Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa
File: befc52dd-73ea-3c14-814e-7758fca1ffec.roa (raw, json)
Hash identifier: iQHbAzKfLvzT6HXs+Ij+yZIlj0xC6tiaBTqDmrnt5t8=
Subject key identifier: DE:38:DD:C0:2B:AB:B6:3A:44:00:CF:29:6F:87:93:97:D6:4C:4B:9C
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584832F02B4F966CC230037AE7E0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 19437
IP address blocks: 131.153.242.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2b:4f:96:6c:c2:30:03:7a:e7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=a4af01e6-bc48-4212-ad1a-408b8f182256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:f9:ae:67:a4:87:dc:e4:c4:cf:d5:1b:ef:
67:55:42:2f:5b:42:94:28:72:40:c0:1c:ae:08:8e:
a8:26:82:e9:34:e7:c4:50:17:71:56:a0:87:9f:80:
92:31:f1:00:9d:19:46:38:83:0a:38:63:9f:cd:e1:
de:81:bb:c6:9a:12:a6:55:7a:22:48:2f:22:1a:a8:
8f:91:e4:a9:ca:6e:bc:b1:f4:3b:7e:4d:b4:c5:56:
5f:4d:42:74:2c:49:97:14:d2:70:0e:d3:09:d9:01:
81:45:90:10:24:e3:52:cc:94:3f:e9:b0:93:48:92:
8d:4c:99:07:15:94:a6:5f:56:08:22:22:92:c1:64:
24:b4:e3:36:d9:84:3d:a4:39:f1:db:63:7a:ed:6d:
8e:f7:40:a5:fe:f5:de:27:b3:cf:15:87:34:df:ab:
35:8b:b5:3a:b1:6e:df:ad:17:07:e9:2a:de:87:18:
99:49:be:06:97:5c:ac:fa:47:9f:6d:a2:15:e5:6b:
34:f4:7d:ae:85:5d:56:8c:fe:37:b4:1f:16:f2:4b:
85:bf:6b:ba:e9:f7:ee:bb:00:fc:f4:4a:b3:dd:25:
5e:e0:d1:e4:fc:e5:c1:a8:60:b1:6a:00:52:03:48:
75:28:df:21:b3:43:b8:3b:21:28:e9:9b:39:aa:4b:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:DD:C0:2B:AB:B6:3A:44:00:CF:29:6F:87:93:97:D6:4C:4B:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:17:ce:3f:96:c0:cd:9c:a2:88:b8:25:8a:5e:f7:14:e5:3c:
0c:56:b2:fc:9e:7c:bd:61:fe:22:70:18:74:0f:4d:52:13:e2:
cf:47:92:e7:61:75:72:d1:a4:e5:61:db:6a:94:2a:4f:db:d3:
d1:d1:a8:6a:98:66:ea:7f:5c:43:d4:b2:82:3e:63:22:03:8b:
00:32:18:34:68:ac:af:53:32:f2:36:92:bc:6a:52:0f:af:81:
fb:0b:be:af:f8:de:54:33:43:68:68:63:78:91:72:b8:37:7f:
04:d4:5a:f9:72:a8:c7:f6:27:84:79:63:7a:1d:e6:c1:af:da:
78:87:ce:74:12:7b:f9:7f:09:e7:2f:04:a3:79:3f:51:af:47:
20:67:48:3a:2b:92:d5:44:7e:89:71:67:6e:45:df:be:ee:4a:
05:40:ee:15:85:f6:1f:d9:18:01:f5:15:91:f5:be:32:64:86:
b1:8b:9e:04:47:aa:57:4c:eb:e0:04:0f:b4:1b:d9:75:e4:5a:
2b:be:ca:40:5d:0a:dd:2b:ed:2e:ba:7c:96:08:9f:f8:19:85:
60:66:52:2a:e0:ef:05:fb:65:42:d3:07:ad:cc:58:51:90:e8:
b2:1c:72:2e:e8:69:98:97:c3:ea:3e:9a:3d:cd:33:70:98:72:
98:ca:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:56 2025 by rpki-client