Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b55a739f-372c-325e-887b-2f006cd12c3e.roa
File: b55a739f-372c-325e-887b-2f006cd12c3e.roa (raw, json)
Hash identifier: k36IQtOYcsugtNBWBwdhTAFjL2HLumdq+9Wg1hTJ0NY=
Subject key identifier: 96:9A:47:D2:1C:13:03:A0:C8:87:94:7B:2D:62:A6:BB:46:B1:E6:53
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246BEBFE9420DF5F6B93180
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b55a739f-372c-325e-887b-2f006cd12c3e.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3356
IP address blocks: 130.174.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:be:bf:e9:42:0d:f5:f6:b9:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=6e91a303-b6d5-4880-b8f6-8c2c3f953eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:e3:a2:08:0d:dd:4e:69:1a:45:12:a2:09:
14:85:87:7d:43:76:70:12:a9:a6:6b:2e:c6:2e:95:
90:ff:28:c6:4b:ba:5e:a3:05:05:8a:02:0f:03:ad:
c1:09:21:e3:0a:32:66:cf:0c:61:1e:cb:cf:ef:77:
e3:ef:2f:33:fc:fb:03:e1:03:33:d0:e3:77:df:89:
af:18:e1:7b:85:34:b8:b5:ab:6b:0a:ab:95:34:e6:
b1:c5:19:67:6a:c0:d2:d2:18:1a:3d:c9:21:2d:6b:
ca:97:34:dd:e8:49:a7:05:1e:af:6f:28:d5:db:db:
d0:4c:63:91:d5:30:e3:d1:80:2a:19:2e:5f:9d:a7:
65:37:2c:d2:18:6b:c3:5f:24:96:3a:e0:e7:51:ae:
a0:2a:69:ad:32:35:d6:f4:1b:36:33:b9:17:77:46:
73:ae:0e:45:9b:ac:80:df:43:64:59:f3:81:26:74:
21:03:17:a4:85:4a:d0:1c:8f:3b:46:c7:40:c7:02:
02:19:30:ef:9d:58:86:b2:bc:03:78:85:25:78:7d:
cc:f9:24:67:7d:fa:c8:15:5f:68:78:28:2e:a6:5a:
34:50:4c:ff:04:cd:d0:89:1d:12:84:5d:25:98:03:
b0:b7:59:23:02:af:db:00:44:1d:02:88:d7:35:0c:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9A:47:D2:1C:13:03:A0:C8:87:94:7B:2D:62:A6:BB:46:B1:E6:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b55a739f-372c-325e-887b-2f006cd12c3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:63:98:62:90:7e:2d:92:5a:e9:de:04:86:1a:0e:3b:fa:a6:
33:47:07:18:d4:87:38:aa:27:dd:1e:f7:ed:d6:9f:5b:bc:d1:
b4:cc:33:f6:32:cb:c4:20:62:64:54:16:f4:82:ff:fd:bf:5f:
1c:a3:f6:9e:41:5d:94:df:a3:08:28:ae:8c:d3:e1:5e:ea:ab:
04:e9:3f:c1:fa:71:2e:e5:72:7e:ff:38:7d:8e:f8:50:1c:45:
a8:00:f3:44:db:2a:af:0a:1d:e9:b2:9c:ba:4f:33:69:27:68:
e6:6a:e8:2c:b3:29:db:01:50:5b:c0:f3:40:09:73:9c:69:29:
cb:28:95:07:26:04:1f:ac:66:9d:89:7a:c3:b0:f7:22:a3:70:
ad:86:76:23:39:b6:d6:b0:75:68:f5:cf:39:f0:fa:1e:59:c3:
44:6c:6f:72:1b:81:9e:71:c3:86:1d:32:cb:2b:73:df:ac:9c:
ee:8f:5e:55:6e:49:0e:cd:7c:95:17:b7:0c:ed:88:48:dc:b2:
70:7d:55:77:d6:fa:a1:d5:c6:29:0c:0a:ae:18:f4:2d:86:83:
9a:ca:34:47:2b:a9:6e:14:69:ee:7d:88:5b:3c:92:a6:c1:e3:
ba:2c:ec:0e:e3:e1:d4:18:b9:bf:ef:e9:1a:a6:20:4d:46:4a:
f0:d2:06:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:01 2025 by rpki-client