Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7e61e908-169f-33b7-a055-27c63e9911e5.roa
File: 7e61e908-169f-33b7-a055-27c63e9911e5.roa (raw, json)
Hash identifier: usy6vWq5g/lkKBu3fSjZOkXo4yhn2voMOWm3Ce048RA=
Subject key identifier: 77:7A:59:22:2E:89:AB:9C:54:CC:70:85:C5:CF:D0:DB:55:09:E8:E4
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858485470343139BCFD7B69AE4C40
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7e61e908-169f-33b7-a055-27c63e9911e5.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 394643
IP address blocks: 131.153.244.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:34:31:39:bc:fd:7b:69:ae:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=8374a931-9a87-404e-9d7d-a8e49a120462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:d0:6a:a4:f6:ea:db:67:2e:21:9d:b0:be:
20:3c:fc:ad:f6:30:0b:e2:03:0a:5c:bb:8c:29:79:
2c:99:29:41:8b:5b:ad:5c:a6:d0:8f:51:d6:b5:35:
44:f4:f9:af:ca:61:f2:d1:a6:f0:27:dc:17:97:89:
42:13:e9:1e:3c:87:dd:e4:bf:e6:e4:3b:b7:4b:75:
dd:aa:80:93:e4:60:e4:1e:a0:28:fe:a6:94:c4:eb:
77:76:1f:94:83:61:92:49:47:95:38:21:b3:4b:16:
16:a9:36:87:9a:4f:d7:c9:68:e2:10:96:49:1d:b8:
47:3e:e3:4a:06:7d:89:da:c0:c3:ba:2e:dd:74:c6:
b3:a4:7c:f8:b1:81:ae:a2:bd:cf:22:d7:7e:e7:6e:
f9:99:f6:61:73:83:f1:93:d5:a6:63:14:1f:90:c9:
f1:c5:50:18:57:c3:3f:2a:6f:51:61:4c:fb:76:3a:
0f:2d:da:d0:a0:f9:6a:b2:d9:7a:7a:f0:00:3c:bf:
10:75:2e:1d:7a:a3:ef:87:a5:82:07:87:8a:0d:64:
d8:18:56:91:2a:58:7c:87:1f:82:29:ec:8a:fd:90:
32:be:99:c3:f7:a5:11:e9:7a:44:ca:49:de:72:f4:
c8:0c:b9:64:47:c5:5d:71:5a:4e:7b:4c:a2:2a:c6:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7A:59:22:2E:89:AB:9C:54:CC:70:85:C5:CF:D0:DB:55:09:E8:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7e61e908-169f-33b7-a055-27c63e9911e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:88:e3:b5:b2:24:65:2d:0f:65:6d:27:1f:72:e1:bd:2e:f6:
13:34:07:38:d0:6f:fb:3f:5b:5d:b6:7a:d2:bc:11:95:f2:8f:
00:c9:26:85:ad:16:15:96:49:93:84:03:7a:aa:2d:19:11:9c:
f1:34:de:bc:ab:00:ee:dc:d3:51:ac:b3:1f:65:b6:70:f0:70:
88:df:e9:73:9f:93:2c:18:b5:b7:02:b8:ae:3c:f4:20:4f:8e:
29:4e:89:44:b6:9b:05:67:b9:b8:16:df:3c:38:26:0c:5c:f0:
c6:0d:c4:b2:5d:97:5a:e8:36:a3:2c:2e:02:83:9f:95:67:b9:
f1:7b:9b:00:6a:f0:86:74:c8:f6:49:4b:16:de:58:bb:ee:d0:
dc:56:fa:c1:99:cc:3f:b3:ab:88:c6:fe:1b:cc:b0:99:f7:8a:
8f:62:ac:ae:32:1e:13:74:4e:0c:05:3e:88:74:5f:a7:23:b5:
47:b0:09:57:82:5d:fb:be:f2:3e:28:aa:c0:55:f3:7d:b9:c3:
0d:39:ff:91:d5:a0:ba:40:a0:a1:06:32:2e:6a:eb:b7:49:c6:
59:bc:66:d8:72:39:75:92:86:9e:20:e6:1c:44:f8:fa:37:fd:
4e:08:bc:62:7d:1c:a1:d2:b0:16:ab:9d:34:6c:3d:40:71:27:
99:1e:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:00:10 2025 by rpki-client