Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa
File: eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa (raw, json)
Hash identifier: LroNrZODSRQKP2DdAy9hp0wZJY/5lFNmA0KXVyq1/bE=
Subject key identifier: C1:E4:3F:E7:7E:42:99:61:86:D4:5C:07:CA:AA:C3:97:62:F5:CD:2C
Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90
Certificate serial: 010D0C9F43285848F4F69C082DC5B0DA8ECDD500
Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 399381
IP address blocks: 131.201.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9c:08:2d:c5:b0:da:8e:cd:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=ff99ef65-df5e-4c19-9b02-88f3156ffbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:9e:d9:f3:ae:4d:f7:aa:62:44:bb:a3:91:
51:d2:11:57:8e:85:1c:31:74:53:07:3b:25:22:bf:
60:1d:a2:ee:17:5b:2f:42:38:a3:02:6a:e9:17:71:
d3:7c:26:59:ad:a1:1e:a5:52:6e:1f:67:0a:51:40:
6f:6c:a6:cd:6d:c0:c0:f1:11:37:a7:3e:a6:59:13:
dc:b0:55:92:69:10:ea:d9:d6:73:e8:f2:e3:2b:6e:
98:41:6d:ee:f4:e3:1a:7c:5d:ee:16:b0:38:99:6f:
e2:08:3a:dc:e3:7d:ac:9c:69:b6:ee:cf:56:37:a0:
68:ae:34:fc:96:a9:60:fb:b0:71:1f:5b:b6:19:f1:
a6:03:5e:17:88:e0:2c:e4:42:57:54:b4:e7:6e:09:
62:5c:8c:d8:89:7a:f8:40:93:25:39:86:28:b9:ab:
60:1f:32:8c:bb:07:c9:d0:33:33:55:f8:d8:99:19:
c0:f5:8b:61:23:a5:3d:07:14:0b:16:91:b0:a2:bd:
b8:1d:d7:cb:cd:f9:55:18:9b:af:81:00:4a:44:52:
56:21:00:38:15:ca:21:42:5f:d9:6f:6a:3a:ee:a1:
d3:f2:82:15:b8:33:b7:f1:f7:29:ab:a8:db:b9:40:
24:f4:18:23:fa:a0:14:37:2b:f5:70:5f:c9:37:63:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E4:3F:E7:7E:42:99:61:86:D4:5C:07:CA:AA:C3:97:62:F5:CD:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl
X509v3 Authority Key Identifier:
keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
sbgp-ipAddrBlock: critical
IPv4:
131.201.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:b2:97:c8:c7:25:0c:6f:76:5e:10:ee:25:0a:f9:12:cd:9d:
25:ec:b4:ce:c7:15:2a:ed:9d:cc:b2:b7:03:9a:5e:ca:50:5e:
a7:db:6b:fa:2f:17:a8:28:7c:3e:0c:78:0f:c9:75:6e:3c:d7:
24:5e:64:36:79:df:e4:2d:ac:94:82:a3:8c:0f:21:30:2e:10:
4c:49:e7:95:c7:c4:e4:2d:8a:ce:1e:00:0b:ff:e6:63:72:e9:
ff:f0:f3:b9:f3:69:12:f8:84:5d:d9:37:19:1d:b7:55:66:ea:
0c:85:5f:cd:5a:51:51:e5:e5:e1:c1:28:26:b4:54:94:16:18:
7c:37:28:bf:37:91:f7:70:f7:c2:8a:bb:17:e0:c3:2e:3c:a2:
f2:00:01:83:78:15:8f:fd:b8:fa:db:9f:a8:b7:4b:3e:db:4a:
66:39:ff:ed:8c:1a:1a:fb:f3:fc:e3:33:f2:ab:99:0b:62:8a:
8f:69:1c:78:8b:94:ba:a7:00:38:12:3b:45:e8:a7:22:1f:11:
23:36:25:e0:39:66:0f:85:66:ac:d1:3c:87:94:c4:cc:2c:44:
a4:a6:64:b7:50:40:c9:db:0a:04:af:06:22:ad:0c:3e:05:bc:
1a:7d:be:3f:69:0c:e6:13:8f:e3:b8:61:0b:c5:aa:2a:76:46:
64:ca:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:06:25 2025 by rpki-client