Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/91c86816-35b3-328c-94e1-89b663410835.roa
File: 91c86816-35b3-328c-94e1-89b663410835.roa (raw, json)
Hash identifier: mnEnMRGTT+Vm0s/YPuwXM2UwBVVE04pCXPqQnw5xTxs=
Subject key identifier: 92:1B:90:AA:65:FA:92:FC:62:1C:18:24:F9:5B:09:CF:81:81:8B:74
Certificate issuer: /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial: 010D0C9F43285849350E940EBB2C30795CA2BE80
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/91c86816-35b3-328c-94e1-89b663410835.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 16580
IP address blocks: 131.232.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:94:0e:bb:2c:30:79:5c:a2:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=d0e9909c-4b7b-4c8c-9d07-21bd9c8da4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:33:7f:96:77:1a:5d:01:88:2c:45:fb:bb:
5f:63:f3:e3:9d:e0:31:e6:0d:39:a8:bd:07:35:16:
60:98:3a:ab:7f:fc:a3:fb:bf:1f:aa:c2:1d:3d:a0:
4a:59:4b:12:d8:60:c9:99:64:eb:4a:4f:1a:07:50:
3d:75:90:3c:f4:5e:7d:3a:fb:1a:87:06:3a:5a:8d:
28:c4:a3:e6:42:cf:66:9b:a0:09:38:85:44:0d:b6:
06:93:0d:63:0d:d9:48:0a:9c:4c:06:cf:f8:95:86:
a5:07:88:14:84:fd:c0:d9:8c:fb:28:32:c1:a7:a4:
58:eb:7a:0e:69:96:9a:9c:74:1d:54:9b:37:d9:1f:
e3:16:c9:8b:3d:74:89:88:64:e1:e2:16:ae:8e:ea:
d3:94:59:f4:63:40:1d:39:61:2a:e5:f8:6a:eb:3c:
4d:f2:c8:95:b4:b4:ce:cc:4c:da:e4:97:c5:0a:bc:
58:1b:f6:47:86:a8:4a:d2:1a:08:22:96:cf:a3:6e:
ef:fe:2b:3b:46:06:56:3b:5b:7a:ea:72:e3:c7:1d:
e8:03:f7:6e:9b:5f:40:98:5b:59:4e:22:42:87:73:
24:e2:2d:c6:1b:ba:4f:17:fb:dc:f1:40:9d:46:34:
dd:d9:ce:24:7c:16:5e:ab:15:98:27:b5:d0:96:2e:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1B:90:AA:65:FA:92:FC:62:1C:18:24:F9:5B:09:CF:81:81:8B:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/91c86816-35b3-328c-94e1-89b663410835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
X509v3 Authority Key Identifier:
keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
sbgp-ipAddrBlock: critical
IPv4:
131.232.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:e7:62:a4:e4:2b:7e:a6:97:aa:9e:ae:12:1d:34:c8:1b:7b:
3e:5f:a8:5c:8f:4f:6a:8b:ec:92:fb:10:b8:8d:a2:ff:7e:6b:
c2:cc:54:14:fc:cb:4d:d3:60:b6:9d:02:44:7c:1e:07:4e:fd:
93:55:3e:41:d9:39:5b:bc:1b:02:dd:00:9d:a3:00:87:45:43:
85:2b:44:82:f4:44:d4:06:e1:5d:f3:a6:5d:f6:ba:4e:34:01:
e9:96:85:6f:dc:83:ac:90:d0:ae:0e:22:e1:fa:41:39:70:3c:
9a:ba:57:8b:56:6d:27:46:c4:55:00:01:bf:ab:b3:76:3d:16:
f7:3f:22:cc:85:c0:bb:aa:1b:0a:de:0e:78:5a:09:8a:3b:bb:
01:c4:63:26:ab:eb:fb:9a:8b:d4:c3:dc:ad:6f:e7:06:03:7d:
61:30:9c:50:34:12:b0:e0:96:a7:35:c3:85:09:01:fc:72:c6:
50:c0:ee:ae:5b:ae:a3:d4:7c:0e:ed:7c:c9:10:8b:51:fd:5a:
bf:34:b6:45:5e:ef:ab:e3:84:3b:3d:3b:3f:53:87:be:15:27:
c4:8d:78:1b:03:7f:e5:15:37:7e:05:6b:75:9b:e6:41:3a:b0:
69:cb:b8:49:60:ae:04:b5:4c:aa:7b:b2:f0:be:6e:af:1e:54:
1e:58:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:03 2025 by rpki-client