Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a273ca3-2b30-30af-8f44-77a7c904ad88.roa
File: 1a273ca3-2b30-30af-8f44-77a7c904ad88.roa (raw, json)
Hash identifier: jjrlOsm7wRY/jFm1LVJcNcRnExcNYK1+S8kcoAL+Lg8=
Subject key identifier: BB:C8:1F:FB:92:45:78:92:C2:E3:ED:C4:57:F4:73:FB:A7:FE:5D:64
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246BE73748CE38049404EE0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a273ca3-2b30-30af-8f44-77a7c904ad88.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 202
IP address blocks: 130.174.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:be:73:74:8c:e3:80:49:40:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=3dcec44f-9daa-4f2c-8e29-67672fa00e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:a6:a7:bd:a3:7d:f9:56:d8:df:5f:39:5c:
d5:a9:59:20:58:32:26:74:6a:48:09:87:9a:c6:c9:
99:ef:3a:31:66:1e:fb:ec:d8:7d:b7:6f:22:b3:24:
6c:7d:d6:9e:ca:47:d7:e7:b6:6e:37:44:0a:ba:e4:
73:39:11:e6:a1:ad:43:23:89:52:06:dc:d3:21:1c:
21:e7:31:eb:8e:fc:b8:8c:19:dc:74:1f:cb:a7:03:
a8:3d:56:95:56:5f:5f:bf:1b:3d:dd:e7:af:e6:8f:
b0:9e:7a:ca:43:0c:e3:34:78:a1:97:b8:71:d5:33:
e0:ae:e6:e9:0b:52:56:76:e6:48:81:f0:f1:ac:df:
c0:1e:50:49:13:2f:1c:ae:03:7e:ce:05:fe:ff:f8:
a0:c0:2d:fd:48:1d:b5:79:76:dc:bb:13:1a:83:26:
2c:ee:2e:54:46:75:e4:95:b2:69:a6:d4:99:f8:23:
b1:3c:d9:2f:66:20:08:88:61:a7:84:fc:26:0f:af:
3c:3d:7c:4b:b3:16:de:83:46:c8:bd:d5:73:7e:d0:
3b:79:49:22:85:36:8a:26:b1:af:07:7c:2e:b4:e4:
f1:34:c2:f9:51:0f:d2:55:c5:e3:be:23:e3:e0:12:
54:e4:9f:e5:2e:89:05:9e:84:2a:35:64:95:08:c1:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C8:1F:FB:92:45:78:92:C2:E3:ED:C4:57:F4:73:FB:A7:FE:5D:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a273ca3-2b30-30af-8f44-77a7c904ad88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:ed:23:60:82:ed:c1:06:d2:f5:6f:61:4d:45:84:70:ff:85:
73:d0:44:68:32:a3:bc:88:e7:be:0f:ea:d1:1a:0b:76:40:a3:
b7:d3:75:5d:05:79:9b:4a:7b:37:c6:e0:36:66:d6:31:8d:39:
33:f4:b9:86:02:30:19:f5:32:8c:08:1d:f3:38:49:76:fe:50:
2e:fc:a6:e9:03:04:23:66:1f:b3:5a:0e:58:9f:c5:50:63:04:
c0:dc:f3:7e:9a:b8:55:7a:22:8b:f2:d6:7f:d2:54:ca:d1:e8:
d5:cd:a1:b0:5d:cc:45:eb:56:0f:5d:49:f9:05:73:02:de:6a:
ab:e9:fa:fd:12:79:a2:28:f4:99:70:2d:5e:8c:f9:df:93:d8:
23:56:ba:a6:2f:b2:6c:5d:fc:da:92:1b:65:11:83:a4:4b:22:
a0:c1:f6:b6:df:d0:2d:61:6d:95:7a:66:e4:e2:08:d9:38:be:
ae:7e:0f:da:8c:23:5d:20:8a:4f:39:67:d3:56:7f:97:83:3d:
3f:b9:77:6a:ad:25:a2:cc:1f:c5:14:ec:e2:38:61:48:12:29:
6c:e9:9f:e2:78:bd:01:b6:21:41:df:12:0e:e0:eb:ab:4b:04:
a4:81:de:bf:bc:cd:f6:e4:46:e3:dd:96:85:0c:53:4c:a0:c2:
fd:0f:6f:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRr5zdIzjgElATuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
M2RjZWM0NGYtOWRhYS00ZjJjLThlMjktNjc2NzJmYTAwZTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJamp72jfflW2N9fOVzVqVkgWDImdGpICYea
xsmZ7zoxZh777Nh9t28isyRsfdaeykfX57ZuN0QKuuRzORHmoa1DI4lSBtzTIRwh
5zHrjvy4jBncdB/LpwOoPVaVVl9fvxs93eev5o+wnnrKQwzjNHihl7hx1TPgrubp
C1JWduZIgfDxrN/AHlBJEy8crgN+zgX+//igwC39SB21eXbcuxMagyYs7i5URnXk
lbJpptSZ+COxPNkvZiAIiGGnhPwmD688PXxLsxbeg0bIvdVzftA7eUkihTaKJrGv
B3wutOTxNML5UQ/SVcXjviPj4BJU5J/lLokFnoQqNWSVCMEGwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLvIH/uSRXiSwuPtxFf0c/un/l1kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWEyNzNjYTMtMmIzMC0z
MGFmLThmNDQtNzdhN2M5MDRhZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjtI2CC7cEG0vVvYU1FhHD/hXPQRGgyo7yI574P6tEaC3ZAo7fTdV0F
eZtKezfG4DZm1jGNOTP0uYYCMBn1MowIHfM4SXb+UC78pukDBCNmH7NaDlifxVBj
BMDc836auFV6Iovy1n/SVMrR6NXNobBdzEXrVg9dSfkFcwLeaqvp+v0SeaIo9Jlw
LV6M+d+T2CNWuqYvsmxd/NqSG2URg6RLIqDB9rbf0C1hbZV6ZuTiCNk4vq5+D9qM
I10gik85Z9NWf5eDPT+5d2qtJaLMH8UU7OI4YUgSKWzpn+J4vQG2IUHfEg7g66tL
BKSB3r+8zfbkRuPdloUMU0ygwv0Pb9A=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:00 2025 by rpki-client on console.sobornost.net