Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa
File: 1953286a-a99c-383c-b91c-34fa8adbd086.roa (raw, json)
Hash identifier: LRIhXyY8l7fU+BfL0O5ZHMUVfEgifxuZlgBdtDyf0zk=
Subject key identifier: 50:66:FE:B2:63:EB:F2:41:F8:60:AA:74:A0:37:D4:89:8B:35:3A:9F
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490E16B9F9627961148FE441C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 19437
IP address blocks: 131.153.162.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:b9:f9:62:79:61:14:8f:e4:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=d54f8c30-72a0-44c2-a17f-f18bb21f2cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:19:46:82:7e:14:40:e9:d4:cc:69:02:24:
72:46:20:02:f7:44:28:46:af:e6:56:e2:6b:ac:a8:
19:f6:3e:63:eb:91:fd:dc:02:c3:23:e4:ce:c8:20:
91:00:e6:73:9a:4c:b8:8f:ef:9d:38:9e:10:3e:be:
50:7c:86:a6:af:94:37:90:bd:68:1f:ad:b3:67:1a:
af:af:d6:5c:be:06:20:a9:db:f0:10:11:1d:29:32:
6b:80:2f:b2:0b:9c:41:e2:32:8e:03:e3:5c:0c:3d:
24:17:2c:34:31:62:d5:19:d7:5e:7e:03:cc:38:76:
9a:2a:99:23:40:30:9d:69:a4:43:70:8b:1e:47:20:
b7:0c:fb:47:ea:12:1a:ff:c8:54:86:98:37:57:b4:
81:27:53:5b:5a:49:8b:91:7b:b4:ca:7d:10:01:77:
3b:f2:c0:c4:d3:bf:70:ec:88:fa:16:d7:5a:b5:e7:
44:7e:bb:5a:e0:d3:7f:50:c6:f9:0b:e2:00:9f:9d:
82:7d:d8:e3:1e:e8:c0:c2:1f:c6:23:5c:f0:6b:f8:
79:91:1c:9a:bb:d2:15:40:f5:a4:dd:7e:2e:28:40:
65:18:51:92:4b:78:49:14:c5:37:b2:52:83:b8:d5:
4c:2e:3c:6d:3f:0c:e8:25:95:1d:38:61:ce:60:fb:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:66:FE:B2:63:EB:F2:41:F8:60:AA:74:A0:37:D4:89:8B:35:3A:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:02:52:76:80:cd:9a:77:f7:c4:a2:cc:2c:de:d8:9a:fa:d3:
b5:b0:db:4a:c5:92:f7:07:88:94:c5:a0:de:6b:07:d6:54:e4:
d4:3d:02:db:6a:fe:32:3c:e2:f9:4f:73:4c:ac:e2:ab:18:12:
ba:af:29:54:c8:6f:b5:9d:a4:26:f0:b6:4d:38:df:ae:82:02:
cc:6c:b1:01:c5:a7:14:46:18:21:97:84:f2:fc:14:36:53:50:
40:ee:ba:9a:73:aa:f7:65:6b:26:ea:a9:45:94:75:0a:72:bd:
55:7d:fb:9e:c4:77:b9:23:04:78:06:5c:1e:7c:52:fe:f7:25:
11:8e:52:2b:66:06:ad:06:fc:1b:84:1a:fd:80:99:8c:c2:b2:
35:5e:1d:4e:d1:cc:ba:3d:92:09:08:59:18:97:3c:84:00:12:
ea:9a:5a:fc:56:53:99:b4:cb:6d:d3:77:a6:a5:8c:6c:87:23:
88:7b:78:11:45:08:62:8b:ba:fa:0c:66:fa:2d:4e:a3:27:8e:
e1:42:3d:a8:ae:39:69:89:2a:a1:eb:3c:78:fd:d8:fc:97:ba:
c7:49:25:e5:b2:8c:3f:87:4a:2c:cc:9b:99:97:fc:1f:13:4c:
e6:bb:2b:39:64:fa:08:86:5e:da:7c:33:b4:e9:29:d9:cb:63:
c1:4b:49:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:23:03 2025 by rpki-client