Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befbf2d4-33bd-301f-926b-a3513a089308.roa
File: befbf2d4-33bd-301f-926b-a3513a089308.roa (raw, json)
Hash identifier: mPFtVkNp8dKq8gpfJYV+wzThp874rsTgdgaPFVISr+s=
Subject key identifier: CB:22:4B:47:16:12:A3:5D:7F:A2:96:DD:87:B1:BC:59:64:4F:81:0B
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F43285848A1360A3A799D8480442D4EC0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befbf2d4-33bd-301f-926b-a3513a089308.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 400275
IP address blocks: 131.153.204.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0a:3a:79:9d:84:80:44:2d:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=99c7b644-e7ba-4a18-ae2d-4ca916e29971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2f:2b:14:ad:7b:8b:31:13:f5:bb:ce:59:eb:
da:54:cd:aa:a2:c1:ed:5d:fa:a2:91:b7:af:52:86:
d1:4c:0a:9c:b7:62:4c:4e:08:36:60:4e:a6:55:8b:
77:a9:a6:d8:56:64:4f:20:0c:e1:e5:60:bf:2e:50:
86:09:f1:50:12:fe:d1:2e:99:60:78:89:0e:a5:d5:
c9:7e:8e:e9:21:08:84:59:b3:6f:c9:e1:da:ff:f7:
19:2a:0a:49:33:45:5f:64:84:45:73:95:f8:07:37:
ef:e8:09:bd:2e:7b:30:ce:bb:b6:0e:60:da:9d:ee:
58:91:9c:0d:c5:c5:91:53:8f:31:c6:01:cb:f2:ac:
46:c8:99:15:d2:1e:f2:8c:90:20:7e:7b:b1:47:07:
c0:68:16:8b:96:c7:4b:de:13:1d:53:0c:da:ce:9b:
6c:82:72:5f:a0:9f:5d:07:74:09:c8:c9:ab:05:d3:
44:8a:f4:40:fd:b3:7a:71:87:89:b8:4c:d1:de:f4:
93:d0:45:07:64:4e:3f:9e:3d:32:e6:fa:47:4e:27:
71:7c:da:85:f7:15:c6:aa:06:b4:27:88:09:a8:83:
28:b6:57:0c:13:4a:48:96:e8:af:93:53:a8:c5:0d:
02:3e:9b:c2:a7:40:51:12:ba:36:f2:e5:e3:5c:9e:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:22:4B:47:16:12:A3:5D:7F:A2:96:DD:87:B1:BC:59:64:4F:81:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befbf2d4-33bd-301f-926b-a3513a089308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:36:8b:50:53:25:13:12:5e:51:cc:21:fe:83:5d:84:ae:31:
45:56:d9:76:ac:97:0c:b4:d1:78:09:77:06:18:c2:63:98:8c:
ca:62:6a:d1:7f:07:cd:70:c3:a9:d3:8f:c8:65:25:d6:94:84:
96:e0:ac:17:65:60:e3:2b:f7:5e:c0:a8:ec:45:0e:1c:c5:a8:
a9:45:44:f5:82:fc:f4:2b:f5:66:66:9a:62:df:18:61:cc:d2:
8d:1c:af:cd:55:4d:b1:39:06:02:08:b0:8c:5a:6c:61:3c:37:
fc:e7:25:02:bf:ae:ae:d0:3e:cf:29:18:3a:d6:c1:c2:f0:b6:
8d:03:32:4f:44:5d:d4:5c:57:58:a6:35:7b:5f:5a:eb:69:17:
de:a1:8b:16:09:9b:4f:e5:d6:66:68:5d:7f:b9:93:a1:d4:f7:
44:d3:9e:b7:0c:c0:b7:ac:1c:07:1e:25:fc:df:dc:9c:d7:27:
e9:d9:87:63:08:4d:45:ad:80:ce:93:c1:d5:11:f6:81:e4:2c:
c3:34:b7:91:bd:60:57:e4:78:2e:b2:af:8c:02:2e:bb:46:cd:
8f:ee:85:1b:c4:3e:a0:14:98:1e:4d:82:c4:d6:ce:48:b1:c5:
35:61:4b:82:df:6e:90:66:fe:ca:15:87:20:62:16:fd:6f:ce:
63:b4:19:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNgo6eZ2EgEQtTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
OTljN2I2NDQtZTdiYS00YTE4LWFlMmQtNGNhOTE2ZTI5OTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii8rFK17izET9bvOWevaVM2qosHtXfqikbev
UobRTAqct2JMTgg2YE6mVYt3qabYVmRPIAzh5WC/LlCGCfFQEv7RLplgeIkOpdXJ
fo7pIQiEWbNvyeHa//cZKgpJM0VfZIRFc5X4Bzfv6Am9Lnswzru2DmDane5YkZwN
xcWRU48xxgHL8qxGyJkV0h7yjJAgfnuxRwfAaBaLlsdL3hMdUwzazptsgnJfoJ9d
B3QJyMmrBdNEivRA/bN6cYeJuEzR3vST0EUHZE4/nj0y5vpHTidxfNqF9xXGqga0
J4gJqIMotlcME0pIluivk1OoxQ0CPpvCp0BREro28uXjXJ5wSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsiS0cWEqNdf6KW3YexvFlkT4ELMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmVmYmYyZDQtMzNiZC0z
MDFmLTkyNmItYTM1MTNhMDg5MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABg2i1BTJRMSXlHMIf6DXYSuMUVW2Xaslwy00XgJdwYYwmOYjMpiatF/
B81ww6nTj8hlJdaUhJbgrBdlYOMr917AqOxFDhzFqKlFRPWC/PQr9WZmmmLfGGHM
0o0cr81VTbE5BgIIsIxabGE8N/znJQK/rq7QPs8pGDrWwcLwto0DMk9EXdRcV1im
NXtfWutpF96hixYJm0/l1mZoXX+5k6HU90TTnrcMwLesHAceJfzf3JzXJ+nZh2MI
TUWtgM6TwdUR9oHkLMM0t5G9YFfkeC6yr4wCLrtGzY/uhRvEPqAUmB5NgsTWzkix
xTVhS4LfbpBm/soVhyBiFv1vzmO0GSE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:49 2025 by rpki-client