Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/626e4ef8-bb15-364f-8a45-86430b6dff3a.roa
File: 626e4ef8-bb15-364f-8a45-86430b6dff3a.roa (raw, json)
Hash identifier: rN/8vZFzmOXpZBNr5L8Bv6ugZoNFdhkgtHU3s5p99ns=
Subject key identifier: 68:BD:91:05:36:F7:F5:FE:F2:E1:31:CB:A5:EA:4E:61:03:42:25:9A
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC2590219099245EF83380
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/626e4ef8-bb15-364f-8a45-86430b6dff3a.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 3360
IP address blocks: 130.174.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:25:90:21:90:99:24:5e:f8:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=fc437ccf-416c-4875-a7e0-369f4220429c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:09:fe:b3:dc:36:6f:72:5f:7b:c5:ee:49:
fc:dd:77:14:6f:b0:bf:85:96:42:f9:78:f1:e0:4b:
d5:92:e9:40:12:40:98:32:51:33:77:12:d6:27:3f:
4c:6b:f6:31:28:ef:ae:fa:34:d6:a6:6b:cc:7a:e0:
fd:c0:13:dd:24:af:51:49:0c:f9:8c:8d:4b:16:1c:
34:b8:96:e3:39:99:e5:6f:a0:87:86:7e:c5:61:0c:
03:ee:2c:ad:74:40:4d:fc:6a:c4:7d:d6:a5:71:e5:
67:d9:3f:ed:6a:a1:ae:b0:fe:8f:5b:c5:4e:de:2e:
99:79:b7:f5:d3:03:80:b7:97:b6:4c:cb:76:c2:f4:
8b:84:11:19:89:fa:78:dd:c8:c4:4f:45:65:d3:f0:
48:3c:f7:29:75:36:0b:27:58:73:b7:ba:25:b2:b2:
87:84:99:c3:fe:dc:ab:37:da:f7:61:a0:d4:a0:29:
83:2b:4b:03:a6:61:ff:1e:46:d7:41:81:be:0a:82:
7b:67:6e:ef:b6:4d:3d:68:3c:43:b2:05:71:4a:4a:
f7:bf:61:87:91:68:2e:88:0e:63:b1:87:e8:5d:ca:
e4:8b:ef:fd:6d:bd:c1:d7:09:f9:66:77:a1:36:1b:
e5:fa:dd:f4:d7:4e:4f:ca:28:34:f6:10:a4:c1:3f:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BD:91:05:36:F7:F5:FE:F2:E1:31:CB:A5:EA:4E:61:03:42:25:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/626e4ef8-bb15-364f-8a45-86430b6dff3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:95:4b:4e:82:32:95:7f:01:aa:c5:1b:46:a2:d2:84:c7:a5:
84:5e:27:9f:3a:7e:85:0e:b6:aa:72:85:3f:be:48:6b:ba:1c:
74:47:8a:16:b0:8b:02:b9:c0:73:49:11:af:79:5e:b4:8c:51:
1f:85:43:39:2d:1c:c7:ab:24:44:1a:c8:01:b3:4d:b3:1e:35:
cb:da:8c:bc:45:f1:34:23:ad:e4:8f:47:83:fb:97:fd:39:38:
72:45:4f:6f:fc:51:bc:e7:f2:76:36:58:b6:2b:eb:2b:aa:30:
47:c4:ca:ba:71:33:14:cc:c5:3a:e8:d7:0c:e3:5e:3f:66:19:
c8:ed:1e:fd:a7:aa:6d:d1:0b:71:de:a6:6e:8b:79:e8:36:d7:
bc:25:70:e9:7c:40:f6:98:6c:45:ee:6f:8e:12:14:5e:82:2c:
03:d1:c1:10:9c:4b:58:c8:3a:f0:0e:4d:1c:e2:47:e7:c9:ee:
24:a9:ca:0d:f5:02:d2:f8:6e:16:bd:66:da:b6:bc:2a:4b:a2:
29:8f:17:90:b1:9b:f5:77:2d:7f:9a:18:31:e2:1a:9a:1a:ff:
58:1c:5a:81:21:de:cc:1e:ec:40:d9:27:e6:9d:e2:16:71:0d:
9b:0a:67:70:b3:02:0d:66:36:b4:ad:dd:e4:a9:aa:62:45:f1:
fa:ef:8f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:51 2025 by rpki-client