Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a4f2b49c-7ed9-34b0-a05f-87fe78c41457.roa
File: a4f2b49c-7ed9-34b0-a05f-87fe78c41457.roa (raw, json)
Hash identifier: atPViUnXCtAFjiM5khnaKlhxN+jbGvfZUXz1hMVJcs4=
Subject key identifier: F2:62:AF:2C:7D:8F:06:20:DC:AA:04:C9:5E:68:5A:3C:27:28:CA:6B
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490CB1690F953B727F7E3D8100
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a4f2b49c-7ed9-34b0-a05f-87fe78c41457.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 19437
IP address blocks: 131.153.71.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:69:0f:95:3b:72:7f:7e:3d:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=607cd203-dd03-4589-963b-a7bd8581a830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:59:fb:68:64:c1:9c:eb:d1:cb:f9:e3:be:
a5:74:49:9d:ac:a9:97:37:08:69:ed:92:58:ff:47:
dc:18:fa:6b:b3:30:09:86:ca:ca:bb:a6:78:b9:1b:
fc:96:50:56:3c:3e:fb:08:8e:62:95:db:7a:82:ae:
ef:7a:62:3f:c6:8a:90:46:18:7d:2e:bc:e2:d5:12:
a7:0e:95:bb:90:9d:32:72:59:7d:68:94:c2:f7:3e:
63:6e:83:4e:fb:73:ff:0e:68:fa:cc:4d:c2:66:19:
a5:50:e4:2b:fe:c8:d7:a2:da:0c:aa:ad:81:0c:f7:
ca:67:2d:39:06:53:78:ef:62:8f:d9:f5:2f:40:0e:
dd:f3:28:03:55:48:25:8b:4c:5f:2e:f7:64:f7:c5:
df:1e:f4:e2:70:a8:30:f9:66:99:4e:85:8d:dc:6d:
51:50:14:c6:12:26:2a:cf:2f:74:02:b2:24:0a:34:
05:46:56:8f:b1:1c:b1:e6:b7:db:13:51:e5:51:3b:
bd:64:d4:94:57:f3:3b:8e:96:7c:c7:d1:d1:f9:83:
e3:7d:f1:35:e4:cc:49:b2:75:ce:19:cb:5a:9b:f5:
38:35:6c:dd:dc:cf:3e:24:62:a2:cc:b8:d2:6d:d6:
22:bd:68:7f:30:bd:f1:fa:ad:09:df:80:6c:ce:03:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:AF:2C:7D:8F:06:20:DC:AA:04:C9:5E:68:5A:3C:27:28:CA:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a4f2b49c-7ed9-34b0-a05f-87fe78c41457.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:7f:34:37:4c:2d:7b:23:5c:2c:a2:6b:a2:57:bb:d0:e2:1a:
31:b0:78:7b:34:18:95:84:5a:0a:4a:a5:17:95:72:0b:d5:b0:
7c:5f:d9:69:60:ad:13:05:7c:bd:a4:d1:05:3f:6d:ef:aa:0c:
35:19:28:4e:19:b5:4d:e7:14:5e:4d:f5:17:17:56:9a:ad:34:
38:d0:e5:4f:e9:cb:1a:db:49:ef:48:9f:dc:be:d4:9b:79:fa:
98:33:94:4e:08:0e:67:1d:93:ec:cb:09:fe:01:ca:ad:4c:9f:
57:29:8c:19:7a:bb:b0:78:03:7e:ed:ee:16:75:55:cd:df:19:
d6:05:d8:b9:d7:95:40:cf:22:1f:81:b8:a0:49:38:c5:c8:17:
2b:9b:51:d9:da:32:4f:1f:03:9e:92:ba:37:60:2a:dd:d8:86:
e6:cf:03:1e:b9:0d:99:b4:55:6d:d4:08:13:ef:42:aa:65:54:
97:78:9b:66:45:af:6e:30:a7:18:71:a4:1e:03:8f:78:8d:74:
bc:45:2c:9d:8c:bb:21:0d:a6:01:e5:45:0e:97:8e:b1:48:f2:
96:ce:dd:20:6c:5f:04:49:f2:1f:bf:2f:60:23:52:e4:34:11:
b1:56:fc:57:29:5a:2a:5b:87:9d:3c:fd:fd:3f:d6:07:30:e4:
0f:c1:1a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:36:03 2025 by rpki-client