Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/685fb986-a3a5-3144-97d9-27394b9719dd.roa
File: 685fb986-a3a5-3144-97d9-27394b9719dd.roa (raw, json)
Hash identifier: yVEX+kUmQLM2+dE5IVbq8+bXKou0MQTtxCQJBHNeCqg=
Subject key identifier: F5:2D:29:56:7A:D8:A4:13:A8:08:4D:12:B0:6C:25:C5:A5:7E:A1:FD
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490CB16BFCC76047E3049EC400
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/685fb986-a3a5-3144-97d9-27394b9719dd.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 59210
IP address blocks: 131.153.99.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:6b:fc:c7:60:47:e3:04:9e:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=9dda754b-23d1-4d3e-b53e-6adf92b0eed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:20:29:e5:2e:1e:b9:7b:3e:1b:d1:17:d3:8e:
82:ec:99:36:e6:2b:e4:9e:ee:15:6c:7e:42:3d:6b:
f3:26:0a:6b:38:a1:f7:7f:c1:94:db:6c:e1:8c:fd:
d8:b6:ce:ff:90:c8:26:47:07:ca:1e:30:a0:76:6a:
4b:9f:a6:f1:34:e2:21:45:85:e8:ad:56:c8:82:16:
32:b0:5a:da:d6:95:50:1c:e0:c1:20:c8:6c:70:79:
e1:5c:16:f5:64:48:b1:d0:87:39:a8:5b:f8:36:37:
b7:1f:b1:a0:09:0f:35:b0:3a:d4:1b:03:df:60:60:
38:3f:f9:81:4b:8a:bf:57:8b:b6:f7:79:cc:ba:b3:
a7:db:c2:09:7e:85:95:1b:fb:b8:6d:ee:c9:ee:40:
08:25:cc:71:0b:19:1b:cd:3b:08:4f:73:95:57:fc:
a8:d3:26:24:46:95:7e:98:91:c9:37:b2:d5:fa:c8:
fc:9a:25:ac:6e:b6:67:c9:08:04:c9:2f:92:87:61:
8b:18:21:6e:33:59:3f:37:df:3d:90:df:54:10:e9:
88:b0:f1:f5:67:fd:08:37:8c:e8:b6:ba:77:7e:90:
72:dc:2d:54:07:59:bd:0e:5d:4f:2f:f1:5c:73:90:
05:b3:55:04:14:e1:d1:93:24:fc:85:c4:2a:ff:fe:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2D:29:56:7A:D8:A4:13:A8:08:4D:12:B0:6C:25:C5:A5:7E:A1:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/685fb986-a3a5-3144-97d9-27394b9719dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:e2:f3:1f:05:eb:b4:fe:94:22:7d:70:71:b3:cb:f3:05:57:
6d:43:d4:f2:8f:ea:b9:49:34:09:e8:91:61:9f:b4:ad:b8:4f:
9a:1e:3c:73:55:da:e8:26:08:f8:94:98:69:04:31:fe:76:45:
b8:11:98:20:40:ad:f6:b8:86:a5:71:c9:f7:3c:6b:8d:08:5b:
5a:2e:7c:c5:9e:19:52:10:6a:4e:11:21:ad:33:33:20:ad:7a:
08:d2:ac:d1:86:fc:e1:c0:75:29:78:4e:c2:61:55:02:fe:29:
cd:b2:72:ac:9c:bc:3f:ff:6a:8e:dd:47:cf:a7:33:77:6b:30:
66:19:c7:e2:8d:32:f1:df:c9:37:91:a7:63:2e:e2:b2:e9:9d:
e9:1c:23:68:ac:4e:eb:58:23:73:f2:96:65:0a:c1:83:20:be:
62:35:01:c6:28:b0:6d:27:fb:27:ab:07:a1:f1:5d:c9:47:6f:
d7:f6:e8:f5:58:a1:35:4a:ee:79:58:ee:12:30:42:9b:cf:8d:
2e:91:48:82:22:e1:d3:96:ea:75:e0:50:80:46:c6:6c:1b:26:
56:60:a9:28:ee:a9:a5:9c:3a:e0:a2:66:bc:01:55:8d:89:f2:
87:fb:a8:54:06:a3:e5:e6:20:af:ba:c3:59:f0:d8:9c:d3:ad:
f7:4c:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:59:47 2025 by rpki-client