Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa
File: 625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa (raw, json)
Hash identifier: OHAFbS9A3ri3auWsWY7NA6HPZvQm4gxbF0dc9Zfg/Cc=
Subject key identifier: 55:88:73:3E:99:50:7C:46:88:5D:C5:8A:1F:2E:0C:16:B2:58:10:5A
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC274DB64086B1EFCFA220
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 203
IP address blocks: 130.174.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:27:4d:b6:40:86:b1:ef:cf:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=46b014c2-ef6a-41e9-beff-97dd06af9b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b2:d2:d1:3a:e9:14:0f:5c:08:92:30:7b:14:
02:ed:c2:9f:18:34:b4:9d:bd:63:5d:ce:7f:8b:6f:
59:79:ac:8b:22:d1:0a:46:95:87:f0:81:39:48:8c:
6f:5e:6e:b0:a2:2d:90:27:ac:e2:23:0d:97:90:52:
b8:37:eb:5c:75:19:e6:f2:c5:a4:ea:27:9b:8e:92:
b6:fb:e7:fc:74:63:18:c4:18:25:53:07:18:b7:41:
f0:fe:a0:ec:26:d5:2c:45:55:bd:a3:d1:c5:65:00:
8f:58:c8:62:6d:79:e0:cf:8d:f0:ee:f2:a0:db:6d:
0d:65:63:f5:00:7f:f4:83:c5:6d:d7:fd:04:eb:dc:
bd:80:6b:64:95:82:6e:7e:ef:a2:cf:cc:15:fc:18:
fc:0e:24:32:9e:8d:7e:a9:2a:05:00:f5:0f:b4:da:
7c:ce:1a:d0:f1:a5:c9:83:b0:c3:59:a4:ed:6c:d6:
a2:fd:82:f9:dd:49:12:32:c4:77:45:ba:5c:33:ab:
a2:94:36:e2:ef:3d:3b:4c:02:58:8e:2e:1e:20:8e:
50:56:c1:99:c6:27:5c:5e:18:02:62:aa:bc:33:a5:
62:57:c1:eb:6b:ee:c0:4d:f0:31:55:dd:0c:63:ae:
58:9f:5b:0f:05:98:d4:1a:06:4f:97:86:86:1a:6c:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:88:73:3E:99:50:7C:46:88:5D:C5:8A:1F:2E:0C:16:B2:58:10:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/625cf2c5-a6a5-3f50-b20b-5b7b8a494922.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.75.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:70:f8:32:4d:09:d1:f9:41:50:b9:63:c4:b6:76:14:b3:da:
e3:69:6f:88:1d:cc:39:f3:23:de:4e:32:6d:44:4a:fa:f5:8c:
29:8e:cb:f0:01:09:26:af:0e:4d:03:4a:86:eb:6b:3e:06:17:
c7:e1:8c:55:b7:18:21:46:c3:c2:9a:7c:ae:a1:23:6d:42:98:
87:db:98:c4:44:99:d5:36:02:d2:31:dc:d9:d3:cf:67:94:cf:
77:1c:2a:12:9f:5b:3a:f5:30:93:ba:80:62:12:fa:3c:72:85:
3b:6e:c5:fa:76:a8:50:5d:7a:ed:39:9b:c9:db:45:d0:26:29:
4d:2a:12:78:49:c8:f2:70:fa:18:c1:2b:7b:ed:66:fb:8b:53:
54:70:03:30:8f:a2:cf:99:99:cf:2e:82:c0:fc:9c:27:36:34:
15:2d:8c:37:c8:e1:e6:e1:5d:e2:2b:a8:43:b7:55:30:cc:e8:
9e:cb:86:2d:30:c6:11:4a:bb:80:80:3d:4e:52:9c:f2:65:f4:
b5:2e:cb:3c:60:a2:49:60:7d:65:1a:50:1a:f3:05:bd:51:e3:
0f:c7:a2:bf:dd:5f:8f:a5:c9:ac:8c:62:6a:d2:33:25:be:b7:
78:8d:03:55:08:54:98:20:34:58:2e:0f:71:45:87:a0:aa:8b:
41:fa:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:31 2025 by rpki-client