Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa
File: 7de174a5-fe02-37dc-9bcb-1f777220641f.roa (raw, json)
Hash identifier: ElF5ZzYczxy3/vsTe/H7q6EBiTZtlEvwOIoDu4aW2Ko=
Subject key identifier: 53:F5:0D:CA:1D:EB:53:5A:DE:C8:89:B4:E8:9F:58:82:D5:4D:98:4B
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858490F7C050732F9E8DED0345340
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 54113
IP address blocks: 131.125.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7c:05:07:32:f9:e8:de:d0:34:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=a5f321f0-69c6-4867-81a8-377e75a356d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:51:d7:fb:7d:d1:fc:01:62:60:8d:69:dc:d8:
c8:f6:ec:01:03:87:35:0e:59:f9:9b:91:4a:9b:75:
65:3a:3b:99:a2:dc:ed:56:8b:62:9a:cf:11:66:90:
bd:8f:f8:f1:f5:72:a0:c0:e6:6d:ca:03:38:76:ca:
4b:8a:0a:d9:fb:27:17:41:bb:7a:94:68:21:1f:64:
aa:94:7c:1d:d2:b2:01:a6:09:03:c9:c8:21:e7:1c:
83:52:22:88:c2:04:da:fc:49:0c:5e:65:1c:f7:38:
b9:b5:0f:3d:f2:b4:03:b2:2c:33:10:67:10:24:cd:
a3:bf:65:b9:83:5e:b3:5d:1f:e2:98:6b:cf:b7:cb:
10:1b:8a:67:ea:54:8d:1d:3f:34:af:80:71:4f:b5:
38:f5:80:1a:47:f1:83:0d:60:30:12:3e:95:d8:a6:
44:bf:02:3e:4a:f3:cc:1d:17:5f:1e:46:97:6a:e2:
19:b0:a6:f7:5d:58:aa:28:11:24:d1:12:d8:5a:a1:
7c:76:f2:a3:0c:8a:f7:6c:d9:3f:b3:ea:c6:cf:0e:
87:ff:01:a3:2a:49:24:d4:73:62:ea:15:11:0e:50:
d9:b7:60:35:d5:24:dd:48:2b:e2:78:ec:76:49:46:
44:0a:f5:5e:f6:7a:fe:6d:73:7b:ba:c4:a8:a2:25:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F5:0D:CA:1D:EB:53:5A:DE:C8:89:B4:E8:9F:58:82:D5:4D:98:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
131.125.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:f3:d6:12:84:e6:a2:73:30:6e:7d:56:da:55:90:6b:6c:27:
7f:2a:1b:b2:5f:cd:32:ca:f4:4a:4a:f6:dd:e3:89:76:c7:fe:
f2:76:61:02:5c:dc:8b:f1:3e:69:33:81:cc:45:c2:35:e4:ff:
e5:95:c3:c1:f2:00:cc:30:ce:ec:0d:bc:e5:96:5e:37:76:e7:
2d:c9:18:4f:3a:66:dc:79:64:b3:96:2f:f1:2c:b6:10:8b:bd:
6c:6c:35:00:6b:25:98:37:9a:71:1e:68:09:42:b9:52:ab:2a:
4b:a2:23:ef:08:9a:dc:38:61:e1:3b:f2:7c:94:3f:cc:f2:7a:
86:15:52:2a:fb:5a:c2:6e:e5:01:8e:4a:e8:ac:92:5a:33:44:
2f:60:32:a0:93:3b:4d:61:f9:31:ed:dd:e3:f5:56:d6:88:6d:
ca:d4:e3:96:f7:89:d5:5b:a2:dd:0f:e7:39:33:b3:45:0c:d3:
91:8d:08:0c:3c:a6:e9:2f:0f:de:f0:51:c3:bf:65:36:18:bd:
d0:31:b8:54:a1:30:57:85:9e:75:ec:41:c8:ab:00:f4:ea:b4:
d2:d5:f7:b6:5a:e9:03:25:d8:d0:d1:49:b3:ed:bf:55:c5:f7:
3d:ed:0c:8d:cc:2c:1e:0a:e9:2c:2e:b4:e1:9b:f5:1f:c7:66:
2d:dc:b6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:44:32 2025 by rpki-client