Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90e8d75c-c4c3-3b58-a17b-2b9e2edce2a4.roa
File: 90e8d75c-c4c3-3b58-a17b-2b9e2edce2a4.roa (raw, json)
Hash identifier: w5MMBoLKAL09Gf3CxyZy3BqIsjxeisNP2jmL0JB9dFQ=
Subject key identifier: 89:F5:1C:84:A7:6C:69:62:DD:08:E9:05:72:70:BE:83:57:CD:12:C1
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246C3D6995CEEBE600CBF80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90e8d75c-c4c3-3b58-a17b-2b9e2edce2a4.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 202
IP address blocks: 130.174.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c3:d6:99:5c:ee:be:60:0c:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=90491a14-f22d-47e1-9fe2-00d1992cdf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b1:14:d3:c7:28:cb:c0:a1:42:b3:53:91:d3:
45:21:cc:e4:fb:7a:b9:e9:84:11:e4:29:f5:cb:30:
61:6a:f4:c4:bd:8a:1b:87:a6:17:7f:23:c2:a1:e3:
23:85:bd:73:36:40:7e:52:f4:22:49:94:02:8a:57:
02:a9:ae:97:0a:a4:f4:56:35:07:5f:59:60:85:25:
e2:0f:4f:c8:ba:39:9a:a4:9e:57:89:9c:7c:42:8d:
3f:54:15:8f:4b:e1:88:5f:c2:68:5b:65:f5:2d:73:
68:ef:62:2a:51:89:48:4f:4c:ef:08:60:65:31:b5:
1f:40:44:b8:63:bf:94:ea:0f:93:e9:48:48:ea:50:
e2:14:b2:9f:19:e3:5a:a6:4e:df:02:8a:a5:29:02:
63:53:74:c6:ba:fa:70:44:af:2c:0b:14:27:3d:38:
a3:1a:7e:18:a2:00:c0:16:d3:13:06:42:36:05:79:
2a:82:63:8b:7c:79:7f:cb:2a:87:cd:0b:5c:ef:f5:
5f:c8:f0:7f:3e:a3:33:78:79:0d:cd:3f:e3:97:c1:
d6:85:da:dc:e5:74:04:e1:6f:6d:7c:e2:6c:a8:75:
e3:af:3c:fa:79:f3:53:4b:43:33:a6:0a:6c:51:d8:
b5:6b:cb:e4:7e:2d:a2:2a:1e:9d:fb:06:6b:98:0e:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F5:1C:84:A7:6C:69:62:DD:08:E9:05:72:70:BE:83:57:CD:12:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90e8d75c-c4c3-3b58-a17b-2b9e2edce2a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:40:3c:e4:33:d9:56:77:7b:c5:1c:c9:40:20:cf:c4:08:3f:
ee:a7:0a:94:36:6e:06:29:b2:13:fa:54:d5:f2:eb:22:99:3f:
04:62:29:88:00:90:07:02:65:5f:32:c0:4a:57:f6:7e:73:d5:
af:9e:9c:7e:1c:13:a1:2a:6b:25:d5:44:c1:0c:a0:dd:d9:36:
d0:21:5d:2c:08:bd:36:03:49:09:18:ff:cb:dd:c9:b0:3a:bd:
d8:8d:80:88:12:8b:69:b3:fc:72:7a:a4:35:d7:7e:f4:32:95:
f4:7c:ce:0d:98:a5:9d:fa:1d:b5:c8:3e:03:47:95:13:ad:69:
c8:c8:ed:24:e5:97:9d:d7:a0:8c:eb:17:76:c4:1b:7f:a0:96:
09:35:d6:26:af:f6:d9:9e:e7:1e:01:0a:ee:dd:24:47:b1:df:
2f:56:a2:7f:1a:4a:e9:1f:bd:8d:72:cb:e0:8c:96:c3:1c:4b:
ba:91:c9:7f:28:28:3f:c3:62:a7:4b:b8:04:cf:48:ff:90:44:
61:19:c8:bc:dd:05:7e:e9:07:60:ff:dd:fd:f6:2d:f6:16:a3:
de:a9:4f:98:5e:b2:58:c3:bd:8e:a8:ea:cb:36:26:2f:d3:b9:
73:6d:a9:f5:45:5f:87:92:67:bf:b2:1d:3d:b9:f9:08:68:1d:
e3:f1:0d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:57 2025 by rpki-client