Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/7a003ee9-9e2b-3c23-a0c5-513afbd7cf4b.roa
File: 7a003ee9-9e2b-3c23-a0c5-513afbd7cf4b.roa (raw, json)
Hash identifier: KQcmN6Tqm1ajwTqNyUbmP+ON+xKBgSiOM1a0uLw3NjM=
Subject key identifier: 7F:D7:3F:53:35:2A:34:6C:26:B3:C9:DF:FF:B0:D5:14:D4:17:48:6D
Certificate issuer: /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial: 010D0C9F43285848FD56AABCAF7380E63944DB80
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/7a003ee9-9e2b-3c23-a0c5-513afbd7cf4b.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 131.232.76.0/24 maxlen: 24
131.232.77.0/24 maxlen: 24
131.232.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:aa:bc:af:73:80:e6:39:44:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=f6192b89-eb60-4a5e-a237-be76f41e7b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6f:7e:ee:02:ac:8c:cb:67:4c:ac:1c:6f:11:
f5:ed:4f:b5:3f:81:4a:d8:68:df:87:71:5b:0e:f2:
0d:1a:9c:89:6b:36:ed:8a:c9:15:db:91:68:a8:94:
58:25:e2:1b:7c:82:9f:6d:ff:b1:6d:66:9b:7d:45:
9b:a3:64:28:ec:a1:c7:b7:99:d3:63:de:65:7d:ad:
22:c1:da:cf:da:4f:6a:55:15:25:91:ed:c1:70:d6:
2f:fd:60:aa:eb:92:d8:aa:3f:22:c9:26:bd:2e:78:
a7:33:f4:47:ac:84:cf:bb:9f:61:c5:9d:3a:98:89:
8e:93:78:aa:46:8d:bf:ef:bf:4d:9d:c3:f1:e7:3d:
6e:2e:ad:a5:fc:66:de:ae:db:2b:61:b9:e3:59:ff:
86:2d:a6:b5:b9:b5:6a:4a:4d:87:d6:39:ae:67:44:
73:8a:f8:ae:35:20:a8:27:74:53:34:23:d9:0b:08:
86:c7:fd:81:56:84:70:f9:e2:a7:ac:a6:b4:3a:6a:
51:13:b0:91:b5:60:66:a5:b3:35:69:b4:6e:97:e6:
b0:c6:6c:32:d7:70:91:08:12:25:1d:d0:ab:70:0c:
5a:c1:b6:06:32:0b:85:fa:b6:3d:c3:60:21:63:ba:
e5:5e:56:02:25:82:01:77:08:47:60:a0:3c:7f:8c:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D7:3F:53:35:2A:34:6C:26:B3:C9:DF:FF:B0:D5:14:D4:17:48:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/7a003ee9-9e2b-3c23-a0c5-513afbd7cf4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
X509v3 Authority Key Identifier:
keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
sbgp-ipAddrBlock: critical
IPv4:
131.232.76.0-131.232.78.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:38:7c:2b:c0:25:60:cd:02:16:bd:44:07:66:5f:2f:70:24:
43:1f:b5:92:ba:e5:77:eb:41:df:db:f7:b0:2d:03:a8:e0:70:
18:bf:4a:f4:74:23:20:9d:d5:9b:12:9a:08:b8:13:a9:e5:5f:
df:20:71:e3:5f:db:48:f4:60:13:e7:b9:a5:6d:ec:b1:6f:c0:
c1:36:b0:33:1c:65:8f:0f:3e:b9:0a:b0:04:c4:73:17:18:04:
49:49:dc:82:a5:a5:04:13:f8:42:1d:7a:92:21:20:73:68:df:
ec:e9:69:fe:5d:cc:2d:21:6c:f8:ad:b5:18:be:75:43:ac:67:
7a:e0:81:b5:fb:be:25:5b:3e:e1:86:b0:a9:7b:db:32:d1:d9:
c8:d2:94:88:10:91:48:35:ae:8f:ff:46:b9:68:bf:03:96:71:
69:23:a6:9e:21:be:9a:02:11:8a:02:54:83:7e:da:0a:17:a6:
cd:2f:d6:a6:ae:2a:d5:20:67:a6:56:af:fb:10:56:ce:20:3b:
16:1a:49:d4:a5:10:a2:60:28:ed:08:cb:ec:b4:14:11:d8:1c:
e0:05:e3:04:09:2e:40:00:b5:8b:55:1b:00:3f:a9:13:96:82:
c5:18:fc:d6:a0:82:1f:36:26:a3:ae:f5:90:18:41:68:a0:6d:
ec:cc:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:29:08 2025 by rpki-client