Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa
File: f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa (raw, json)
Hash identifier: nQOlNpS1ylJjiqjNR10zCKApONjDHnQtAPK1bfcjIHk=
Subject key identifier: 9B:00:28:BA:14:CB:83:55:09:ED:A8:9F:15:D2:8D:61:DF:B4:0F:FE
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858490CB16BED91C59845375200C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 207134
IP address blocks: 131.153.98.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:6b:ed:91:c5:98:45:37:52:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=3029c55c-4b42-43b8-91af-3a447c7e3ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:a9:9f:2a:cb:31:cb:bf:06:44:25:2e:e7:
a3:5e:75:c9:e9:c2:4e:28:d3:5f:53:4d:a7:5e:83:
5c:f1:19:49:0b:a3:91:0f:1b:bb:4c:1e:25:45:5b:
1f:ca:e1:87:f9:9b:05:93:90:08:c8:b4:e1:f5:02:
af:56:eb:2b:fd:1b:b8:f0:b5:f8:d2:52:79:08:30:
83:6d:d1:e8:6e:8d:58:61:f1:f2:32:87:0a:d5:a6:
a8:f2:bd:b9:1c:29:0d:80:d2:5d:cd:9b:b8:e3:8c:
18:53:7e:1e:a0:53:d9:b6:1c:c0:e6:be:db:3f:c9:
75:67:70:03:6c:85:c8:2e:80:9a:1e:60:de:4f:1c:
69:36:6a:ca:c5:2e:b8:4b:08:28:01:e6:91:df:a3:
c8:1d:f8:b4:a7:91:3f:27:93:0e:e3:e3:8a:5c:3b:
57:b6:75:00:1f:f2:ee:e9:4f:48:6e:dd:fe:92:84:
aa:c5:17:96:05:fe:a0:d6:7d:f1:1c:67:b3:c2:8f:
cf:8c:1b:ce:e7:72:5a:ca:2d:fa:4c:3f:9a:22:9a:
33:f3:d6:c5:d1:47:d4:c6:9d:a2:7e:91:24:08:81:
b9:79:b0:3f:b8:06:a0:fe:cc:2a:16:3c:d0:33:5d:
49:86:d6:bb:82:40:8d:14:43:24:71:81:f1:d7:0f:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:00:28:BA:14:CB:83:55:09:ED:A8:9F:15:D2:8D:61:DF:B4:0F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:7f:d1:a1:0c:e1:5b:51:bb:ea:a8:05:ef:43:84:e9:2d:1b:
51:8c:0d:c0:d8:4c:d0:d8:5b:e6:b6:f3:9f:9b:20:41:95:71:
0b:73:a7:00:a7:d5:43:81:1f:65:b6:3d:23:03:8c:ee:7c:f1:
5a:02:99:6d:1d:a7:d9:3e:fb:0e:1d:46:d8:99:c4:d2:99:dd:
c6:7f:95:08:36:ec:e5:80:d4:0e:2b:2b:80:66:84:4c:02:32:
da:4e:55:ad:61:03:c3:72:38:8f:85:53:86:52:ef:09:0a:bb:
cb:01:f2:8a:4d:c1:87:74:b7:3f:89:c8:85:af:14:fc:00:3f:
92:2e:f8:db:e8:fd:3c:4c:b3:17:fd:7b:c8:b4:ae:e5:05:be:
a4:bd:d5:35:f0:5c:96:68:a5:69:cb:01:1a:2f:a9:d0:41:b3:
56:d3:f3:52:1a:d0:08:cd:e6:99:cd:26:f3:83:ff:49:40:c8:
4f:c0:ea:50:87:58:74:d8:f9:5b:d9:84:a2:9f:3d:c1:0f:05:
2d:29:ba:eb:ce:f3:04:eb:da:73:88:1c:4f:4d:4a:c8:6b:58:
ca:77:05:06:15:7d:3f:55:d0:bd:3e:4b:60:34:a5:76:60:da:
7e:5e:ba:11:b5:99:be:03:f9:59:84:ea:7d:6b:7a:af:d2:8d:
e2:fc:45:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:35:41 2025 by rpki-client