Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/960b2a40-7100-31d4-af76-abe26ceff996.roa
File: 960b2a40-7100-31d4-af76-abe26ceff996.roa (raw, json)
Hash identifier: nKdkEoetLDdUSnNtgXzQB/Q0zQbvd25DfhAEkOv6o48=
Subject key identifier: B7:59:74:D3:F5:72:CB:7C:8F:E7:07:63:A5:CD:60:77:03:1B:DF:62
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246C0AD33C837337147D8A0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/960b2a40-7100-31d4-af76-abe26ceff996.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 202
IP address blocks: 130.174.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c0:ad:33:c8:37:33:71:47:d8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=5a789739-940a-4669-b4d1-b5e43d8dde3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dc:80:97:4b:33:6c:da:29:12:1c:bd:b4:bc:
b8:0b:b0:09:e3:33:7b:10:7c:48:a7:76:d3:58:3c:
23:10:b5:33:52:0e:45:3d:ef:d7:e1:80:66:ac:b6:
ae:7a:5f:fa:03:77:07:6a:b9:6f:c8:94:94:82:50:
d0:be:61:39:36:39:58:6a:30:8b:20:8a:8e:78:52:
1d:2d:67:61:5b:61:1a:c9:62:26:5a:47:d5:44:da:
a7:9f:22:1c:74:07:e7:9c:c7:19:1f:06:3d:81:0b:
10:e7:bd:af:26:a1:75:2f:99:60:4a:bf:24:a1:c7:
54:f5:2d:49:8a:cc:18:34:bb:15:20:30:6c:89:c3:
ae:69:e1:7b:89:69:32:76:e6:58:43:84:8a:b6:fa:
c8:98:1f:b3:73:b8:71:31:db:2c:1a:2d:83:dc:85:
7c:bd:ea:cb:31:f5:42:5a:1a:02:1f:7c:88:bd:0b:
3d:1e:5d:be:32:64:81:f5:80:06:dc:c3:bf:14:06:
4c:a5:50:53:f4:62:89:73:68:a8:7d:7d:58:ec:5c:
1a:bf:34:6a:2b:83:e4:5c:68:1b:26:5a:34:f1:c8:
c7:58:ce:ac:c4:af:70:78:b3:ff:6a:41:3b:1b:6c:
ef:56:40:7a:05:56:4d:af:22:3f:46:1f:ec:da:3e:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:59:74:D3:F5:72:CB:7C:8F:E7:07:63:A5:CD:60:77:03:1B:DF:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/960b2a40-7100-31d4-af76-abe26ceff996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:3d:27:e7:02:8a:cf:be:8a:a9:21:b0:c8:6f:83:3b:31:1c:
8e:fa:41:d3:6c:64:27:4d:57:6e:4b:c4:87:0f:2c:94:bf:e4:
8e:20:f1:9c:17:b6:15:eb:c4:35:6e:3d:c8:18:f7:5e:bf:fa:
e9:8a:6a:a3:c0:57:08:81:79:82:d4:55:25:81:20:a4:ca:74:
24:0e:19:b3:26:bd:94:7c:79:c5:0d:90:b8:87:c6:54:5c:89:
cd:bd:f1:f7:93:70:79:4d:5e:96:71:f1:9f:e3:79:ff:9a:4b:
c9:de:44:2c:a0:f6:5e:be:80:57:12:48:14:3b:b5:a3:c8:8c:
26:f4:ac:97:e3:93:5a:ae:f2:e5:40:86:da:6a:55:b9:af:7f:
91:f1:d4:ef:87:cd:28:18:2d:f0:c1:bf:ce:2a:d9:40:12:c1:
be:a9:4c:a7:ea:43:8c:56:f6:c6:d4:8a:a6:63:3c:0d:61:6c:
78:6d:91:c3:e5:d3:4b:61:5a:22:d5:43:a1:93:cc:38:49:cc:
e2:64:b4:3a:37:66:18:ac:35:5b:05:0d:f4:99:c3:58:22:b7:
51:b5:f0:fe:bc:7c:48:3e:4f:6a:23:67:2f:57:52:29:bb:8b:
fe:61:ed:f9:5f:17:91:78:27:12:a1:b8:f8:07:ef:46:42:47:
2f:4c:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:24 2025 by rpki-client