Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa
File: 3a49eb68-6216-3abc-822d-65fec49cdd7d.roa (raw, json)
Hash identifier: 04Z6HRxJ2AC7pJkbjFk3BWNcbfAGmEWun0+e/tS+prk=
Subject key identifier: 68:C9:CE:75:A9:87:D9:38:16:75:97:79:D5:0C:1F:9A:F6:F0:DF:16
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482EBFFBC78A5A0A264A6DB980
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 12189
IP address blocks: 131.153.124.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:bf:fb:c7:8a:5a:0a:26:4a:6d:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=7539b71c-b148-4043-8e7f-99255b98cc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:cb:e3:fb:4e:ad:d4:1e:61:96:29:f3:2b:
92:db:e8:06:73:d8:26:c7:55:4d:99:b3:9c:1b:cd:
5d:e0:ef:9c:20:15:2f:6c:1c:1f:43:dc:09:0a:ca:
41:c6:45:31:01:2c:60:cb:83:08:65:f7:b2:43:bd:
3a:1a:ba:68:e5:ff:f3:a1:dd:78:66:40:9e:e1:c9:
24:21:82:d6:ea:16:8c:f3:09:2d:c2:ce:53:75:79:
29:28:29:03:98:90:7d:84:2f:c0:28:b5:01:ad:c5:
d9:b0:b5:11:81:23:3b:d0:29:ab:db:0d:d9:94:60:
35:7f:13:3a:8b:3e:37:0e:1b:55:e8:dd:1f:a8:7c:
88:3f:1d:08:ce:e7:8a:59:a9:9f:0e:20:09:5e:0e:
d1:88:10:19:ac:2b:4d:ef:a7:93:df:bc:91:fa:96:
87:4c:de:56:b0:85:3e:6f:4d:72:0b:93:47:e1:df:
9b:ca:a3:a3:69:51:3e:51:62:03:23:dc:6c:f3:99:
10:3d:d1:59:82:04:fa:a2:e8:d9:6e:86:96:16:ff:
e3:d1:35:6e:ee:b3:22:43:b8:4f:af:d8:77:75:27:
b7:ca:84:43:77:e9:35:f0:16:b0:0b:e3:09:e0:c2:
83:da:6b:fc:e4:9a:c6:48:11:60:19:13:dd:8b:65:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C9:CE:75:A9:87:D9:38:16:75:97:79:D5:0C:1F:9A:F6:F0:DF:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:de:15:b9:99:5b:6a:8d:58:ac:10:9a:a7:2c:6d:50:e6:d0:
8d:b1:9d:2c:fd:47:2d:c6:93:d2:b6:48:19:22:f8:3c:ce:57:
b9:ed:32:cb:da:32:0d:fd:f7:8e:9e:5e:55:46:23:77:26:4f:
96:63:26:df:f8:3e:62:79:85:32:66:82:7e:a3:f9:47:ff:2c:
aa:b8:7e:c6:00:51:8d:56:46:5c:27:3e:ee:9d:09:a1:fa:d4:
24:e9:5e:92:4a:aa:d9:83:c3:01:c6:32:c3:89:94:35:b3:c4:
4a:f0:98:e2:be:74:32:ae:8a:6f:5d:b7:79:45:a2:4f:74:b9:
0c:11:3d:57:c8:b4:c0:0c:55:29:0c:ed:c9:ab:63:a1:84:5d:
3d:de:63:72:ad:b5:ae:8c:eb:57:32:ea:4b:9f:b6:82:91:8a:
62:f5:27:9c:79:f9:c0:0e:81:79:f4:f5:cb:3c:68:6e:64:95:
84:8c:73:ee:d0:5a:d5:55:98:e5:ef:35:bc:ab:8a:2f:71:1e:
ee:41:b4:9e:d3:eb:69:de:4d:63:fe:14:73:17:57:09:88:c0:
1f:12:e2:a5:f8:1d:d5:56:e3:fc:18:cc:d7:9b:98:4d:e6:81:
57:a7:d2:59:36:5c:33:bb:b3:14:12:b3:24:be:6c:52:0a:d6:
e3:cb:46:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:01:22 2025 by rpki-client