Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e2235c17-6c1c-3c11-a809-2e9ad0ccf7ea.roa
File: e2235c17-6c1c-3c11-a809-2e9ad0ccf7ea.roa (raw, json)
Hash identifier: oRea7J+KIjPLAVS/Fgcyz/DiwdBFyeNxdkmP/In+QLc=
Subject key identifier: AA:45:EF:3F:E0:B1:E1:32:14:0D:8A:AD:F1:5E:0D:90:CC:A9:E8:29
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC277F0B5F32F11DF90EC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e2235c17-6c1c-3c11-a809-2e9ad0ccf7ea.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 3360
IP address blocks: 130.174.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:27:7f:0b:5f:32:f1:1d:f9:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=edb43032-4e55-445e-baa6-25c39999672d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:36:1b:3f:c2:98:74:9d:5f:9a:c4:cd:41:e0:
27:d0:fc:26:c8:60:b6:ba:5a:da:b5:be:de:76:aa:
bf:7a:2a:d7:a6:02:e7:ab:f9:6e:b1:1f:59:cf:eb:
a7:9e:45:78:af:18:4c:05:41:ab:cb:5d:e2:16:0e:
11:95:d9:2d:6b:2c:4f:3c:cc:35:06:f0:9b:df:20:
40:4b:4c:cf:44:cd:28:05:83:bb:8d:6f:1d:df:58:
bd:b6:a0:cc:5f:23:ef:1d:b7:0f:da:5a:49:d7:e0:
fd:94:f4:de:61:a5:26:65:1f:1e:bb:79:4f:1a:84:
84:0e:78:71:6d:fa:ce:00:54:e0:95:cf:30:c3:4a:
bc:15:d4:e3:e5:72:30:ef:01:cb:09:1e:ec:eb:6c:
db:c0:54:ee:0f:32:99:48:12:b3:38:3a:f3:57:bb:
a7:a1:56:1b:3a:37:b1:03:42:12:73:96:8d:8a:bf:
ee:59:83:39:d9:ad:2f:8c:84:cb:b9:d9:d6:f2:cc:
b2:e6:a4:ff:09:8f:c1:27:45:48:cb:32:3c:9e:06:
7a:73:a5:e9:4b:ef:95:ae:96:fb:f7:84:e9:ec:b4:
9a:19:c3:ff:d5:bc:b0:1f:53:22:0e:23:6d:a7:92:
85:ae:c2:b2:37:8c:e6:1e:63:64:7b:52:59:4d:5d:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:EF:3F:E0:B1:E1:32:14:0D:8A:AD:F1:5E:0D:90:CC:A9:E8:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e2235c17-6c1c-3c11-a809-2e9ad0ccf7ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:34:d2:67:d9:f8:8f:bb:5a:cb:02:68:9e:62:9c:f8:a8:e4:
9c:f1:80:ff:6a:e9:50:d1:d9:8e:ea:65:86:0e:c8:14:fa:62:
91:39:1e:14:2c:6f:f6:91:d5:4b:23:69:b6:7e:83:e0:5b:fa:
4c:de:93:21:24:01:33:7b:e5:e2:d2:bc:e8:6b:d5:a5:6f:c8:
64:15:6f:b2:2d:3b:fa:0c:3b:21:53:58:59:07:47:35:22:61:
f5:fd:64:97:b1:5a:a7:9b:25:41:31:83:99:0e:ac:22:49:67:
d1:f9:44:d7:ed:c4:83:47:b0:83:1a:03:81:a1:3d:71:86:43:
f5:6f:b7:ec:ee:cb:e0:7b:bf:43:d1:4e:00:5b:cd:cf:f1:9a:
2a:87:fc:8e:dd:ad:02:22:12:93:3e:2d:4f:c9:12:36:5c:df:
e4:87:c2:f6:83:87:88:34:ab:51:a0:12:1e:c8:36:08:31:e8:
8c:13:cb:f6:d5:a7:a2:1f:af:d4:31:39:96:d6:c7:44:bc:c1:
d2:0b:87:03:d0:ec:dc:af:92:05:3a:73:98:b8:c0:5c:b4:9d:
b9:36:73:35:46:e8:2c:0e:d7:be:99:09:55:2c:28:31:25:6f:
45:cf:57:fb:33:4f:b8:35:94:29:fe:ba:71:1e:75:f7:30:08:
03:5e:44:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:43 2025 by rpki-client