Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c65d17e9-2b10-369a-adb3-84d59213e320.roa
File: c65d17e9-2b10-369a-adb3-84d59213e320.roa (raw, json)
Hash identifier: ErMgyIoHx+EtdmQoYohnTJEeKWKjCGzvKPP4Akuvg/A=
Subject key identifier: 35:40:3D:B5:8C:F9:E3:E2:21:33:0E:7D:C1:79:D3:73:95:FA:BD:74
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584898D60C2718D47CB28B5F3500
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c65d17e9-2b10-369a-adb3-84d59213e320.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 19181
IP address blocks: 131.153.233.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:0c:27:18:d4:7c:b2:8b:5f:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=d01c420a-a2f8-49ce-8ea2-8f01dcc802e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:81:7a:3c:8a:21:52:c7:db:f1:55:e8:aa:
24:40:da:af:3b:67:9b:17:a9:7f:55:75:cf:3c:12:
8a:68:0d:44:e4:c7:f0:da:84:0f:ad:b1:d7:f8:7e:
c3:df:ff:7a:ff:e8:1d:ec:ee:3f:86:7b:21:19:85:
41:69:a1:2f:a4:bb:06:69:9c:e2:0d:3b:e0:59:ae:
81:c4:05:42:64:d6:f0:95:57:53:ef:b8:72:44:26:
24:01:81:fc:ef:8b:76:c1:cf:4d:09:ca:27:35:f2:
31:44:1d:34:39:d9:3e:4e:e9:15:be:b4:6e:6a:bf:
bb:11:1b:2a:77:1c:be:a2:b4:30:8c:37:02:ca:c9:
f4:17:4b:02:0f:32:7b:02:b4:2d:24:ce:12:8b:5c:
a7:2b:fc:a0:f7:3f:ef:16:3f:24:06:be:05:79:8b:
03:69:b6:8d:2a:b8:04:9f:35:71:eb:7a:b7:ba:f7:
fb:8d:5c:69:08:28:48:d7:6c:a4:ea:1b:ab:98:13:
12:4d:f8:df:87:e9:40:37:ae:ea:5a:fe:5f:99:fc:
ad:d9:87:69:ca:37:d6:fc:7a:6f:7a:0e:80:25:91:
15:a5:93:51:4b:13:8d:24:40:03:03:97:94:b3:80:
41:58:85:18:90:53:61:b7:3a:1f:a2:cc:24:43:80:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:40:3D:B5:8C:F9:E3:E2:21:33:0E:7D:C1:79:D3:73:95:FA:BD:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c65d17e9-2b10-369a-adb3-84d59213e320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:de:a2:6e:fa:39:ff:e2:d5:3a:3a:9f:00:82:e7:00:e7:1a:
41:f3:fb:f1:ad:df:87:9a:35:34:9f:76:f8:e3:68:1c:67:b2:
fa:f9:6f:d4:81:95:63:31:2d:1a:19:38:b5:44:10:20:b9:c3:
1b:42:23:d3:c1:49:16:ae:00:46:bf:43:6c:d1:d9:61:53:97:
4f:b2:85:ad:9c:59:b7:79:a6:12:d8:80:83:9b:33:cc:6d:d8:
fb:3c:1e:4b:15:fb:e9:b7:8a:5a:9f:37:44:42:97:13:5e:14:
45:20:65:34:46:c9:a3:64:3f:27:5f:79:11:a1:c0:6e:8f:fd:
83:d6:92:9c:a4:aa:b1:bf:50:13:e1:0a:39:1c:20:b6:88:a9:
cb:16:00:60:93:b9:77:ae:27:c4:e2:96:01:e4:41:4d:e5:a4:
b8:34:7b:37:ad:86:19:41:79:10:1a:3c:0e:1b:61:8c:a2:d7:
d1:77:0c:f5:f5:82:80:ae:06:98:bb:bd:31:2b:10:0a:f3:85:
b9:70:76:5a:62:31:99:8a:2f:d4:fd:fb:53:15:45:10:4b:a7:
74:f9:58:07:94:5f:cf:cc:83:af:1e:7c:95:87:0f:af:90:3c:
ff:5a:81:a3:ad:86:f0:9d:73:c5:d8:1a:c4:71:9f:d9:99:fc:
81:fe:9f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:07:20 2025 by rpki-client