Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa
File: ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa (raw, json)
Hash identifier: 1VM2Jq+t5nnxPwxf1et2+GnUvNMTEt477JO5W35uzp0=
Subject key identifier: CB:3C:77:4F:7F:44:4B:2C:44:46:FE:6B:08:51:2D:D7:E5:85:3B:C2
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858491246AC7AACF2256D2DBD6000
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 0
IP address blocks: 131.153.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ac:7a:ac:f2:25:6d:2d:bd:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=ffa7412f-f9e0-495d-acbd-15bc514f2758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:23:76:5d:21:fd:1f:6a:78:03:1c:89:9e:
69:88:49:0f:45:0d:f6:3e:4d:34:97:83:b4:05:c6:
c2:d1:6f:23:62:8d:ae:86:53:87:a1:54:52:f1:2b:
e8:65:42:a9:2f:13:13:a6:9b:9c:58:c3:75:c8:25:
89:15:2b:91:55:18:81:5c:e9:37:8e:dd:d8:99:99:
8e:1b:1f:e9:d9:69:87:ca:8d:71:bd:05:7f:ae:2b:
52:eb:a0:f0:b1:a1:a4:f7:36:df:cd:a0:aa:2b:70:
f6:58:96:9e:2f:75:4a:02:af:f6:93:19:7e:f2:d9:
b1:0d:c0:f6:35:25:95:de:59:b1:2e:37:71:a2:e3:
be:93:b5:fb:95:92:4a:34:f2:39:65:55:76:b9:07:
50:97:a0:58:59:a8:2b:7f:6d:5c:02:35:89:f8:98:
f6:f1:71:9c:77:7d:ea:2d:99:e1:85:8f:a4:f1:77:
b2:10:1f:7c:b2:c3:74:d4:aa:45:60:93:ff:56:60:
5f:7b:4c:a1:ac:af:4e:47:00:df:5a:21:6c:ca:89:
a0:14:e4:43:dd:85:9a:55:28:73:d8:a6:2c:fb:c8:
20:cb:1f:df:bb:bf:75:6b:42:b8:c5:28:89:f1:0f:
41:5a:ec:d5:88:26:f9:5c:10:79:27:e6:84:04:c3:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3C:77:4F:7F:44:4B:2C:44:46:FE:6B:08:51:2D:D7:E5:85:3B:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ce:c4:22:88:4c:05:92:5c:8a:98:49:f2:41:98:47:13:1c:
a6:87:46:28:f3:90:4e:93:af:00:e4:4f:b1:63:87:d3:b0:ac:
ca:5f:06:b8:0b:6e:d3:34:65:b1:1a:fd:a6:12:e3:33:e7:0d:
d4:a5:2a:8c:95:55:3d:60:4d:f0:0b:c2:3b:6e:1d:94:92:36:
15:33:20:39:e3:19:c9:3c:1a:01:ec:4b:48:32:c0:6a:cb:a7:
de:cd:00:d4:df:2a:74:35:c0:b7:11:53:1c:4b:99:6d:c7:41:
6a:47:2b:3f:83:ac:da:5c:c6:cf:13:c3:2d:ff:7b:ae:64:1d:
d4:24:60:ac:e8:93:51:27:b0:07:bb:f5:66:ad:8d:c7:4b:4d:
7a:41:76:c2:dc:f4:a1:ec:74:7c:7e:86:6d:b4:e2:38:68:c3:
91:97:cc:74:5c:ea:52:11:89:38:81:69:16:58:84:68:f6:73:
f3:f4:b3:33:13:24:ca:ea:bc:4e:5a:b7:fe:9c:67:bc:88:05:
49:d1:14:f4:db:1b:52:f4:3d:51:a0:e1:7a:69:81:39:f6:b1:
42:5d:59:a0:52:59:17:29:87:82:01:da:39:b7:8a:f0:86:7e:
ef:a4:e9:f7:0e:9c:30:46:03:78:61:e3:63:f7:ed:22:d6:2b:
86:94:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:49 2025 by rpki-client