Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa
File: 7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa (raw, json)
Hash identifier: W9DT4OQt9JiEUQOkajW2zjkvjhWJPE0ozW1vZkLkaTg=
Subject key identifier: 00:42:A6:55:DE:B2:7E:11:99:4F:E3:D9:02:0E:4A:B8:CF:33:92:FF
Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90
Certificate serial: 010D0C9F43285848F65BED1C43CC438652139300
Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 399381
IP address blocks: 131.201.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:ed:1c:43:cc:43:86:52:13:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=1ee18482-50ca-45d5-8acd-ee03840be825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:96:45:63:a8:2d:24:53:d3:fc:3a:2b:37:
8d:32:fc:42:f2:23:68:1b:88:0d:d9:fa:bf:2c:56:
60:01:a9:9a:99:9f:0d:ba:f4:4d:13:ba:7b:89:80:
c0:d7:5b:2c:b3:d2:d8:b5:02:d4:f0:32:da:07:8e:
77:e1:39:eb:dd:b7:4f:10:67:02:1b:f4:0b:c3:82:
5f:c2:0b:09:ed:4e:77:5e:47:b8:ac:da:e1:9b:15:
3a:0e:ef:f6:bf:90:24:e1:20:5c:58:52:e8:f1:33:
1c:7c:49:86:07:dd:a9:75:85:2f:f7:c0:e0:b4:6c:
0b:21:36:62:f2:0e:14:51:71:3d:c1:b5:78:aa:66:
e5:1a:3d:b7:79:b1:15:f4:0c:30:5c:46:18:de:2e:
1c:bb:d6:49:ab:47:7f:ad:d9:06:18:a9:52:ca:1f:
30:ea:3b:a9:ed:80:27:22:de:e1:e7:51:19:dc:dc:
74:b8:d9:49:95:6b:e0:10:8d:b1:9c:96:7f:11:2d:
a4:ac:58:ba:0c:bc:0e:fa:25:5a:4b:51:db:20:c6:
12:2e:fd:24:4e:34:f6:34:24:70:89:ff:1d:99:bb:
34:df:7a:05:53:93:22:ee:f4:3e:4b:77:ef:bd:9e:
14:2d:f2:e2:ee:f5:ef:71:70:3c:5f:97:08:fa:3d:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:42:A6:55:DE:B2:7E:11:99:4F:E3:D9:02:0E:4A:B8:CF:33:92:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl
X509v3 Authority Key Identifier:
keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
sbgp-ipAddrBlock: critical
IPv4:
131.201.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:6d:0e:86:c3:18:e3:ec:b2:c3:aa:50:70:a4:72:35:13:18:
9b:ac:b7:d0:f7:c9:9e:ce:a8:d0:04:9f:21:00:94:fa:ba:06:
8f:12:e5:cd:76:0f:8e:24:0d:1a:cb:55:b7:16:22:2e:53:26:
a2:23:3c:82:dd:23:ea:b5:a8:a8:cc:61:9c:b6:c5:57:38:2a:
98:f5:9a:2c:86:bb:05:40:4f:2f:93:37:76:c2:b0:3f:fe:5a:
1f:04:6c:c5:8e:cb:36:78:17:39:7d:6c:00:ed:5d:11:00:01:
7f:87:45:c0:7c:61:4b:b2:a1:d3:9e:97:e4:e5:2f:52:61:ee:
4b:03:f9:47:4b:77:52:a9:47:8b:4b:a7:f2:da:ed:96:11:28:
08:e1:eb:0b:ee:a1:0d:25:f0:68:17:7a:5c:f9:79:8c:b9:b0:
0b:cf:73:b4:56:81:67:fb:1c:9e:2c:be:56:59:11:b8:f7:be:
ee:2e:46:b8:6e:33:19:46:d3:2c:5f:73:02:2e:64:77:a1:66:
f4:54:6b:23:fd:46:15:ac:e2:05:6e:09:7f:d3:89:28:8d:a8:
26:16:90:51:72:39:05:ac:9f:ab:37:04:8d:b7:f5:46:83:f1:
aa:a0:c1:15:64:4f:02:d7:1c:a3:b6:e7:5f:fd:88:2c:7d:af:
a7:5f:ac:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:39 2025 by rpki-client