Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa
File: 69872d89-79da-3819-8185-7de21929d884.roa (raw, json)
Hash identifier: y7osE+XfAMPsZfkjrWU3b8q0siJT/fM1lg0m7Mh2JX8=
Subject key identifier: F3:DB:EA:A0:5C:3D:AC:45:B7:BF:E4:AD:FF:F4:05:35:8A:C7:16:3B
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584930DE5F11A7F20D350C0A7300
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 19437
IP address blocks: 131.153.238.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:5f:11:a7:f2:0d:35:0c:0a:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=a1d195d3-8ae6-4cf6-883a-72d4257ad5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:ff:0b:07:ad:67:ee:35:ba:fa:c8:12:bb:
6e:8f:5f:8e:bf:3e:18:8d:f9:74:13:62:78:f3:99:
5f:eb:ff:5e:22:0b:f9:5e:fc:6a:2f:7e:f0:4e:07:
d1:3d:f4:16:83:dc:d5:8b:db:17:08:82:cd:6f:68:
9c:5d:bd:36:dd:cd:19:87:92:dc:09:51:99:54:44:
8e:67:b2:1f:7c:d4:d4:e2:01:48:e9:3d:3b:a1:2a:
e3:2f:d6:f2:34:03:64:a3:7c:36:3e:b7:24:23:3c:
3b:55:63:77:67:fb:18:31:45:e2:46:7f:2d:e9:43:
4b:ea:c8:3e:31:e8:30:e6:b1:9f:2c:08:5d:83:01:
4d:bf:3a:96:c0:6a:62:ac:51:44:33:e7:71:7c:d5:
e2:d6:78:57:9d:4f:e9:ea:8f:40:cc:39:d6:6c:70:
9b:cd:1c:a3:67:37:e3:a5:48:7f:37:df:a1:28:27:
d9:bf:8c:64:6f:c1:63:08:7c:cf:73:0e:b4:64:49:
c3:4b:c3:dd:0b:78:17:3f:24:8b:bb:0e:ff:a1:6b:
5e:c0:a5:9c:41:dd:b0:3b:8e:1a:b2:0f:42:db:12:
95:39:66:fd:ed:b2:56:af:1c:f5:36:4c:e0:67:f9:
f1:cc:3f:23:3b:80:74:68:f2:2a:ed:ec:42:9d:4f:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DB:EA:A0:5C:3D:AC:45:B7:BF:E4:AD:FF:F4:05:35:8A:C7:16:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:b4:92:36:4d:11:af:f6:7e:45:a5:03:40:4a:16:24:69:84:
f5:08:53:09:2f:8d:a3:6a:21:ee:b8:44:4c:fd:46:97:52:20:
1c:ac:8b:7c:36:33:ca:49:bb:88:bb:a2:9e:bc:eb:c8:ec:b6:
62:b5:68:1d:42:fc:4c:af:50:63:7f:21:53:6a:96:90:f8:25:
e6:49:dc:d2:97:5d:db:1f:1e:d8:b6:fe:62:aa:7c:b3:9a:25:
3c:1d:75:b2:2c:c1:f8:0f:08:fa:76:1a:a1:07:47:e1:32:88:
a0:cf:74:2b:3f:e9:4d:7a:1a:cd:c2:a7:d5:00:ca:90:8f:aa:
ee:7e:db:cb:f2:4d:0e:0d:4e:41:ff:a2:ee:03:38:8d:b5:30:
83:60:33:69:9d:e2:89:d7:6f:ff:76:de:42:86:81:ff:7f:b0:
f0:4c:65:3a:8b:24:d5:d0:71:e6:8a:1e:18:8f:d6:7d:1a:85:
aa:a1:05:6e:10:e4:60:95:ef:8b:4f:c6:d5:72:7d:f0:fe:01:
ee:9a:c6:cd:6c:8d:40:6d:9e:6e:39:a1:c2:b7:84:48:1c:10:
c3:b8:8b:ed:59:46:d5:ee:3f:0f:da:68:c1:7d:76:11:ac:28:
ee:52:62:e1:04:37:ca:4d:7c:28:52:7a:d0:03:e1:5e:64:e4:
ea:de:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:01 2025 by rpki-client