Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fa828e8-585f-340f-8479-3265c9e2008a.roa
File: 0fa828e8-585f-340f-8479-3265c9e2008a.roa (raw, json)
Hash identifier: A2Tclheo631NmvPbmgg3LXYpXe1ZVaCyEqZxnTnL5XA=
Subject key identifier: 41:3F:A1:4A:BB:C8:03:AE:C0:9C:6F:03:F1:73:98:42:5A:2D:71:4F
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC219E2BA121C0E964C470
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fa828e8-585f-340f-8479-3265c9e2008a.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 202
IP address blocks: 130.174.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:21:9e:2b:a1:21:c0:e9:64:c4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=3ce114ac-1b3c-4729-9b5e-eb7de5818ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:ae:7a:8e:f5:e4:cc:62:37:31:e1:eb:77:
84:ba:9b:6b:54:86:df:18:85:68:9a:8b:67:18:54:
8f:85:18:1c:10:20:f5:42:72:03:07:02:92:83:3c:
0d:44:d3:f2:fe:3b:e0:ed:83:aa:25:15:73:62:ef:
d8:13:e4:a2:d3:b1:30:4f:9e:ea:86:c1:f6:e0:d5:
e0:ac:f6:a9:ad:aa:81:75:23:4f:c2:ae:e8:3d:c5:
8e:6f:30:6e:24:63:6a:f1:b3:47:65:02:9d:ee:3b:
cf:b4:2b:d7:8b:3a:60:19:3c:41:34:58:31:70:db:
18:0a:49:58:e6:87:21:91:16:9e:ff:5d:07:b1:63:
46:1e:90:46:87:12:f8:76:90:7b:8b:4a:31:0c:a6:
21:f2:06:bb:8d:45:47:00:cb:16:bb:3d:dc:a7:80:
bd:00:9f:70:ec:01:eb:43:2b:b5:d8:54:c4:28:37:
da:28:ec:3a:b7:3f:de:c2:74:e5:2d:74:6a:dd:41:
34:bb:f3:3e:88:b0:00:6e:e4:13:c0:a6:42:cf:76:
36:7e:53:b8:1e:6c:9a:32:a9:db:eb:f0:5a:bd:bd:
6a:f4:93:f7:ca:6a:6c:ba:50:88:c5:a9:f9:3b:da:
aa:f4:1a:47:e8:bf:bc:34:71:02:bc:b8:00:1a:c3:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:A1:4A:BB:C8:03:AE:C0:9C:6F:03:F1:73:98:42:5A:2D:71:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fa828e8-585f-340f-8479-3265c9e2008a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:d6:5c:ac:1a:5c:be:2b:22:98:23:d7:e7:eb:81:6e:4f:75:
a9:5e:bc:9d:56:d1:81:32:38:e8:c7:39:3c:11:d4:30:d4:e3:
c4:e7:ba:77:ec:33:f3:5e:6c:9e:ef:dd:00:91:7f:b2:e7:3c:
f3:bd:07:aa:49:2d:8e:2f:11:73:1a:7a:44:95:2f:70:4f:34:
ad:71:ba:06:d3:9e:c2:20:22:a9:3d:aa:af:a8:36:5f:5e:80:
2a:08:98:16:18:b1:8f:82:6a:fc:38:d9:75:dc:24:27:d8:04:
92:c1:45:5d:89:28:98:9a:26:f3:0d:e5:70:6c:3c:e8:93:c2:
eb:b7:19:f5:23:5c:89:5a:a3:8d:d8:8b:9f:35:d9:46:4d:da:
40:ad:4a:b1:c0:e8:41:94:ff:06:7d:43:35:79:ee:f8:40:3a:
5d:30:82:aa:68:01:6e:7d:71:87:8b:7c:5e:68:e7:e2:0c:cd:
45:06:63:7c:4f:8f:d3:a4:68:82:6e:8b:6e:1b:2a:a1:47:33:
30:e2:42:2d:ab:5c:3c:ce:86:f8:26:ab:32:40:8b:18:a6:24:
3a:c2:44:6d:8a:12:24:dd:9f:f4:06:2a:55:16:3b:18:31:9d:
e7:cb:b7:74:7f:4b:ac:b9:57:47:31:71:a8:0b:50:5b:5d:86:
aa:83:aa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:00 2025 by rpki-client on console.sobornost.net