Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/f121bf0f-2675-3005-8eaa-4e24bf6694d6.roa
File: f121bf0f-2675-3005-8eaa-4e24bf6694d6.roa (raw, json)
Hash identifier: 8SShPLKCaJ+drbiDD5NVjV6RjmmLq5TCOp+X8nlikU8=
Subject key identifier: 3B:36:18:9F:EF:D2:6F:4A:39:CC:91:90:72:D1:E7:67:98:14:BE:29
Certificate issuer: /CN=e48d3078-1b09-45c1-aa5b-24d202c19935
Certificate serial: 010D0C9F43285843225234075ABFC61676F5AF80
Authority key identifier: AC:7C:72:81:83:F7:06:0E:B3:88:E1:E4:4F:A4:A8:31:E0:55:9A:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/f121bf0f-2675-3005-8eaa-4e24bf6694d6.roa
Signing time: Wed 06 Sep 2023 15:15:19 +0000
ROA not before: Wed 06 Sep 2023 15:15:19 +0000
ROA not after: Tue 05 Dec 2023 16:15:19 +0000
asID: 35865
IP address blocks: 131.153.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:22:52:34:07:5a:bf:c6:16:76:f5:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48d3078-1b09-45c1-aa5b-24d202c19935
Validity
Not Before: Sep 6 15:15:19 2023 GMT
Not After : Dec 5 16:15:19 2023 GMT
Subject: CN=c4bcdee3-89d5-4b37-b901-e82c481f7848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:17:b8:c1:25:e5:21:68:2d:62:c9:e4:7b:
a1:f3:0e:83:bd:90:0b:18:99:07:b9:2d:b3:3b:72:
8e:8e:6c:09:00:dd:69:72:0d:60:13:d3:83:b6:e6:
75:7a:6d:b4:7c:74:f6:8d:07:43:20:c6:dd:e0:96:
ef:d5:8b:51:88:5b:1f:2c:73:7b:c5:34:b8:eb:7f:
f7:8a:7b:6f:6b:c6:4a:c0:4b:f8:7c:d8:25:cc:9a:
9e:37:e2:09:b2:18:73:f6:c8:e8:65:8b:ff:b3:a4:
ce:94:1e:56:91:6a:cc:2d:05:51:b7:93:a0:46:c7:
0a:df:5f:a8:50:d7:14:88:b4:c7:a3:b4:f7:1f:26:
96:26:cd:fe:02:dd:df:3c:79:80:8a:01:0a:47:90:
96:9f:05:a7:c9:36:69:a9:d7:13:2a:ed:dc:99:b8:
fa:51:55:88:ae:59:81:90:ef:56:8d:69:f9:cb:3f:
05:87:b0:b6:10:5f:53:00:b3:97:c7:aa:73:45:1f:
d3:fa:e7:17:03:78:f5:79:0a:a9:ce:1c:71:ee:b6:
df:81:27:40:33:f5:15:4e:a7:b2:af:aa:21:99:70:
f8:e3:1d:31:af:16:b3:35:fa:98:b4:d6:21:3d:ae:
9e:67:8f:e2:fc:1b:d3:7e:51:ab:b9:5d:2a:20:fc:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:36:18:9F:EF:D2:6F:4A:39:CC:91:90:72:D1:E7:67:98:14:BE:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/f121bf0f-2675-3005-8eaa-4e24bf6694d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/e48d3078-1b09-45c1-aa5b-24d202c19935.crl
X509v3 Authority Key Identifier:
keyid:AC:7C:72:81:83:F7:06:0E:B3:88:E1:E4:4F:A4:A8:31:E0:55:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:0c:45:a3:30:05:45:78:e9:ef:84:88:e3:a3:5d:e1:fc:d2:
b6:28:1a:97:62:ef:41:ea:b7:2d:94:f9:ab:16:1f:3f:53:57:
4a:26:84:ee:af:f3:56:3b:3f:02:5a:c1:ba:c3:be:08:d4:61:
d7:28:7a:a9:52:f9:d5:9e:0e:d8:76:42:28:5f:2d:c8:eb:c2:
0a:14:f0:cb:29:05:a8:4a:fd:47:79:bd:5f:56:4a:ad:dd:de:
ef:e6:84:4b:b6:24:f6:cb:b8:c3:9c:eb:69:ea:9b:d6:99:36:
07:59:e5:39:ce:0d:d0:6a:11:9b:42:ac:fd:23:89:f0:e9:68:
05:19:c5:3c:10:a1:bc:c8:78:b5:6f:46:15:d6:5d:aa:7c:09:
e1:a2:b9:89:42:b8:01:08:6c:bd:2c:d4:86:b5:82:d7:8d:ab:
36:1b:4e:3c:81:18:08:5a:60:71:58:30:8c:ce:9a:ea:8a:3f:
91:ca:12:b7:09:ae:ce:79:70:32:b6:c1:03:76:b8:90:f6:5c:
32:9c:02:c4:3e:4a:46:64:ee:ca:49:18:f0:65:a4:7d:20:2a:
e5:51:ba:8c:5d:4d:22:f5:4c:c4:4a:7c:ad:f8:d0:69:d8:0c:
27:eb:35:e3:fe:d0:0f:02:6d:1a:e2:2b:13:76:01:b3:c1:50:
15:b5:0b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:31 2025 by rpki-client