:a5:88:dd:10:
73:4c:97:fe:46:dc:24:eb:ba:0e:94:6a:6f:86:98:
79:e3:50:7b:6a:2f:ca:3b:ec:5f:77:ba:07:b7:b9:
bb:21:2f:fa:49:9e:e8:ac:02:f5:18:a4:56:d2:73:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:D1:35:E8:ED:53:4E:8D:CB:A9:13:C5:0D:E6:02:D4:1B:2E:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b2cbb20-468b-38c0-93c9-e58604132ad2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:57:d8:7b:ef:8e:51:68:b6:c1:e0:52:50:4f:47:f8:38:6e:
52:17:d0:10:dd:ce:6d:a6:22:98:12:85:f4:06:5d:c2:00:6b:
3b:2d:10:9c:6b:26:64:84:52:52:bb:c0:71:9c:3b:f2:61:c4:
42:d7:95:aa:98:e1:2d:40:56:ee:11:dd:10:ea:da:ab:4c:5d:
4a:a4:74:b1:19:5c:93:5c:2b:29:df:d0:65:9e:09:1b:df:b6:
32:e0:88:bc:c2:99:ed:9f:2c:b6:d8:5d:de:71:5a:74:fd:12:
aa:7a:b9:f5:05:22:70:fa:63:aa:46:89:da:14:db:fc:c6:fc:
cc:6c:09:0f:0c:cf:51:00:5c:83:b1:53:45:be:2b:b4:1a:07:
8a:e3:21:64:4d:5a:45:87:7a:05:62:05:ed:1b:c5:bc:40:d2:
e1:a6:f9:1e:d1:06:da:2f:5c:78:da:c2:10:b6:23:69:c0:09:
d8:39:ec:79:29:04:9c:0f:7e:69:eb:bc:bb:ef:f8:37:f7:5c:
f9:18:b5:d6:38:07:02:07:9b:ab:e0:bf:85:3b:ba:4e:b5:3c:
d6:05:1d:f3:48:a6:31:14:9e:19:08:1b:4d:4f:03:b5:dd:0c:
2b:b5:46:33:72:2c:65:8a:86:4e:4a:6e:44:39:eb:64:39:9f:
b9:78:ba:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRr+9mTJdW0Uwh0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
OTZmZDc0MzEtMTQ0NC00YTNhLThkZTAtNDlmZDg1ZmI3M2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZbKSIl4bSMwE/y+/cyA2asG9K9meTyl7GsP
/KYHR8VW6Jbxd2MgIEusm+Sqt2HrJOBdfSl8oB1GUR+gUfkXYqiq8ZOyZqu3LAme
VIOEP1SOWufhj/RxXnWcecco9oVeLCZ9iwv1F2E0VXjt+9iePZPR4lKWzgEBsa41
or+NQ8sCCcyDSxkVIPW/DzHhju/9lFncHV41bBVZ5KhzhSmT6KKTrDcU3YunzjVv
gESZJ+/r9w8ZIFS62YNQgKTgz9BY1l26uEB1ZMjOmgHvBaWI3RBzTJf+Rtwk67oO
lGpvhph541B7ai/KO+xfd7oHt7m7IS/6SZ7orAL1GKRW0nOK+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEba0TXo7VNOjcupE8UN5gLUGy4DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGIyY2JiMjAtNDY4Yi0z
OGMwLTkzYzktZTU4NjA0MTMyYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIhX2HvvjlFotsHgUlBPR/g4blIX0BDdzm2mIpgShfQGXcIAazstEJxr
JmSEUlK7wHGcO/JhxELXlaqY4S1AVu4R3RDq2qtMXUqkdLEZXJNcKynf0GWeCRvf
tjLgiLzCme2fLLbYXd5xWnT9Eqp6ufUFInD6Y6pGidoU2/zG/MxsCQ8Mz1EAXIOx
U0W+K7QaB4rjIWRNWkWHegViBe0bxbxA0uGm+R7RBtovXHjawhC2I2nACdg57Hkp
BJwPfmnrvLvv+Df3XPkYtdY4BwIHm6vgv4U7uk61PNYFHfNIpjEUnhkIG01PA7Xd
DCu1RjNyLGWKhk5KbkQ562Q5n7l4ums=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:12 2025 by rpki-client