Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa
File: 36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa (raw, json)
Hash identifier: 6UfVC9ZPKH6wLjug7CyCBJrJhVWvW12iAIsx1asr4tE=
Subject key identifier: 6A:8C:48:DA:C8:23:34:A4:48:23:08:7E:C8:A4:55:1A:70:94:DB:06
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482D5A89C989FB995D54985360
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 20454
IP address blocks: 131.153.52.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:89:c9:89:fb:99:5d:54:98:53:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=3c24d901-218b-4b33-b255-ee72ecb0c4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:55:85:21:d0:de:e6:29:6e:77:d4:93:ee:9b:
55:ed:da:ca:b5:42:ea:54:b6:9f:8f:61:68:fb:b3:
52:0a:c9:72:91:ea:83:f1:3d:a1:4e:02:59:fd:52:
fb:c8:b0:77:41:c7:4f:35:f7:dc:e9:96:38:fd:5e:
31:79:2a:ac:78:12:2b:83:8f:44:75:65:08:9c:d0:
61:d1:e8:3f:b0:7a:2f:22:b0:e8:db:d9:c7:cb:0c:
f2:c5:89:7d:ff:b3:87:f9:07:7f:64:97:6f:3c:38:
97:b7:f1:82:37:30:16:07:67:ba:9d:93:51:83:97:
2c:15:86:83:9a:62:61:41:4b:1f:a7:91:e9:9d:44:
a7:d5:7f:2e:eb:24:5c:b0:b4:63:63:a5:45:46:4f:
3f:6b:d4:38:76:3f:fc:03:eb:e2:6b:03:c4:c7:bd:
ff:8b:61:0f:b4:92:a0:2f:69:77:5b:7e:92:17:47:
21:f8:33:81:e1:b5:0b:2f:25:36:f9:25:00:85:c2:
64:57:e2:d7:20:ae:bd:8e:39:c3:a2:ff:fd:07:cd:
29:10:31:b3:3f:6b:a8:41:c5:cb:46:3f:15:3f:dc:
04:26:ec:64:d6:74:9e:58:3d:0f:12:a3:f4:8e:2d:
23:3a:9d:24:35:84:69:28:40:76:8e:65:2d:99:23:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8C:48:DA:C8:23:34:A4:48:23:08:7E:C8:A4:55:1A:70:94:DB:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:04:a3:82:51:77:45:16:6c:1a:af:6e:ce:f4:b8:39:f3:eb:
e5:c2:45:bb:89:11:6a:55:4f:fc:d2:63:14:f9:7a:47:14:81:
4a:45:5b:c9:9f:84:b7:f5:76:7b:38:89:66:dc:c2:43:8d:77:
f8:53:36:0d:5a:69:61:4a:02:6e:93:a2:f6:bc:39:06:49:98:
16:df:93:a5:a3:c6:76:ae:b7:61:ce:4a:bd:41:47:73:17:e8:
a6:18:dd:84:77:79:db:c6:c7:2f:a5:72:05:42:06:93:bd:4b:
73:48:c9:37:ba:b9:9c:48:13:e4:19:e1:9b:75:2c:0d:e9:e7:
d5:ca:b6:79:aa:ff:1a:79:09:35:cb:3f:d5:97:5c:e1:fe:a4:
01:43:6d:ab:50:df:e9:33:29:e8:3f:06:50:fb:45:3e:c2:00:
58:78:e7:6b:d7:55:26:ed:92:0e:14:4c:c2:70:78:d8:8e:51:
bd:d5:1e:26:d3:83:3f:a6:9d:f0:51:0c:32:c1:8b:f3:50:2c:
e0:c7:85:05:05:31:f8:a0:8f:2f:67:96:b2:c9:48:3e:25:ae:
9e:d7:9f:5b:ce:66:38:fb:52:20:87:ca:2b:ab:14:9f:bc:a5:
c5:52:fe:e9:e3:02:cb:d5:ee:6e:e5:ac:52:1d:a7:e6:5d:e2:
72:85:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:55:01 2025 by rpki-client