Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa
File: cc973301-7c68-348a-bd7d-e22b5396a832.roa (raw, json)
Hash identifier: 12KEKFVpHi+Zj/jNFj1EA3dgEoxySqjFnGoKA0d4++0=
Subject key identifier: 39:9E:87:38:53:BF:32:D9:F7:91:A2:10:12:ED:AF:2C:7C:FA:8A:B2
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482D5A8BD98D9D5EB12AAA1B20
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 12189
IP address blocks: 131.153.112.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8b:d9:8d:9d:5e:b1:2a:aa:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=79e608ab-ee54-42dc-91c4-c036a561c4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c0:b3:7c:b8:26:85:52:55:ff:ce:e0:34:fb:
19:bd:82:c7:6f:5d:21:7c:49:53:de:fc:5c:d3:43:
1a:69:00:99:13:0f:93:33:2f:b3:b4:2c:01:42:1d:
e4:8e:1f:6f:64:6e:3a:9d:cf:c1:f1:c5:f2:92:ff:
5c:68:61:c9:d1:39:0e:cb:17:3c:e9:51:52:4b:a6:
a9:35:46:bc:77:33:70:86:82:16:a0:ef:7d:2c:80:
c5:fc:ac:2b:41:81:4e:0b:a2:86:49:e4:7c:1f:69:
7c:8b:5d:60:71:4c:b5:0a:6a:38:97:0a:a0:10:18:
02:c1:7e:e1:d8:7f:a5:46:5c:8c:4b:48:af:18:8d:
2a:22:26:56:f9:e0:3a:6a:bb:c1:e7:56:04:75:e3:
72:eb:61:e5:24:c9:0d:08:b8:f2:e8:c7:61:79:b3:
9e:55:57:a2:c5:4f:1a:fe:c9:cf:ad:cb:26:97:06:
43:49:7d:9f:b1:c6:95:4f:97:0c:8a:6c:fe:5b:0a:
41:53:97:1d:51:49:18:63:71:db:3c:00:ba:0b:b9:
0b:de:04:98:96:89:e9:73:63:82:6a:45:ab:4b:ba:
1c:c3:c8:eb:83:65:b3:2d:ba:2a:8e:1a:44:51:ae:
e8:be:67:90:da:3e:b5:79:be:3b:24:14:c7:36:73:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9E:87:38:53:BF:32:D9:F7:91:A2:10:12:ED:AF:2C:7C:FA:8A:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:74:23:84:84:9a:a3:10:6a:9c:3b:8e:b1:57:5f:1a:3e:be:
52:9e:ff:5e:05:6e:bc:fe:30:59:fa:43:92:8d:b6:55:84:0f:
89:39:5a:fe:75:5a:82:3a:56:c0:86:19:a2:ee:55:da:cd:8d:
cd:d9:f8:e9:b5:2b:36:f5:d3:d3:e1:26:96:49:0c:0d:ed:7a:
01:af:3c:f1:a2:31:ca:67:6b:db:5e:fc:b1:91:a7:dd:6e:47:
e1:b0:00:26:71:ba:25:41:41:c1:7c:50:cb:cb:99:87:3a:72:
e8:f5:08:d7:e7:df:e1:8f:15:c4:17:0f:e2:3a:f2:09:b4:cd:
f4:f6:f6:0b:29:7b:2f:f9:06:ee:7f:23:c4:7e:b2:bc:f1:da:
73:86:ae:25:fe:52:4a:0f:b6:b8:32:12:ba:32:07:eb:25:9a:
c1:04:de:3b:1f:d3:65:cc:83:d8:f6:25:6b:8e:f9:21:23:a8:
57:42:e2:42:3e:b9:a4:ba:c3:47:a3:89:01:6a:67:9f:38:88:
c2:75:28:4f:ae:ef:99:36:b2:ac:bd:a1:5f:01:07:30:de:d0:
21:da:3e:c6:40:33:28:82:59:b5:f9:59:98:f9:65:33:bd:88:
8f:45:d2:74:0c:39:50:04:1e:00:2f:89:4b:f9:96:b6:ca:1e:
65:1d:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:15:08 2025 by rpki-client