Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/50f099f6-f36a-3a2d-ae20-65ae9a14e048.roa
File: 50f099f6-f36a-3a2d-ae20-65ae9a14e048.roa (raw, json)
Hash identifier: QDWiKIs3HDAxf+WlP62Wbhk+WnZUfmWUVW7Ea4Rs3TU=
Subject key identifier: C8:F1:0C:5E:55:BF:33:90:95:D2:EB:8F:3D:38:DA:A9:0E:03:95:7B
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482D5A8DB1BCF7FCC7E02AC900
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/50f099f6-f36a-3a2d-ae20-65ae9a14e048.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 209485
IP address blocks: 131.153.91.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8d:b1:bc:f7:fc:c7:e0:2a:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=ba0468ec-dcb9-46f9-902d-a874761541e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:7c:38:8d:8b:72:5f:74:1c:3a:f9:2f:fc:
93:04:50:23:51:f6:92:3a:47:bf:52:47:50:a3:ab:
be:1e:43:d9:9e:85:02:09:0b:ce:36:c1:52:b2:1e:
79:04:2c:2b:2e:c5:f0:53:bf:5d:e2:72:7e:41:90:
78:28:69:f3:82:6c:e5:70:4a:ad:dc:b8:1f:d1:e2:
13:47:9e:d3:6b:62:93:fd:2b:65:00:97:c0:28:a4:
aa:f4:2f:a0:0c:75:9f:1b:03:b8:1e:3f:5c:0f:ec:
8e:e7:98:ce:20:75:c9:57:38:be:44:0e:86:a0:7f:
53:40:13:38:70:01:ca:08:7d:85:5e:92:1d:fe:c2:
96:89:ff:bb:21:b2:14:81:cb:53:4d:04:24:93:41:
d0:2e:0d:0a:59:09:b2:a0:ed:bd:41:8a:b0:7b:27:
6c:35:7f:fa:e3:37:fb:72:d6:3c:dc:25:9b:21:ac:
29:e0:83:c8:fe:bb:96:aa:62:82:e2:61:1b:73:42:
05:72:e7:fa:c1:e4:a3:36:f2:ce:2d:d4:2e:e9:4d:
af:e6:12:3c:34:3c:ba:52:f9:80:83:85:22:3f:b5:
7b:56:8a:31:b3:fb:99:38:cf:78:04:d7:87:55:23:
19:39:8f:eb:41:7a:89:7f:ee:cb:f2:05:9a:80:15:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F1:0C:5E:55:BF:33:90:95:D2:EB:8F:3D:38:DA:A9:0E:03:95:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/50f099f6-f36a-3a2d-ae20-65ae9a14e048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:57:60:c5:a3:10:c2:e4:6c:07:25:a0:ab:90:21:7a:92:75:
60:41:b5:16:51:43:9e:c7:05:6c:91:13:c7:7c:c2:4f:cd:15:
25:4f:d3:a5:90:09:f5:5c:2f:b0:14:c8:a9:55:7e:29:bc:31:
23:ff:2e:29:5e:7f:dc:24:a8:38:e2:26:4b:85:01:95:3d:db:
c4:f2:3f:0f:88:fb:1f:a5:18:27:5f:bd:d0:c1:68:cc:20:ed:
c1:59:e8:0e:e3:22:3c:01:16:16:ed:5e:9c:a3:62:36:8e:32:
3a:01:c4:40:31:1a:ab:72:b9:1a:7a:a9:55:fb:96:a5:a8:8b:
cc:9f:f9:f8:80:89:dc:ca:f9:ac:cc:b4:79:30:9c:6f:ef:28:
2b:bc:e4:f7:51:ac:fc:7c:1e:a8:1c:37:d2:06:b7:f6:5f:03:
d5:00:8f:e8:b0:da:47:a9:66:29:d1:41:89:fe:41:70:f9:f0:
64:68:b3:fa:32:80:0f:65:1d:e2:58:88:b4:45:e2:41:e5:cb:
61:d2:76:7c:fc:c2:a9:40:a0:e4:a6:70:7a:fc:29:c4:3e:a4:
d1:bb:48:2f:96:71:29:1c:63:a9:56:20:bb:7d:14:a8:4c:7c:
c3:72:3a:22:ce:b4:d3:9d:08:5b:8f:03:c9:f0:1d:9a:ef:a8:
1d:3c:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:33:08 2025 by rpki-client