Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa
File: 3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa (raw, json)
Hash identifier: ZBst5eOytWyupo8GA3lSslceMimtdlUd2iOWoPAetVw=
Subject key identifier: EE:C2:B7:6E:A2:75:83:44:C7:45:4E:D6:C0:0E:8C:6B:5B:99:8B:03
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858488DAB475631365A0550C46F80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 19181
IP address blocks: 131.153.224.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:47:56:31:36:5a:05:50:c4:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=f3e60a87-5dae-4991-a118-9da079251ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:bb:12:ed:38:23:d5:52:e1:4e:29:37:ce:
91:1a:ae:ac:eb:30:ee:ce:d5:b9:e9:b2:6d:ff:27:
20:88:34:45:a5:1b:de:88:43:e5:5a:e9:95:fc:e7:
bc:be:69:6f:95:71:09:07:4f:84:cf:a8:fa:c7:10:
fb:b6:5b:95:79:08:0f:67:ea:4b:01:32:72:81:a1:
5e:30:5e:06:3a:cd:1b:b4:9c:c6:74:86:f0:e4:d7:
ce:b2:ea:d5:ab:64:2a:35:d4:cc:d5:64:65:dd:ee:
27:06:4a:88:8a:bd:1b:13:b3:73:57:23:0d:15:ee:
03:97:f9:36:63:1d:c4:e3:89:31:ac:68:c5:b4:6d:
75:09:05:2a:64:6c:60:67:8f:5a:ce:50:f1:6d:c1:
69:92:79:d0:14:10:07:e7:68:3f:d1:62:5e:c3:4c:
93:e7:d3:be:56:b5:56:96:68:eb:74:d5:e2:5a:1a:
9a:f0:54:4a:ae:72:97:5f:0b:35:2c:29:77:f0:d8:
dc:21:3a:06:ba:07:50:33:c9:7c:94:5e:0c:75:39:
d7:69:39:04:54:2c:0f:2f:ae:b3:e7:dd:be:1b:f5:
ec:94:01:35:f3:e9:b7:de:ab:9d:32:e4:9f:0d:d1:
03:96:27:43:a0:40:93:94:32:ab:2a:a0:2a:ed:f7:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C2:B7:6E:A2:75:83:44:C7:45:4E:D6:C0:0E:8C:6B:5B:99:8B:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:dc:8e:7a:c1:85:83:4d:1e:ad:fb:01:69:5c:d2:ae:5a:01:
34:99:1a:8f:c6:e0:45:a7:f0:79:1b:a6:a8:40:f4:d7:63:de:
9d:bd:31:97:b1:cd:80:63:0d:f1:e6:51:15:11:e4:8b:ee:de:
16:a5:d4:8a:7c:03:0e:3b:76:bd:b1:48:36:f9:64:05:19:56:
49:2f:ee:10:e1:de:28:8f:c7:11:75:ac:c8:ee:8d:3c:73:a3:
a0:82:61:04:a3:1e:ad:47:34:a2:32:09:fd:da:7c:a6:5d:e5:
3e:b1:70:e7:cd:8a:a9:de:e9:1f:8c:62:88:de:97:93:1f:c1:
d9:cd:a3:e5:f2:39:ad:c2:fd:0f:66:13:fa:55:cd:93:6d:7c:
a9:db:88:2d:6e:a3:59:10:fc:9d:db:97:e5:1c:8d:65:fd:a7:
77:e9:8a:ae:16:e0:0a:0b:ca:dc:60:32:47:9f:40:bf:4a:cf:
27:94:c1:88:c8:41:0a:fe:a2:89:30:84:0e:b2:1d:f6:20:fb:
4d:a5:99:2a:1c:9c:e4:0b:85:24:50:aa:6f:a7:09:26:e2:f2:
de:26:12:5c:37:8b:ba:47:89:9e:f5:58:19:97:a9:28:3f:19:
49:6e:cf:70:ab:a9:6a:03:d4:7e:51:38:69:5e:52:cd:2c:17:
90:8f:5e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:01:48 2025 by rpki-client