Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa
File: ca174187-a544-3df0-8b36-2922d0060aea.roa (raw, json)
Hash identifier: Rp8MI7Jnbg+ht67Q+KCQJHDcpKTjEfqK3PzLrM1EHfw=
Subject key identifier: 33:A7:08:9B:0A:B8:D4:FC:DD:A9:79:1B:93:A0:52:17:33:D5:70:FD
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858491246A653DDBBCEC775E4E400
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 0
IP address blocks: 131.153.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:a6:53:dd:bb:ce:c7:75:e4:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=477dd142-ef0a-4015-a979-dc716c0f2b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:8c:5e:34:97:e9:dc:56:09:76:7b:b3:c6:
1e:97:e8:b1:43:53:b2:f0:b2:3f:04:aa:65:e3:5d:
93:60:a7:23:f9:d2:15:15:03:e7:b0:68:e8:41:a1:
d2:33:98:79:d0:5f:bc:39:41:4d:01:8a:b0:d4:9a:
cd:e8:82:f6:55:6c:f4:8f:c8:01:18:dc:9c:9b:34:
b9:da:67:4f:3f:8e:a5:ee:8b:6c:0c:d0:37:af:99:
07:f1:fe:11:fc:3d:82:2e:ed:74:ca:ab:e1:38:13:
a2:cf:78:d2:de:06:7d:e0:79:7e:c4:e9:a5:5e:e9:
37:3d:86:c8:dd:34:7d:c2:fd:93:59:28:f0:d8:a7:
b4:a1:7a:97:50:b9:05:08:7e:45:8c:30:0b:18:45:
50:69:4c:b6:0f:4c:4c:1e:1b:31:e4:0c:57:da:80:
fa:6a:ff:43:dc:45:2f:74:7b:53:9f:73:4f:76:ca:
0c:4f:73:bc:68:81:3d:8c:b8:76:92:6a:92:85:87:
0f:54:23:a3:b5:62:3c:32:11:dc:c4:52:d2:53:ef:
d9:00:2c:78:3f:e6:54:42:6e:16:e3:bb:64:0c:45:
c1:f0:06:0f:3d:cc:7f:d1:a8:c2:8e:68:53:d5:b7:
10:df:9f:b5:7b:c3:b5:16:04:ec:f1:36:d6:7b:75:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A7:08:9B:0A:B8:D4:FC:DD:A9:79:1B:93:A0:52:17:33:D5:70:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:05:02:0f:b9:3c:e4:1d:02:95:db:09:cb:6f:cb:98:d6:ff:
5c:40:7a:3b:6f:61:33:a6:b4:83:49:96:de:a3:f1:07:d4:29:
68:5b:95:c3:2b:fc:71:f6:ae:e0:d0:0d:a0:da:10:d8:50:b2:
15:95:a1:bb:66:b6:05:e0:c3:3b:ee:b3:cf:2c:cb:4a:bb:ab:
14:3e:86:41:df:6f:cf:5a:dd:db:54:de:63:f9:78:f8:4e:3f:
0b:40:1a:b4:76:65:fb:b1:10:8b:72:bc:b0:a3:d9:bc:7a:fc:
06:9c:d1:6c:31:3b:bc:e1:e8:e6:0c:95:29:27:dc:37:9c:b0:
9c:56:17:93:22:9c:f5:0c:8b:db:70:8c:a2:75:09:35:26:7f:
a4:03:da:dd:a5:03:a4:28:17:4d:88:9c:b2:75:e1:29:5c:5a:
2e:b2:aa:2f:a1:b7:b8:be:1f:c8:1c:5e:8b:d9:33:b0:37:a3:
77:b2:3f:94:bc:92:e1:3c:a0:1b:a0:76:0c:bf:e8:78:09:4d:
8d:f2:6d:fe:5e:bf:64:42:08:f8:84:e4:e6:1f:c0:3f:99:76:
b0:e4:2b:11:9a:95:b6:bb:df:d1:22:5b:0c:dc:b0:7a:75:2e:
08:24:7e:14:24:eb:ef:e3:07:77:4c:96:39:c9:68:2d:a2:47:
8f:ff:68:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:59:48 2025 by rpki-client