Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c358e116-64f9-3c27-b0c6-80f1a6292b9d.roa
File: c358e116-64f9-3c27-b0c6-80f1a6292b9d.roa (raw, json)
Hash identifier: djhoBROO+e/jwuOjPMF0CpMpJZpAmeC/uMyeiJL+NRs=
Subject key identifier: 44:7E:4A:F8:89:A9:1D:D0:23:9B:1C:0A:3E:BB:35:E6:8D:3E:F1:BC
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490CB168ECE7D1643322582E00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c358e116-64f9-3c27-b0c6-80f1a6292b9d.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 11572
IP address blocks: 131.153.65.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:68:ec:e7:d1:64:33:22:58:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=57804bac-84dc-4e41-b22d-b4de053c973d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2d:38:69:c5:1d:12:64:7e:a1:51:7a:be:bc:
2b:b6:fd:5c:e0:3b:05:1c:31:44:fb:a8:62:5d:ea:
1e:0b:bb:64:5f:5c:22:38:56:b1:2d:9a:a8:88:8f:
5c:09:4f:67:d5:8d:c3:b0:9f:56:d6:97:cc:c6:88:
3d:2b:b6:c4:87:28:7a:92:69:c9:2e:59:35:b2:a9:
04:56:95:ea:9f:b6:4b:98:92:77:59:a4:9b:aa:30:
9e:01:39:b0:66:6e:a4:41:3d:fa:a1:3e:3e:c9:18:
bc:0e:e0:76:65:21:2c:63:79:50:9d:bf:c0:2c:04:
f5:a5:47:a5:09:c5:37:7a:88:a3:40:6c:e4:6f:62:
69:98:fd:20:42:87:28:f1:53:ff:df:86:f8:21:ae:
27:95:22:24:57:f4:0d:69:76:85:fa:93:6c:fb:bd:
b8:48:55:e1:61:21:ae:06:e2:69:62:e7:20:c9:85:
fe:7b:5a:34:dc:62:23:e6:55:40:a4:e0:26:a2:dd:
47:1d:38:23:1f:2d:52:0d:59:12:88:18:6f:e1:d2:
5e:d3:c4:e7:dc:7f:eb:6e:03:8a:79:90:b9:7b:64:
9d:21:6f:8b:13:a7:85:d2:cb:65:04:c5:5c:9d:2a:
aa:fd:0f:c7:47:71:b9:4d:62:c3:5e:a4:5e:a7:15:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7E:4A:F8:89:A9:1D:D0:23:9B:1C:0A:3E:BB:35:E6:8D:3E:F1:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c358e116-64f9-3c27-b0c6-80f1a6292b9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:4f:5a:11:c8:d6:69:ca:ca:f1:05:ca:39:ad:64:4a:cc:f6:
d5:cd:c2:31:a7:a4:f5:0c:9d:7e:cb:3c:13:39:a3:b8:25:a1:
d0:37:46:69:d3:0a:30:16:d0:6b:fa:43:97:e7:37:90:1a:6e:
ae:f2:f9:5e:bc:c3:a7:d4:85:31:54:f2:00:e3:0a:a8:09:75:
66:75:1d:3f:96:3f:5b:67:eb:68:68:ff:ff:3c:e6:0d:9c:98:
24:92:c7:3b:c1:95:46:74:f8:4b:8c:8e:1a:fd:b3:11:7d:90:
9d:81:b8:6f:71:00:9d:f3:85:a2:22:64:10:a7:e4:27:7b:25:
80:70:c1:0c:15:2a:ec:78:f9:94:58:03:c0:e0:68:2e:81:5f:
c0:d6:e6:5a:ed:b1:30:51:75:19:94:aa:0d:eb:05:8c:9b:a9:
90:2d:1a:e3:b7:05:9c:5b:11:48:16:11:79:de:17:13:66:bf:
69:90:2d:af:81:67:25:cf:2e:4f:e7:36:9a:bd:75:99:7c:90:
63:c5:47:0b:f8:b0:72:df:5e:37:0b:35:0d:36:3f:3c:f8:0d:
5f:77:96:0b:c1:bd:1c:d5:59:02:72:ad:f2:23:64:6e:f9:68:
24:71:f8:59:16:57:90:2a:fd:eb:ab:44:bd:d2:c9:73:f8:07:
32:9b:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:50 2025 by rpki-client