Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a793250d-13f2-34d5-bf26-a125cf9b1a5c.roa
File: a793250d-13f2-34d5-bf26-a125cf9b1a5c.roa (raw, json)
Hash identifier: ihEHeQJ6sRxk6kqc0KxVzB0ETNaOEgdXAfKBrlY3DjE=
Subject key identifier: 90:2B:78:17:7A:B6:FD:E8:DC:B5:42:3A:E6:A3:51:33:B1:2F:40:81
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246B3C03FEAC93953F76480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a793250d-13f2-34d5-bf26-a125cf9b1a5c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 203
IP address blocks: 130.174.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b3:c0:3f:ea:c9:39:53:f7:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=f400b50a-2cf4-423f-bb98-71979565924f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:41:16:d1:ba:e4:5f:4f:be:3c:d8:39:c0:
84:0c:7f:8e:ae:b9:87:03:5f:2e:8a:59:b6:70:3b:
e3:95:86:49:b6:9d:ab:e0:6f:5b:9d:c1:51:37:8b:
22:72:d4:0d:a5:0d:92:df:6c:71:d6:c5:ee:8b:91:
0e:7e:64:68:45:9c:3b:6a:ca:42:9d:e0:54:da:11:
b7:89:ef:e7:5d:64:57:33:82:9d:58:c9:06:31:4c:
21:1e:dd:80:43:46:93:e9:22:e1:fd:09:89:fe:00:
93:fa:2f:7e:26:d5:5d:45:4a:b6:6a:01:06:e6:d8:
d8:dc:0f:8a:07:98:d8:d0:e9:f8:12:b9:eb:34:a8:
7b:10:b0:b7:61:24:75:f0:5f:a3:2b:86:13:08:08:
a3:70:11:5a:61:5f:4a:54:63:ea:66:61:1b:9a:fa:
d8:73:ef:be:71:4d:e8:cd:e5:53:a5:80:de:e8:16:
54:5f:4d:ed:aa:ef:d9:4f:16:6d:ec:3a:16:74:a8:
93:0a:c8:2b:0c:15:18:03:97:47:09:7e:e2:43:a8:
9e:25:ca:b5:21:fd:f5:93:a3:9e:18:5c:8a:4f:b8:
f5:64:e4:17:57:2f:40:12:e8:ee:3c:76:47:a3:d5:
37:f7:d9:83:11:6b:aa:38:a0:ec:c1:9a:c8:c8:c9:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2B:78:17:7A:B6:FD:E8:DC:B5:42:3A:E6:A3:51:33:B1:2F:40:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a793250d-13f2-34d5-bf26-a125cf9b1a5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:a4:0e:93:f2:cd:63:fe:cd:e1:bd:c7:49:9b:78:06:57:f4:
be:a6:fc:c5:75:c4:e6:14:da:1b:30:e0:f2:23:1d:9e:2e:b2:
18:fd:7a:a3:dd:16:cc:1b:0a:ef:f2:4f:12:83:ab:54:07:e8:
7b:c8:ae:2e:f9:4e:49:34:c2:2b:ff:9e:e0:af:66:ea:1b:d9:
dc:3e:73:29:91:a2:70:d8:9e:94:c3:4e:dc:87:56:10:ec:27:
fc:45:3f:74:60:f8:1a:9e:c6:cc:db:3a:8f:d8:e0:71:06:70:
4d:5e:d2:63:3a:f1:00:e6:b3:ab:97:62:14:aa:73:ad:84:d3:
69:55:d4:70:c4:7a:a5:29:08:54:bc:a2:9b:d2:cf:57:09:a3:
e2:03:16:7b:ba:a9:4d:95:76:4b:8b:69:af:51:97:ab:45:6b:
da:92:f3:f6:96:ee:80:5d:86:e9:86:8b:9d:f3:22:19:1e:2b:
85:6c:11:ca:63:a6:c0:0b:d0:67:f2:2a:e6:96:8a:f6:56:48:
c0:74:8b:1e:5f:f3:c6:4d:8d:1b:9f:82:f4:bc:c5:df:88:23:
da:e0:6a:60:b5:40:f8:e4:7a:c6:a7:cb:af:93:aa:d1:ba:f7:
5f:2f:4f:21:e4:be:fe:ce:a2:d1:a3:9f:f7:8f:1e:be:7d:0f:
b0:65:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:22 2025 by rpki-client