Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff022184-8837-3a66-a5c1-7e1e7a988a09.roa
File: ff022184-8837-3a66-a5c1-7e1e7a988a09.roa (raw, json)
Hash identifier: CwXoF7cHkTPX0tEPIIKdF6EWWCSceAl5KrlgZlYip/U=
Subject key identifier: 6B:24:03:C8:BC:B1:EC:58:0B:E5:E6:33:B9:2C:3D:80:95:B1:36:CC
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858491246C0E96387AADD23A7C080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff022184-8837-3a66-a5c1-7e1e7a988a09.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 202
IP address blocks: 130.174.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c0:e9:63:87:aa:dd:23:a7:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=bb0bc3b5-d31a-4216-8aba-27626bc96466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:ba:7d:11:9e:a3:75:d1:5d:fb:1b:88:69:
d9:22:ab:62:f0:fa:b2:ee:66:d7:7c:f5:0c:e0:ed:
27:25:05:d7:31:03:bc:5e:b6:81:b6:82:25:88:a2:
20:b2:30:60:8c:62:ea:88:ff:80:a2:28:5f:b6:24:
bd:5d:43:e0:39:26:e5:93:ab:18:7b:4c:39:c9:56:
cb:e1:ad:6c:5c:c9:d9:3f:b3:d3:88:ab:f4:3a:af:
09:80:4d:bd:5f:b0:43:fc:e1:ca:09:66:34:46:e0:
4f:95:3b:d5:5d:dc:65:fe:a4:1e:f1:02:77:e3:3b:
e1:88:d4:89:c6:45:d0:b5:77:67:1e:d1:f7:d8:3b:
cf:e4:fd:b3:f1:7a:42:64:fe:80:a2:42:c6:f8:ed:
bd:bf:b3:18:8b:80:18:82:6f:51:d3:ea:64:4d:cb:
4a:7c:10:3d:6b:44:5b:3e:fd:fc:68:f4:21:f3:90:
22:0f:a1:b7:a5:8a:e0:19:6b:79:b5:f9:56:4f:d2:
ed:c2:67:a9:d6:ec:68:ec:86:17:39:0c:37:f4:06:
8a:06:82:33:80:27:05:97:6f:46:f4:42:62:dc:c4:
4c:45:e5:45:b9:d2:a6:80:e0:eb:ad:8d:0d:e8:d5:
7c:25:18:68:a8:fc:9d:d1:fc:30:47:c4:3f:c0:97:
08:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:24:03:C8:BC:B1:EC:58:0B:E5:E6:33:B9:2C:3D:80:95:B1:36:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff022184-8837-3a66-a5c1-7e1e7a988a09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:10:4c:d1:94:41:b1:c2:2c:e6:ff:de:14:42:5d:86:95:3a:
b7:bc:6a:b4:17:9f:6b:28:66:de:25:47:e3:10:22:3c:cd:71:
70:10:d9:57:84:d7:57:5f:75:a4:8a:01:e0:a3:8e:76:73:11:
ae:f4:4d:3a:84:ed:1c:b5:75:d8:a6:a0:27:81:d0:f9:84:c8:
ff:46:d6:a1:fb:a6:e6:84:e3:46:e4:f4:c0:d9:75:28:35:f8:
2b:0e:a5:2d:32:06:f4:1f:a8:60:31:be:51:a4:03:f4:ef:02:
23:a1:2b:7b:e4:87:5a:5b:7e:f1:89:80:31:33:db:d8:ba:3a:
d8:22:7a:44:88:54:0c:75:31:32:7b:a6:82:25:39:58:44:f5:
45:01:95:2d:d4:dc:0a:9d:76:bf:72:df:70:97:bb:e6:f9:ec:
b8:36:1f:5c:69:b7:25:d4:22:19:e1:f4:11:b6:08:f5:85:2f:
e9:ae:54:f6:39:8a:d9:e0:1d:51:4d:19:97:c8:ef:80:96:07:
1e:8c:05:1c:0b:e8:c7:a4:d5:bf:33:1f:1d:5a:68:b3:87:2f:
3a:b2:f7:08:5a:55:e1:f3:f7:fe:9c:94:48:4c:31:dc:6e:d2:
29:34:a5:9a:cb:45:1f:8b:1d:a2:8d:fe:54:89:25:d6:3a:3d:
1b:6f:d8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:04 2025 by rpki-client on console.sobornost.net