Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa
File: 592675de-1b35-3401-9682-044785d5e65a.roa (raw, json)
Hash identifier: 8pCk4vj9H6uVtBzXdVhRFm8Mk1WOMOGQId9DGO2r1As=
Subject key identifier: 92:90:3A:C4:8F:DA:32:04:77:14:80:24:30:E8:F5:A6:AB:38:E3:C5
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482EBFFC761DB471FA34FBBA80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 46385
IP address blocks: 131.153.165.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:bf:fc:76:1d:b4:71:fa:34:fb:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=4d0f10fd-377e-4807-b8bf-4cca94397336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:24:fb:39:a1:f4:c1:2e:a9:7b:20:be:65:
22:e5:16:17:79:26:b5:22:03:c0:eb:cf:d8:f4:e3:
bc:97:9a:94:c9:a8:9b:cf:3d:54:be:88:9c:cd:96:
89:fd:0b:b3:e0:d7:75:91:5b:79:45:df:7d:5b:cc:
4a:03:ed:8f:17:bb:45:73:f1:62:61:40:8f:02:76:
63:7c:56:02:20:64:d4:25:ad:99:38:44:af:65:ab:
e7:7c:0e:3f:71:2b:40:60:ce:5a:11:a5:ef:32:57:
d2:e2:12:4f:b4:89:b8:53:e9:6d:1b:fc:68:49:1e:
1f:13:ef:86:0e:82:fb:c8:db:69:70:64:2f:f5:fb:
04:a7:5b:10:69:b8:66:a6:28:01:0b:96:04:6e:a1:
e1:5b:79:92:6e:9f:a3:4c:ef:af:ab:65:b9:a3:54:
16:4d:39:06:1c:9d:8e:a6:ff:00:15:ec:d6:14:68:
89:dd:ac:97:73:9d:de:ee:11:71:a2:a0:f1:23:e8:
85:66:d2:35:a7:4f:9a:b8:b2:81:56:b0:38:48:89:
c1:e6:5f:50:83:0a:01:00:a2:f5:16:36:1b:65:68:
7f:41:0e:3c:20:1f:e5:49:17:06:12:40:a4:7d:4e:
dc:f4:60:a0:a6:8a:df:9c:8d:3f:06:ed:c0:6b:59:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:90:3A:C4:8F:DA:32:04:77:14:80:24:30:E8:F5:A6:AB:38:E3:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:99:9a:eb:fc:d6:18:a3:fb:97:c6:19:d7:1c:45:45:f3:0d:
02:c2:97:b2:cd:e8:d4:96:b1:99:d5:08:ab:db:cd:df:46:a2:
ae:41:4c:79:c9:04:49:cd:2b:d3:e2:5e:2a:10:21:6a:4e:50:
7b:fe:4e:af:c6:81:44:35:4a:1b:32:36:fa:53:9e:50:cc:26:
89:04:47:df:ea:54:5d:12:51:2d:00:14:9f:ca:17:4d:8c:00:
1d:bc:e0:c4:9f:92:8a:7a:2b:c1:c7:40:32:da:a5:10:5b:1f:
50:3a:a9:80:66:35:0f:f1:63:2e:23:1a:b2:d4:6d:91:50:97:
88:e1:36:9d:9a:dd:05:53:ed:14:f1:b2:f6:19:a5:0a:bc:21:
f4:9c:28:8c:58:47:de:87:55:31:dc:69:fc:93:5e:9c:2a:53:
fa:26:53:c2:25:2e:a3:83:2d:1b:e5:6b:0f:f8:84:88:d8:29:
ad:0d:07:ef:64:86:87:4e:db:63:4f:2c:3a:c6:78:83:97:a1:
8b:e8:43:00:68:1b:f1:ad:84:46:e5:87:6f:54:bf:87:0f:45:
26:64:25:02:e1:28:5c:0d:fe:7d:19:d7:5a:7b:5e:08:4c:f4:
d4:5a:9e:f7:0d:4e:3c:b5:87:38:e9:f0:66:30:6b:b9:56:2b:
93:ab:2e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:52 2025 by rpki-client