Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa
File: fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa (raw, json)
Hash identifier: /QbmtAnNq2BD+O9IaZXbMIebH5hGVvMRrA+IxMYgtv4=
Subject key identifier: 43:8C:65:A0:FF:AA:FE:24:9A:F4:25:85:1D:F2:F9:47:30:1F:DC:9B
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584830253E1E150D4F6FC368AA00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 54113
IP address blocks: 131.125.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:3e:1e:15:0d:4f:6f:c3:68:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=27d041b4-bb46-4745-a440-9ac4779a332a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:db:5d:e9:da:d2:d1:25:d1:5f:95:23:6e:
ea:41:39:00:90:22:5e:a7:c6:cf:74:35:ff:23:fb:
21:b8:fe:98:6e:c2:0a:12:00:91:86:2f:82:5a:45:
2c:48:ed:69:b6:7b:8f:47:03:2d:53:50:b6:a1:54:
1b:3e:f5:10:e7:1f:ab:93:9a:9b:0c:ca:f3:fa:d3:
cc:1c:3d:d4:dc:3f:bd:2b:2f:b0:18:08:c4:93:24:
01:c0:e5:c2:d4:ca:8e:bb:7c:97:6a:d3:fa:2e:9a:
f2:6d:62:b1:3e:a2:f7:10:8a:53:75:4c:31:a7:cb:
12:0b:aa:3c:90:ce:9f:c7:f9:fa:26:49:c0:78:3d:
5e:c1:72:04:04:01:ba:32:d1:e0:e9:d5:69:32:4f:
d7:13:06:32:48:d0:0f:df:21:8d:ff:f6:2a:fe:a2:
89:94:3d:3c:3c:7c:5a:fa:18:fa:a8:08:22:77:a4:
65:5f:78:11:07:63:ef:67:63:48:6e:b3:42:5b:c6:
4d:6c:10:86:d9:0a:95:86:24:2d:6b:df:04:b2:f4:
a8:5b:75:f8:7f:a4:23:f4:53:5a:7d:54:ea:34:ff:
39:27:06:4d:b4:93:c8:61:24:04:9c:51:77:8c:7f:
1e:9a:c8:88:a6:34:2a:da:40:f9:87:07:6b:a0:1e:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:65:A0:FF:AA:FE:24:9A:F4:25:85:1D:F2:F9:47:30:1F:DC:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
131.125.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:f8:1c:c6:26:fd:b1:32:2f:7d:ef:6d:92:73:38:64:b6:7e:
23:7d:1f:97:53:95:ef:56:b4:9f:93:f3:9d:32:ab:d9:90:f3:
9a:a1:f0:0d:e5:b5:23:13:4d:92:68:21:60:1b:a5:83:47:07:
aa:85:a9:b6:73:d4:fa:d2:71:5c:f1:37:4f:61:18:cd:c3:97:
84:8c:54:41:29:97:55:75:13:76:4a:d7:c2:b0:92:41:73:87:
29:15:dc:df:99:56:78:46:5f:9b:11:2e:c8:1e:01:54:6c:8d:
ed:22:e3:14:26:64:9c:2e:3d:47:b7:9d:14:b3:36:7b:d8:04:
81:dc:c8:a6:d6:c3:3a:02:f9:84:aa:69:bb:ea:19:95:d9:16:
5d:44:49:a4:20:26:fb:76:ad:bb:14:1f:35:65:a7:52:d4:06:
4f:ea:47:a5:4c:d8:3e:27:fc:05:d4:92:1d:f5:88:e4:a8:76:
f6:bd:d4:de:43:ec:21:21:5a:46:a5:c9:a0:1f:2c:80:70:77:
60:ac:8f:d7:2a:b2:5d:89:5f:3f:45:81:34:96:ee:4e:eb:f1:
92:8a:39:c1:83:cf:ae:67:6d:ef:df:c8:ee:a2:82:46:d5:b6:
8b:c6:6b:d2:ff:70:5c:7e:e7:81:e4:c9:ff:4f:90:e2:f2:6b:
02:7d:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:27:41 2025 by rpki-client