Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa
File: ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa (raw, json)
Hash identifier: n8br2PHIsiCkAcq7lD/ee8EpmtEfy4CExG/Iq2ll/No=
Subject key identifier: 60:C8:E6:84:3D:F7:D6:29:30:11:CF:00:A8:38:08:AB:F1:05:C7:C0
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482D5A8D443793B7B6AA891EA0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 20454
IP address blocks: 131.153.68.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8d:44:37:93:b7:b6:aa:89:1e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=257a4476-799c-49cf-ab16-4464c43c4ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4e:3d:d7:23:07:0f:9e:a6:46:21:12:5d:e6:
01:5e:e5:85:c3:8a:16:39:ae:bf:df:50:93:6e:e1:
af:3d:de:ca:b4:fc:03:25:88:45:33:e7:9e:83:5c:
8c:14:9b:11:60:7a:a5:2a:e2:d9:32:a8:42:ff:19:
fd:07:b8:28:bd:b5:b2:a4:85:b2:2e:21:8c:e8:28:
c3:0d:ba:a1:45:c5:1b:96:41:40:be:46:2d:76:f7:
f8:e8:ae:0f:bc:fc:58:e2:c1:d1:d8:b4:40:91:df:
74:19:d4:6b:16:f0:fa:9b:4d:9f:5a:39:12:66:9b:
a4:c0:05:3e:45:2c:c7:9e:33:84:3d:54:c9:3d:d4:
51:c9:79:a4:b0:65:d4:8e:f0:f2:be:e3:3b:e1:2b:
f6:ef:90:79:3b:da:d1:0a:2b:f7:0d:4c:56:3a:ef:
db:12:6b:a4:64:30:8c:d7:e1:d6:30:e8:ca:f2:b1:
4d:fd:af:f7:0c:a3:37:2b:33:50:bb:26:d3:50:8a:
39:5d:b0:3e:02:36:e1:6e:73:3e:92:97:9b:8e:b7:
3c:f8:cf:81:36:d2:d1:e9:ec:7d:22:f5:a8:63:34:
91:5b:74:70:ae:8d:4c:19:e8:72:c0:26:71:47:96:
35:64:5a:43:ef:6b:39:49:1b:b4:1e:05:67:7a:75:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C8:E6:84:3D:F7:D6:29:30:11:CF:00:A8:38:08:AB:F1:05:C7:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:65:b1:88:04:fb:72:c8:9f:83:0c:e1:8a:f9:05:77:c5:a1:
22:b9:d8:9a:1f:d3:b0:73:5e:c5:f1:c0:7b:12:fa:d2:78:c3:
54:df:fa:67:00:40:1b:39:94:52:45:b3:b7:ee:d9:e1:b8:05:
17:6d:42:a3:f3:7f:cd:0f:97:2b:fc:af:0c:c3:3c:0f:e0:04:
35:75:42:e7:f8:44:cd:21:d2:c0:41:66:64:c5:74:7f:44:c2:
44:62:22:20:96:31:df:6d:bf:dc:4f:18:fd:d4:e9:1c:bf:d9:
e7:c0:95:dd:7d:7e:86:ba:0f:6b:d5:46:bb:39:5a:3b:7f:65:
50:7e:b9:d0:ea:e7:d2:70:d9:e0:4f:21:b9:a1:36:36:33:c4:
ae:52:81:b5:f4:4b:1c:39:79:78:18:21:c4:48:aa:b4:05:cf:
68:75:65:cf:b0:f6:76:5b:1f:89:60:2f:f9:e0:2c:d5:f5:3e:
09:74:8c:be:f1:dc:11:81:b6:00:55:c6:92:3d:d6:c3:99:0b:
1b:dd:6c:6d:95:16:d5:4f:df:bf:ce:ba:2c:84:77:8c:08:b5:
70:c3:ec:ed:9b:90:25:ed:c2:3d:52:11:38:e2:14:22:4b:2e:
42:12:eb:74:3d:73:21:6f:2e:92:70:91:11:2f:ed:e4:74:e6:
3f:46:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:20 2025 by rpki-client