Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa
File: 8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa (raw, json)
Hash identifier: DIbSqWWpFPPOeZcJRHcncnLgrNKmzxMmQXEXY1MzD28=
Subject key identifier: 88:82:83:F0:B6:27:B9:DB:89:B8:FF:14:48:44:F4:B6:81:E5:93:E9
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482D5A8E1A5BD410286494B9C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 213246
IP address blocks: 131.153.140.0/24 maxlen: 32
131.153.141.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8e:1a:5b:d4:10:28:64:94:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=48963c0f-67f4-4712-a83b-cb13fd5f2e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:af:e1:21:12:14:d8:9a:66:ab:a5:ca:d9:
9f:04:2d:12:8a:6a:7a:88:d4:93:14:64:23:d5:20:
3a:c3:6e:1f:bd:6f:40:6d:98:57:f7:0f:c3:de:c4:
4e:90:93:33:b6:4f:31:d9:ae:72:5c:b2:c9:13:fa:
99:d9:fd:b7:80:f0:8d:0d:c1:99:1e:b4:49:ef:e7:
54:6c:dc:4c:50:b3:a2:a9:d8:39:03:ec:13:b2:14:
5d:2e:76:f7:ec:6c:4d:7d:a5:f9:ae:e6:3f:f8:63:
c2:77:04:f3:5b:95:a5:a0:20:43:1b:ef:85:8c:e6:
0b:d2:d6:77:f5:df:d1:cf:20:95:93:71:43:13:f4:
89:db:f3:cc:4f:5f:42:8b:ab:8d:80:b6:2f:76:17:
98:be:77:2a:6c:4e:f4:5a:81:bb:fd:0b:74:62:33:
16:6b:68:c6:87:97:77:f5:97:c8:c4:94:f4:75:9a:
15:d5:b8:55:2a:64:0f:38:4d:fb:e4:ea:71:e8:fc:
6f:9c:b4:a6:ab:e6:d9:a6:8b:1a:b2:71:68:0e:f7:
11:75:55:55:ff:5b:50:70:3a:cd:72:40:ad:3a:62:
ee:e6:18:89:03:84:cc:d9:7f:52:55:a6:9c:0c:26:
bc:5f:31:95:34:2d:e9:d8:72:06:96:73:3f:cd:4d:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:82:83:F0:B6:27:B9:DB:89:B8:FF:14:48:44:F4:B6:81:E5:93:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:79:f1:c3:85:bd:ff:af:2e:fb:ba:d5:aa:88:86:ca:6f:8b:
05:d3:57:47:89:8d:fa:56:ca:98:f8:f6:07:76:80:19:a7:8a:
1d:2d:ca:1f:d9:c3:77:f2:34:c4:bd:a0:79:b3:c5:1d:c1:64:
6d:4f:d1:c8:70:e4:55:99:d9:52:a9:37:5c:38:19:39:90:3a:
df:9c:43:aa:78:9a:9a:76:2a:d3:a9:8c:ed:c9:c7:fd:66:38:
92:1b:06:68:dd:e9:a1:50:b4:15:a5:2b:d9:25:8f:4c:f5:25:
f4:34:2a:fe:7e:48:d7:18:da:10:4f:da:3e:9f:4d:2d:66:de:
2e:a9:86:52:48:c9:d7:6e:fd:a9:c5:da:9e:a3:aa:cb:8e:2d:
e1:87:30:f6:d0:30:70:67:82:a9:a7:08:7e:45:da:91:fa:7c:
75:bd:ca:c1:58:09:bc:a7:39:f2:22:fb:c8:a3:6d:9d:0f:ce:
4a:35:ac:21:85:be:8c:31:3a:7b:9f:6e:f7:b4:66:e3:bd:a0:
8f:bd:8a:1f:de:04:b8:2c:b0:e5:74:50:89:5e:82:c4:a0:45:
4f:a0:2f:2a:e0:ca:9c:a4:78:b1:25:17:4a:3f:69:b4:7a:4c:
75:11:67:94:1a:10:ff:7d:58:2c:e0:6f:b5:79:92:d4:d2:4a:
a8:93:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:50:51 2025 by rpki-client