Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ad1c90b2-c732-3cb5-90af-3fb6422126d7.roa
File: ad1c90b2-c732-3cb5-90af-3fb6422126d7.roa (raw, json)
Hash identifier: /GXxmjTZyNjrn4KVcziluIrot6TJQsrL4Gob1z906ZQ=
Subject key identifier: A0:16:AA:C3:05:99:B7:6A:68:35:D6:95:66:2D:62:62:33:0A:99:40
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490CB16B460D320BA5B779C6C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ad1c90b2-c732-3cb5-90af-3fb6422126d7.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 20454
IP address blocks: 131.153.43.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:6b:46:0d:32:0b:a5:b7:79:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=c5bf0781-3aa7-47db-8acc-114133068959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:e3:0f:55:8b:aa:a5:8f:dd:59:dc:ed:63:
9a:a6:23:db:4c:25:56:d6:88:6a:74:85:d8:ff:e3:
df:d5:1a:bc:e3:f3:d2:3d:7e:1d:18:db:1f:e6:8d:
a7:4f:f5:0b:21:c3:0b:df:dd:3a:e4:a3:e6:e9:9e:
bf:2a:36:7b:7d:2c:cb:08:13:51:28:e0:71:81:d4:
19:b9:9f:3e:3f:1f:76:1f:e0:5f:ee:9d:42:74:1a:
46:da:a0:03:18:7f:39:e8:0d:96:42:2d:c0:87:f2:
f9:30:1b:63:6a:55:e5:88:c4:ba:bd:01:95:00:92:
03:d4:f4:6b:fe:62:de:54:51:cb:b2:11:28:14:05:
3b:dd:82:a8:4c:63:82:6d:31:d2:02:a6:fe:12:a5:
86:b3:b7:32:50:26:60:85:78:62:b4:67:d9:32:3a:
8e:f2:5e:2f:ca:51:90:1b:bf:e1:a8:2f:3d:cc:59:
84:f7:08:77:f7:19:2e:8b:9e:4e:1a:7d:b4:58:7d:
cf:b0:03:65:24:54:c2:5f:88:f2:0f:ca:f0:bb:f3:
db:a3:76:d3:97:eb:20:6c:be:bd:1e:26:71:67:e6:
02:d0:82:63:bd:d9:1d:56:f1:57:e2:71:c7:a4:2a:
2f:21:ac:fb:e9:af:c3:80:fb:52:b8:5b:e5:ac:0f:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:16:AA:C3:05:99:B7:6A:68:35:D6:95:66:2D:62:62:33:0A:99:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ad1c90b2-c732-3cb5-90af-3fb6422126d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d8:ff:96:15:aa:fb:96:3a:0d:b2:95:ce:ae:ab:26:de:e4:
98:90:ca:0e:89:eb:f5:3f:8c:7c:40:c5:7e:f6:3a:77:cf:95:
bd:91:e9:85:3b:cd:cb:3c:10:1d:25:07:dd:a8:d4:8f:d3:51:
97:4b:ea:45:7f:04:0c:75:3d:b1:00:68:ca:10:c5:1f:92:3b:
2a:94:e5:b5:01:68:4d:e2:b3:6a:70:93:79:97:0a:4a:8a:f8:
f3:b7:95:c5:f4:20:41:a1:28:1d:71:c7:68:8c:09:3b:17:f4:
80:25:d3:41:6f:78:54:ed:44:2b:b4:d2:74:6b:d1:a0:84:52:
7f:25:fb:78:f8:cb:67:bd:b5:36:ec:f5:2f:94:6a:ba:ed:50:
18:ee:80:0d:1c:27:7c:e6:e6:d2:75:59:93:a9:57:ec:6f:63:
65:e5:38:88:8c:aa:73:0e:f8:c4:e7:25:db:8c:6b:ac:86:5b:
6f:ce:e5:fb:99:08:df:be:08:37:56:ef:5f:fe:0e:25:e9:07:
0e:e9:4e:50:1b:b2:cb:4f:97:f9:97:f7:e4:b9:a7:b2:ec:34:
10:2b:c6:f9:42:65:91:6b:77:e3:66:b6:e2:59:c0:85:cf:0a:
17:2c:18:29:e6:ba:bc:27:2c:34:c1:22:e7:ee:9a:97:1f:63:
ef:8b:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:24 2025 by rpki-client