Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668a616a-aa4d-397c-98c1-7412452a7d33.roa
File: 668a616a-aa4d-397c-98c1-7412452a7d33.roa (raw, json)
Hash identifier: Ny2jWT+UAwri0owquDM0+ZLHsmm1nvANiVphSo3NvnQ=
Subject key identifier: D1:66:5E:F1:14:BB:D7:A2:83:B9:5B:D2:5E:8B:BD:A0:CD:66:08:46
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC352C7991D07D5F423C10
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668a616a-aa4d-397c-98c1-7412452a7d33.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 202
IP address blocks: 130.174.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:35:2c:79:91:d0:7d:5f:42:3c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=f697150e-aa75-4a4b-901a-b4d1d02a5cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:92:13:47:9a:f4:b5:10:68:cb:58:f2:6d:80:
af:be:9c:1a:c0:36:cb:5a:7f:25:78:95:3b:d6:2e:
c3:69:8c:ae:8d:8b:20:76:c2:74:18:0c:84:7b:ae:
21:c3:68:96:6f:0a:23:b0:cb:fe:5e:d4:9e:e3:59:
01:1a:8e:61:fe:6b:23:d8:1a:b8:12:7a:99:c6:3f:
28:4e:c6:e0:d4:89:4b:9d:95:2d:92:00:ee:85:db:
c3:18:99:b5:be:69:90:9a:2d:58:c4:b3:fc:f4:a8:
ea:59:c5:e5:5b:84:46:6e:fb:6d:2d:9a:1f:c6:8e:
06:7b:e5:62:4b:f9:59:39:a2:a8:bb:4e:21:d4:bb:
92:eb:64:2b:e8:06:5d:66:e9:80:ef:96:37:23:f6:
88:e4:b7:e0:a7:7f:09:22:8b:21:96:a7:ef:82:18:
87:c7:ed:ca:eb:46:96:43:93:cf:33:19:26:f3:cf:
2d:19:25:55:5d:b2:9c:36:3a:15:54:e5:12:2f:31:
14:45:6f:0a:18:c8:99:88:9b:84:2a:1d:64:3c:3f:
65:f4:e7:f1:0e:6a:55:20:0e:d1:94:46:06:94:46:
ea:98:13:6b:a0:61:5e:f2:92:7a:ac:a5:d1:c3:09:
2a:09:c2:5a:94:a8:26:a7:af:5f:c3:75:14:03:08:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:66:5E:F1:14:BB:D7:A2:83:B9:5B:D2:5E:8B:BD:A0:CD:66:08:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668a616a-aa4d-397c-98c1-7412452a7d33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:56:7f:b4:df:42:7e:f3:35:0c:4e:0d:9e:75:12:59:49:e7:
6b:7a:24:dc:5b:6c:82:11:f7:9a:7a:6d:b0:55:55:c3:44:30:
be:c2:8e:49:51:e7:14:ce:3d:23:5d:00:b1:e4:7e:79:a2:b3:
15:f2:d3:a2:35:3c:12:aa:54:2e:b1:3a:87:be:57:a7:cb:d9:
8b:2a:0c:01:4a:1c:2c:5a:14:b1:98:26:0f:3c:5e:19:b7:b2:
dc:17:a9:1b:d5:2b:87:33:e6:f3:2e:51:66:da:83:07:a5:2c:
ee:f7:a1:0f:7b:dc:60:b1:86:8f:a0:a9:da:a8:8a:74:e7:36:
75:1b:04:f2:7e:c7:6b:00:59:4e:12:38:bd:01:ce:05:cd:1a:
95:91:b7:b1:b8:91:eb:cb:b8:0a:f4:74:fe:9e:83:b2:13:0d:
5d:51:48:52:56:bb:8c:f4:b8:e1:2c:25:55:6f:a2:4e:07:5f:
b6:f3:16:e4:31:b2:08:68:de:e2:e2:a2:fa:2a:db:2e:26:99:
42:e2:9a:f2:9f:43:06:ac:35:1f:81:fd:b7:d7:bc:4a:8f:f9:
47:ce:2f:95:b2:38:08:67:66:8e:b8:46:6d:64:0b:ac:3b:ec:
bc:c7:a1:a1:a6:97:c7:28:88:7d:ec:cd:94:ca:a6:d2:1a:d8:
68:55:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:26 2025 by rpki-client