Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa
File: 06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa (raw, json)
Hash identifier: vYt5RILiA7fGwgDOOOpwflmT4ZJeV5P1Lscq4T9ZfMo=
Subject key identifier: F9:CB:C6:48:DC:B6:59:C7:07:E2:4C:28:24:1C:C4:C1:3A:37:12:95
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482EC003F2F43F95E46C7039C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 20454
IP address blocks: 131.153.32.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:03:f2:f4:3f:95:e4:6c:70:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=bb335915-ff58-47e1-88d3-546dc4bcba9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:5f:42:64:a7:f7:04:e5:38:3f:7b:29:8d:
ee:55:d7:74:11:5c:b2:06:2e:ba:97:39:1f:a3:66:
21:14:26:86:75:c6:3d:f3:f8:13:2b:f8:6c:0c:8b:
54:36:28:e8:bf:d4:da:d4:7c:33:c0:26:b0:83:23:
8a:b6:89:56:4d:0d:ae:d4:04:76:af:2e:c0:df:3c:
a6:fb:45:78:a8:6e:b0:99:fe:8b:09:5f:da:fc:b5:
2e:20:38:25:49:b4:f3:d4:d7:53:b8:56:1d:85:05:
3f:0f:b9:21:67:8d:72:83:8f:0b:51:fb:1a:09:74:
dd:20:d7:af:a0:6b:b5:10:08:5b:dc:54:a4:5b:19:
21:6c:03:98:1b:ca:c6:43:8e:12:cf:57:f8:b2:0b:
4b:9c:23:6a:46:7c:ce:bc:58:d9:5b:54:38:09:28:
d6:d1:46:13:70:37:74:ee:49:43:28:65:e0:77:94:
6e:b2:96:e6:89:b5:6d:5a:e2:6f:74:1d:fc:83:69:
c9:ce:b3:8d:1a:41:10:5e:8c:5a:81:7b:99:be:a1:
ea:e0:39:da:66:32:53:8c:23:76:b8:c8:7c:ca:15:
d5:23:8e:ca:fd:59:25:9a:6e:0b:45:a1:bd:3d:a9:
81:51:9c:ed:aa:52:10:89:37:bd:ba:ce:0a:4b:97:
37:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CB:C6:48:DC:B6:59:C7:07:E2:4C:28:24:1C:C4:C1:3A:37:12:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:93:8d:82:44:d4:16:52:02:af:56:25:85:fe:a1:da:09:f9:
0d:e1:97:1b:27:3b:87:5b:89:69:15:f1:4a:e8:bf:9a:b3:22:
f8:87:08:a6:d1:7b:50:1f:04:a2:cb:b6:3d:c0:90:ca:5b:26:
d1:fb:f3:47:48:b8:ef:fd:1e:35:40:a1:df:05:77:70:92:d1:
20:48:63:db:d9:25:68:b4:32:45:2b:e5:ac:b7:ba:9d:38:b9:
61:11:7b:a9:b3:cf:26:42:b8:c9:b2:17:f2:bd:93:4f:65:f0:
08:bf:5a:7a:0a:4a:18:0b:6f:2a:83:3a:5f:e8:82:7f:94:e8:
fb:87:c9:3f:69:d2:a8:e4:46:b1:e6:6c:17:11:8f:3e:0e:51:
f5:c5:82:c7:65:fb:35:55:65:dc:a4:4e:97:cf:e5:dc:1e:65:
79:06:4f:8c:5b:5d:38:2e:9d:d0:e2:46:1d:30:d8:5a:96:d8:
c1:63:2a:8a:69:11:b8:49:ad:cc:ce:5b:ae:41:5d:a0:ac:76:
e7:a0:79:13:b0:10:c2:40:c2:2b:b3:16:14:dd:1b:cf:a4:7a:
ab:96:44:22:c0:12:7a:95:72:86:a8:88:10:60:b8:52:d6:5e:
98:37:ae:11:8d:2e:33:8c:7a:af:78:b2:ce:9b:68:c7:fc:bc:
99:cb:0f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:11:18 2025 by rpki-client