Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6a516ed1-a2ff-3645-8b82-f1fe4e3fb4ec.roa
File: 6a516ed1-a2ff-3645-8b82-f1fe4e3fb4ec.roa (raw, json)
Hash identifier: BaWAvn0tG9oAVlal+iypXwIjihnWEhsFLn6Y0FWIHKw=
Subject key identifier: CF:3F:F5:E3:4D:92:0C:50:02:0D:91:F1:03:1B:09:EA:82:B3:E8:B4
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F43285848AF2B797062B686EBBDFBF900
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6a516ed1-a2ff-3645-8b82-f1fe4e3fb4ec.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 394643
IP address blocks: 131.153.228.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:79:70:62:b6:86:eb:bd:fb:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=fa45f9a7-9a32-464e-80cd-2fd453980cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:05:05:68:3e:a9:8f:0e:1d:01:d4:2b:19:ee:
0e:b0:bc:8f:bf:19:00:4a:a3:18:c8:fb:b2:0c:38:
94:67:fc:84:f2:8a:78:74:ac:11:00:d2:54:85:2c:
61:d8:46:58:6f:8a:c9:0a:f2:fa:cb:fd:91:64:ad:
1d:fb:c3:3c:f8:54:8c:a0:8f:d0:48:43:5c:2c:77:
2e:fb:42:f4:b1:79:43:4f:e0:d3:24:8f:85:b1:91:
68:09:01:34:c6:06:fc:95:5a:f2:9c:0f:e5:d3:fa:
85:0b:50:f7:2b:37:5c:bd:bd:e5:b4:9b:ff:f5:e6:
ae:ec:2f:23:63:96:76:ea:a8:7d:b7:53:12:ac:18:
fe:4d:fa:5b:f6:31:bb:e7:5f:28:27:d7:6e:23:15:
ba:29:5a:45:a2:2d:36:35:a4:89:6a:3d:fd:30:d7:
b7:b4:bf:24:c9:fd:2f:3c:0f:42:8d:16:ef:68:5d:
06:26:b0:56:ab:8b:a7:7e:77:98:33:49:ba:ec:cf:
71:99:e9:96:a2:7d:40:35:c7:71:42:f5:8a:0c:45:
53:3a:06:3a:ad:29:f5:ab:12:a1:72:10:69:22:d6:
da:45:e2:23:43:e3:f8:3f:d4:a0:e4:7f:1a:14:1a:
64:61:eb:5d:36:c6:7c:ab:fe:96:0a:c9:44:f6:fc:
4b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:F5:E3:4D:92:0C:50:02:0D:91:F1:03:1B:09:EA:82:B3:E8:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6a516ed1-a2ff-3645-8b82-f1fe4e3fb4ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:57:1c:25:e1:f9:82:89:80:17:da:6f:19:f9:f4:f0:20:1c:
81:65:eb:f4:01:04:29:20:72:2f:bc:ba:64:3b:26:e6:c3:6d:
a2:16:f0:13:53:da:c1:7e:b2:d5:42:e0:4a:1f:f8:23:41:09:
f9:4c:52:c3:42:a6:c2:01:25:2b:b8:dc:51:66:ff:9e:7d:e3:
8c:42:4a:c1:89:37:2d:ba:2c:e0:4a:f3:4b:f3:2e:d5:3b:f6:
49:1a:3b:cf:98:7f:70:d3:ed:45:22:c0:c7:4d:81:1f:bc:45:
6f:71:9b:51:38:7a:e0:06:34:a2:40:eb:93:0a:23:8b:36:08:
b8:b1:13:1d:6e:b5:4b:20:62:31:32:cb:86:b5:54:f8:e7:fc:
e6:cf:69:a1:b4:04:c3:00:62:f9:be:55:39:6f:f0:ce:7d:0c:
b4:51:ca:2a:b8:37:e6:5a:eb:c7:7e:29:1b:32:5f:5e:98:94:
40:53:04:f8:56:7e:d2:d0:69:48:48:4a:c4:e6:ca:ca:4a:33:
6a:37:c2:06:43:63:f1:0f:39:09:cb:1e:55:67:79:83:8c:66:
fb:f2:c3:28:05:04:e6:65:62:1b:f6:45:5b:82:46:f9:eb:97:
17:8f:7d:da:74:26:50:1d:0a:74:28:58:b6:a0:91:14:20:37:
56:30:67:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:22:38 2025 by rpki-client