Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa
File: aabe01d2-6b84-3a4c-a160-177c79696872.roa (raw, json)
Hash identifier: cUfcPxXkhrNDcQR7GQiLwTpSnYBBKT2fadd8mWsUfcQ=
Subject key identifier: 5A:52:0C:31:E2:99:CA:F7:70:09:AB:A8:32:EE:82:39:FD:3D:01:BA
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F432858488C45CDEED843D6A9C6B02C7A
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 902
IP address blocks: 131.148.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:cd:ee:d8:43:d6:a9:c6:b0:2c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=98857711-e241-4fbe-be14-f420ed30d631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:4c:78:de:58:c5:71:79:46:04:0f:2f:7c:
08:1b:d1:e2:c4:11:f1:5e:de:85:12:40:5b:40:83:
4f:5f:ee:a2:bb:a8:15:7d:75:c5:54:49:f9:e3:24:
f3:32:ea:34:d2:80:d8:27:3b:b8:f3:0e:db:dd:b6:
c9:b5:99:d2:04:c4:a9:93:e7:97:bc:e2:60:79:ec:
dd:ad:a1:8a:f7:68:a3:da:7f:16:44:b5:44:b5:bc:
9e:d1:5e:15:58:9d:10:1d:aa:ce:33:68:e7:91:32:
26:e3:4c:3a:27:6f:13:83:f2:0d:df:df:73:9b:52:
59:c0:81:8c:9a:e3:12:48:36:05:57:ee:7f:2d:3e:
d4:57:f5:c0:ec:be:fa:6d:5a:d4:e8:c2:6c:4c:66:
31:b0:b8:a7:c2:5b:c0:61:7a:48:6a:ae:21:db:68:
da:2c:dc:d6:65:d5:8d:3a:00:fd:c6:c2:2b:26:dc:
bc:17:fb:f0:3f:1b:a0:ef:eb:33:6f:ba:10:d5:d2:
06:0f:1e:cb:f4:72:4f:e3:c5:9f:b8:5c:43:7d:d3:
b4:95:3d:6f:35:87:b0:ec:40:cd:1b:9d:3f:e8:e5:
2c:f7:6d:a0:89:c4:35:95:f2:4b:2b:2f:32:77:d6:
50:ae:63:c0:f4:bf:13:ea:f1:10:63:08:08:fc:b0:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:0C:31:E2:99:CA:F7:70:09:AB:A8:32:EE:82:39:FD:3D:01:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
131.148.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:18:32:af:af:d1:c8:a0:ce:73:0b:cb:a4:33:c2:a9:e6:7b:
b9:b3:10:00:ed:16:b1:2f:5b:8c:21:9f:bb:99:f6:51:8b:77:
cb:cf:9c:54:7f:6b:72:82:ea:53:ef:85:bd:b6:41:a5:49:ed:
cd:90:0f:64:42:0f:24:48:af:f5:f4:ba:c5:62:84:fb:c9:48:
e8:de:00:dd:38:bf:08:9c:0c:75:11:18:46:88:67:ed:43:e5:
58:11:bf:ad:1a:7a:36:1a:cf:31:87:5f:e6:79:5e:3e:2e:96:
88:b2:c1:ba:78:cd:c0:e4:c2:58:45:95:ab:b4:bf:16:53:b7:
90:ca:c7:f6:f8:34:e8:d0:0f:95:2c:69:4b:1d:f4:19:6b:c1:
33:dc:e6:ff:68:a1:5d:6e:6b:47:d4:1f:1b:f0:a2:8a:3a:2b:
ad:4b:f8:b5:58:8c:e8:26:93:d8:d9:60:0e:40:d9:2a:d4:d2:
af:46:10:96:81:2f:db:ae:c4:03:50:50:9c:7d:30:45:8a:f4:
ff:d8:58:0f:49:73:3c:bc:ea:94:ae:e5:ec:fd:ed:bd:64:ad:
f2:84:4a:3c:94:26:8d:12:17:bb:66:74:8e:81:32:66:27:89:
8c:a6:93:32:ff:84:5b:08:88:b1:53:df:c9:3e:df:92:f6:08:
14:24:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:10:44 2025 by rpki-client