Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bf4148af-8cd4-36de-bd6e-b123d9726863.roa
File: bf4148af-8cd4-36de-bd6e-b123d9726863.roa (raw, json)
Hash identifier: D3P+YTnekZw8Pz754ZFSJJ5Ut9eG/g57c1oIiGXsIfo=
Subject key identifier: 5D:76:DD:3E:45:EC:71:04:94:CE:A5:E8:10:21:29:7F:5D:B2:4F:E4
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858488DAB4D8B1A90987BCD9FDE80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bf4148af-8cd4-36de-bd6e-b123d9726863.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 19437
IP address blocks: 131.153.232.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4d:8b:1a:90:98:7b:cd:9f:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=a66695a4-edc7-4050-9b90-0e106e6bc848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:09:b8:0d:36:0b:a6:ef:16:50:68:2f:db:
05:07:37:a6:8b:d0:bc:44:90:7c:53:bc:c1:ad:64:
0c:fc:4b:25:a5:0e:cc:34:4e:7e:b9:ff:00:bc:ab:
c1:12:f4:ca:39:e9:ad:71:28:d6:e7:b2:fc:00:a5:
2d:75:22:ed:83:7b:3f:6c:d8:6f:3a:0f:8b:ed:4c:
6f:87:91:23:e0:84:6d:90:be:8c:c9:7f:b5:40:d3:
83:66:d5:30:26:e9:ce:b4:20:21:e8:17:99:8b:01:
b7:06:18:af:4f:77:a9:d5:03:e7:b4:56:2d:34:40:
9f:3e:e4:91:d5:ce:85:ec:be:b3:65:8d:0c:ef:25:
d5:db:71:f7:b7:c1:80:3b:6c:94:05:78:cc:f6:d1:
f5:2a:d3:bc:a9:f8:21:ad:a6:9e:66:9c:78:be:b2:
af:e8:9a:61:f1:55:48:09:97:5b:2b:8b:85:73:b1:
06:f0:6e:a8:aa:57:65:91:80:ed:c5:d8:0a:2a:3f:
c9:94:73:72:3d:01:1a:b1:bc:e4:60:cc:ab:22:e6:
4c:5b:10:0b:b8:7c:26:39:f2:8d:6b:16:cc:26:ba:
6a:ea:82:2e:25:d2:d5:51:79:0d:1e:fb:1b:75:62:
17:9a:1a:32:a0:0b:42:de:1c:43:01:1d:f9:a2:d6:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:76:DD:3E:45:EC:71:04:94:CE:A5:E8:10:21:29:7F:5D:B2:4F:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bf4148af-8cd4-36de-bd6e-b123d9726863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:7b:1a:21:35:7a:6e:d9:1b:1b:d1:a0:11:88:86:ab:39:c1:
d8:b0:52:c9:9f:0e:45:f2:f3:2c:66:f1:0f:b4:11:4d:2f:4c:
76:e1:ef:f9:80:31:79:34:96:bf:9a:30:20:53:61:3c:77:d3:
bc:11:64:69:69:b2:ed:76:d0:31:18:b9:74:bc:c1:b8:0c:1d:
90:14:70:b4:cc:a7:74:34:34:5f:47:dc:a1:8b:48:06:73:ae:
81:3e:f3:4b:b6:51:54:da:f6:40:4f:22:2b:b6:4c:6e:0c:c7:
ce:ef:95:fd:66:71:f9:03:0b:49:7a:54:08:7e:87:b9:d7:ec:
e9:26:b9:48:42:de:00:14:83:5f:c7:dc:a8:6f:98:33:ed:a8:
8c:d2:e1:a9:b0:cd:ed:8d:b8:e1:39:4f:4f:be:cb:31:f9:0b:
a2:a0:a3:3f:18:8c:45:fb:cd:3f:03:f7:39:34:af:a2:50:4a:
3b:c7:8c:c5:48:59:47:df:c2:bd:5e:9a:8d:2e:d2:f7:9a:67:
ed:85:3f:f4:53:e1:25:51:1c:53:ab:9d:40:8f:62:31:68:c7:
00:ee:c2:da:c3:06:bf:c9:82:40:f9:b6:72:96:4e:24:37:20:
d2:e6:b4:23:72:20:fd:c4:b9:c7:08:ef:0a:5b:1d:1f:e9:43:
45:69:b7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:59:51 2025 by rpki-client