Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa
File: 123cfc75-ee2c-3a64-af65-154a3f602d33.roa (raw, json)
Hash identifier: S8zaf9IJiie6s1rtyCWqRihaU0CkUsXkeAi4e/shLWI=
Subject key identifier: CD:41:32:E9:2B:F3:B9:FB:BC:22:EE:B7:A7:8E:4D:19:DE:81:B9:51
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482D5A8B5184CDD94CA7BD4D00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 19437
IP address blocks: 131.153.100.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8b:51:84:cd:d9:4c:a7:bd:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=f7c2880c-02c3-4d62-90e6-2d221b593cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:d2:86:98:eb:0d:45:b7:74:5d:d3:b2:ae:
9e:7f:37:6b:48:47:fe:51:7b:65:23:c2:23:7e:52:
c0:bc:f8:08:5f:1c:35:82:c1:7b:a2:1e:f7:be:2a:
a5:c0:e2:86:ef:46:43:9c:f7:5b:02:c0:06:d0:8a:
1e:e0:25:83:11:7a:34:9c:a6:54:24:0f:9e:2e:6a:
34:22:9c:b1:dd:b1:25:a0:0b:bb:cc:00:65:18:ef:
ee:49:ee:75:f9:15:02:2d:67:87:1e:ed:50:e2:54:
68:a0:5e:ac:a8:c8:29:38:61:d2:b2:04:a5:16:7e:
a7:6e:8b:16:eb:98:da:25:cf:8a:96:09:eb:61:92:
ba:07:17:25:a1:8e:e8:4b:98:dc:21:03:1b:6d:0d:
fb:6e:de:f7:75:f4:0e:bc:56:48:4a:d8:cf:49:97:
f9:78:70:fc:dd:58:10:83:64:a5:59:89:72:67:19:
ba:78:2e:d0:05:85:ab:45:ae:f5:19:50:93:42:cc:
f7:b9:36:82:3a:f3:fd:9a:3c:d2:de:37:fd:23:a4:
21:99:8d:98:04:a3:3b:2d:44:4c:ac:c2:59:0a:f7:
4b:07:d1:67:2d:5c:c6:49:35:97:02:c5:43:a6:12:
a0:ec:74:0b:98:db:83:ba:02:0c:83:8d:f4:5b:37:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:41:32:E9:2B:F3:B9:FB:BC:22:EE:B7:A7:8E:4D:19:DE:81:B9:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:e4:45:ab:69:05:2e:92:e8:b5:f5:b6:19:1b:a1:e1:1b:dd:
70:27:89:b0:21:94:91:84:6c:ba:c8:d3:6d:f8:a7:41:01:f8:
a6:61:ca:cf:9a:c2:3a:6d:28:44:f9:c4:64:a5:7c:19:e7:ee:
8c:b8:96:be:f8:19:5e:66:df:d6:c0:ba:97:42:46:d7:d9:f3:
31:8f:78:58:db:40:31:cd:ec:1d:e6:35:0b:e5:20:e6:e8:e4:
e5:d8:32:13:fb:c1:09:2d:c5:f0:53:ed:1d:c2:df:a3:a9:e6:
5d:f9:ed:d5:7a:a7:44:e6:73:26:33:9a:b3:cc:c3:73:77:c0:
37:4e:24:5c:87:59:cd:aa:47:90:3e:62:0b:c3:9a:50:64:a2:
c6:16:8b:f3:23:4f:fc:f5:d2:96:cf:c6:98:0f:37:28:33:2d:
30:d7:f0:52:25:83:c7:27:97:50:08:f9:b2:e8:49:c3:16:3a:
ae:fb:fe:87:f6:ad:a0:d6:51:0d:2f:19:82:0d:cd:f8:56:b2:
cf:84:bb:58:eb:c5:e5:a2:fd:e7:2a:a1:4d:75:f2:30:45:1a:
c8:a8:97:27:b1:d7:22:6b:2d:2a:e1:d0:3e:33:27:f4:19:1c:
ad:9f:f9:48:00:99:30:e8:ba:31:5b:19:79:42:4b:46:73:d7:
1d:c1:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:33 2025 by rpki-client