Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c9e3d27b-d9bc-3dac-8879-8c208f0b1ab8.roa
File: c9e3d27b-d9bc-3dac-8879-8c208f0b1ab8.roa (raw, json)
Hash identifier: NF5oCmdGMyCaa+XLMDaI9ftU+LVtLXb6kMbz+x2wA50=
Subject key identifier: 18:34:5F:76:AE:C6:21:A2:B4:44:69:8E:7B:81:CC:09:85:32:56:10
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482D5A8D561FF8A9A4724D7FC0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c9e3d27b-d9bc-3dac-8879-8c208f0b1ab8.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 20454
IP address blocks: 131.153.80.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8d:56:1f:f8:a9:a4:72:4d:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=74e0c783-3d25-45b0-9616-039069256a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:be:9d:71:05:82:cc:c7:ab:10:46:73:de:
31:6f:c0:53:93:8b:54:c8:c5:0c:f4:dc:e6:ac:be:
5f:a5:fe:65:b5:92:a9:30:71:48:1c:8f:1b:3e:21:
0f:c7:39:18:41:57:41:f2:41:87:25:9c:01:d6:ea:
83:86:ab:b9:b2:5c:e8:46:1c:99:4f:aa:d2:d1:a6:
ea:b7:ef:aa:31:59:8e:93:34:f1:e0:50:90:d0:1a:
38:c2:72:65:21:7e:d6:01:0b:4a:2b:0e:5c:ab:2c:
73:57:f7:ac:84:9d:3f:24:ea:83:e6:59:5f:f5:95:
84:c9:5d:e6:eb:1c:17:13:fe:de:d7:0e:02:f5:ce:
2d:ab:83:b0:41:a9:47:c4:ab:e0:df:df:3f:64:a7:
62:a0:3f:45:56:50:67:4d:84:e4:5f:b2:92:c3:2a:
35:27:25:d7:1e:53:12:07:8f:f2:fc:ba:6e:44:a8:
50:73:7e:7e:c9:12:56:30:68:99:fe:b5:f3:83:1a:
a6:a1:1f:f7:c1:1f:60:02:50:88:df:03:fd:a7:8a:
d3:7b:b1:c9:44:ef:09:35:ea:b8:a1:3c:70:48:20:
c1:ff:c9:c5:aa:17:f7:f7:67:c1:fa:d8:87:42:9e:
f0:3b:d5:45:8f:1d:ae:ee:76:74:34:95:46:a0:9f:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:34:5F:76:AE:C6:21:A2:B4:44:69:8E:7B:81:CC:09:85:32:56:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c9e3d27b-d9bc-3dac-8879-8c208f0b1ab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:a1:b7:00:0d:30:e6:0e:67:80:39:c2:6d:5f:83:0c:5f:42:
1b:83:63:ac:56:75:a7:d0:7e:7e:af:63:de:7b:a0:ec:63:fc:
a3:bb:f0:c3:a3:12:c4:3e:30:19:7e:e5:18:40:c2:01:05:36:
c9:54:4d:25:8b:19:19:74:8f:23:0b:a4:8b:52:9c:31:8d:0e:
01:1a:92:67:98:b7:a6:50:64:4a:1e:fc:86:e3:6e:ad:75:c8:
12:84:13:54:cc:24:22:cc:72:74:68:83:5b:ba:77:05:87:31:
47:80:a3:1e:a8:80:bd:33:47:cc:7b:ac:d2:6d:41:9f:f4:24:
5b:bb:cc:bb:00:06:1c:eb:43:92:ca:03:92:0d:6e:d8:dd:4f:
c6:0c:19:00:e5:f8:2d:18:14:47:fe:c1:01:51:54:02:ec:d6:
cc:da:a9:8a:6b:81:7c:5d:4b:50:a0:67:17:ee:d6:cf:48:f6:
c4:b5:36:ff:71:9f:08:6c:00:d1:69:f3:e0:72:59:6d:f1:2a:
d2:cf:d8:86:bd:64:56:62:ac:21:77:43:72:21:1b:a5:e1:b4:
d8:2c:28:30:2f:7e:55:ac:49:db:3c:dc:da:21:95:32:e0:5e:
f5:ef:ae:b1:8e:4a:dd:55:81:73:8e:6d:46:8b:d1:8e:fb:62:
b6:91:21:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWo1WH/ippHJNf8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk
NzRlMGM3ODMtM2QyNS00NWIwLTk2MTYtMDM5MDY5MjU2YThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3m+nXEFgszHqxBGc94xb8BTk4tUyMUM9Nzm
rL5fpf5ltZKpMHFIHI8bPiEPxzkYQVdB8kGHJZwB1uqDhqu5slzoRhyZT6rS0abq
t++qMVmOkzTx4FCQ0Bo4wnJlIX7WAQtKKw5cqyxzV/eshJ0/JOqD5llf9ZWEyV3m
6xwXE/7e1w4C9c4tq4OwQalHxKvg398/ZKdioD9FVlBnTYTkX7KSwyo1JyXXHlMS
B4/y/LpuRKhQc35+yRJWMGiZ/rXzgxqmoR/3wR9gAlCI3wP9p4rTe7HJRO8JNeq4
oTxwSCDB/8nFqhf392fB+tiHQp7wO9VFjx2u7nZ0NJVGoJ/AOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBg0X3auxiGitERpjnuBzAmFMlYQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzllM2QyN2ItZDliYy0z
ZGFjLTg4NzktOGMyMDhmMGIxYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEChtwANMOYOZ4A5wm1fgwxfQhuDY6xWdafQfn6vY957oOxj/KO78MOj
EsQ+MBl+5RhAwgEFNslUTSWLGRl0jyMLpItSnDGNDgEakmeYt6ZQZEoe/Ibjbq11
yBKEE1TMJCLMcnRog1u6dwWHMUeAox6ogL0zR8x7rNJtQZ/0JFu7zLsABhzrQ5LK
A5INbtjdT8YMGQDl+C0YFEf+wQFRVALs1szaqYprgXxdS1CgZxfu1s9I9sS1Nv9x
nwhsANFp8+ByWW3xKtLP2Ia9ZFZirCF3Q3IhG6XhtNgsKDAvflWsSds83NohlTLg
XvXvrrGOSt1VgXOObUaL0Y77YraRISE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:25:19 2025 by rpki-client