Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa
File: 845a3255-66a8-34dc-a162-c938627caa3a.roa (raw, json)
Hash identifier: JySZKQtJuMMjmoTCzpG8fqVzug0GDWHGIjuDWMNDLvQ=
Subject key identifier: 88:FC:42:DC:EE:0B:33:53:EE:FD:1A:E4:AC:A2:42:F4:FF:2F:C6:E8
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490E16BFFFA6A52CA6E34402C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 11572
IP address blocks: 131.153.24.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:bf:ff:a6:a5:2c:a6:e3:44:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=54eee1fc-6de9-4a4a-bf42-32958aad4e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ba:d5:35:b6:fa:82:d7:7d:1b:7e:aa:01:b1:
e2:2d:b3:28:41:da:ee:43:0b:bd:55:41:4f:45:66:
03:1d:8a:5d:12:7c:92:95:e1:e1:1d:2b:85:df:a2:
76:00:ab:31:3d:d0:db:4a:84:8e:d2:c4:0d:52:4d:
ea:b5:56:4a:b6:aa:b8:d3:ad:d3:fd:6c:7b:5a:1c:
8f:17:5a:d7:45:9d:03:7c:8a:1c:5f:59:43:38:a6:
58:9f:9a:fe:d6:f9:f3:b6:d9:fa:36:14:cb:5a:e8:
08:85:5d:55:4c:3c:8c:ac:7a:84:20:57:18:db:b5:
fd:70:a7:bb:08:f6:83:5e:6b:b3:52:37:99:62:44:
b0:3e:f1:ea:d6:ca:6c:73:89:c3:52:28:60:4d:6f:
b2:28:b3:0c:33:ea:44:df:d8:bc:b2:6d:15:1e:13:
3a:96:f0:bf:a7:b8:4a:9e:62:e0:98:01:2f:12:21:
f5:44:8f:1d:e1:1e:e3:53:4a:18:c7:e8:1e:1c:00:
aa:7e:c9:a1:ed:2b:62:20:96:7d:3f:0a:3c:69:43:
cf:cb:2b:04:41:ef:4b:fd:3c:ca:43:06:21:63:1a:
d1:c8:55:b7:cf:3c:d7:12:d2:24:11:39:15:0b:96:
27:8a:79:1a:35:5e:44:89:8d:96:2c:cb:3d:9b:bf:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FC:42:DC:EE:0B:33:53:EE:FD:1A:E4:AC:A2:42:F4:FF:2F:C6:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:10:bf:36:23:f8:b7:03:e2:5a:81:4f:bc:fd:9a:fa:a2:08:
d6:d2:bb:3d:eb:57:66:5e:b1:c6:84:a0:27:d8:83:c3:69:e3:
95:de:b9:26:14:d3:d1:fc:8d:30:f5:79:5d:7d:0a:12:60:9b:
5b:d0:bf:34:a8:d0:ab:9a:eb:00:58:df:e3:22:1f:51:44:cd:
f3:d1:59:04:90:38:d8:30:88:99:04:1e:b9:bd:3c:6a:92:54:
73:03:37:21:26:18:ee:ff:dc:bf:9e:33:e8:43:10:3f:fc:17:
b5:dc:db:76:04:d2:2f:82:1d:ed:e6:8f:80:d4:de:7e:9c:77:
39:b0:a2:2e:26:9d:10:a5:bf:58:af:e4:85:22:c9:50:c1:a2:
0b:73:07:7d:6e:32:99:f3:0f:a9:1e:4d:39:4a:68:ea:1e:ce:
a5:8a:a4:be:ec:03:11:84:6d:8f:df:46:95:f4:2c:e9:23:f3:
0f:b8:93:5b:7c:64:15:4c:7b:b7:b1:c3:5c:3c:f7:bb:99:3a:
70:4d:a4:0b:18:32:26:2a:20:8a:42:bf:d9:3d:50:4e:6c:ce:
c7:d8:7b:12:09:d7:19:8a:02:94:65:c2:e5:02:bf:9e:3f:4e:
75:32:3e:43:4a:4e:c4:2d:1e:20:18:8f:44:23:01:61:e0:c5:
73:26:14:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFr//pqUspuNEAsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
NTRlZWUxZmMtNmRlOS00YTRhLWJmNDItMzI5NThhYWQ0ZTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrrVNbb6gtd9G36qAbHiLbMoQdruQwu9VUFP
RWYDHYpdEnySleHhHSuF36J2AKsxPdDbSoSO0sQNUk3qtVZKtqq4063T/Wx7WhyP
F1rXRZ0DfIocX1lDOKZYn5r+1vnzttn6NhTLWugIhV1VTDyMrHqEIFcY27X9cKe7
CPaDXmuzUjeZYkSwPvHq1spsc4nDUihgTW+yKLMMM+pE39i8sm0VHhM6lvC/p7hK
nmLgmAEvEiH1RI8d4R7jU0oYx+geHACqfsmh7StiIJZ9Pwo8aUPPyysEQe9L/TzK
QwYhYxrRyFW3zzzXEtIkETkVC5YninkaNV5EiY2WLMs9m7/N2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIj8QtzuCzNT7v0a5KyiQvT/L8boMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODQ1YTMyNTUtNjZhOC0z
NGRjLWExNjItYzkzODYyN2NhYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcQvzYj+LcD4lqBT7z9mvqiCNbSuz3rV2ZescaEoCfYg8Np45XeuSYU
09H8jTD1eV19ChJgm1vQvzSo0Kua6wBY3+MiH1FEzfPRWQSQONgwiJkEHrm9PGqS
VHMDNyEmGO7/3L+eM+hDED/8F7Xc23YE0i+CHe3mj4DU3n6cdzmwoi4mnRClv1iv
5IUiyVDBogtzB31uMpnzD6keTTlKaOoezqWKpL7sAxGEbY/fRpX0LOkj8w+4k1t8
ZBVMe7exw1w897uZOnBNpAsYMiYqIIpCv9k9UE5szsfYexIJ1xmKApRlwuUCv54/
TnUyPkNKTsQtHiAYj0QjAWHgxXMmFBc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:17 2025 by rpki-client