Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa
File: ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa (raw, json)
Hash identifier: z9PMs+XqN/DNfaqLT8Bpz6Z0xSgYPNIhov0A1J8u3Jk=
Subject key identifier: 26:76:2B:CB:2A:57:D9:85:5E:0D:16:D6:0F:2A:43:CE:D6:AF:B1:E7
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482D5A8BB4B8F30D1F2A492180
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 12189
IP address blocks: 131.153.104.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8b:b4:b8:f3:0d:1f:2a:49:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=73c71a7f-3394-4067-8a78-18ae1b28a81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5c:1f:5a:73:aa:7d:5e:1e:e8:23:aa:4f:ec:
a0:67:87:44:92:d9:68:74:48:87:8c:5b:f8:55:81:
be:99:df:f1:85:3e:e8:07:56:fd:3c:81:67:ba:b5:
94:57:26:03:f0:3d:06:7e:b8:56:3d:15:b2:be:f3:
c1:c3:b9:5b:89:e8:4e:95:88:87:aa:ad:e6:d3:06:
0e:bf:50:b3:87:58:d7:f0:a8:c6:57:7d:f0:20:f5:
31:32:ac:43:f9:ea:e8:a7:64:8a:de:e1:53:e5:1d:
6f:aa:c5:a6:22:6b:b7:3f:d3:8d:b1:3f:df:60:5d:
b8:1b:62:0f:7d:19:99:8b:c7:32:32:c1:2a:96:6a:
73:1e:ff:3c:f9:b4:e4:d2:3a:82:15:f9:b3:8e:78:
c1:fb:50:95:0c:51:b7:3c:2d:c7:4a:f3:74:06:fd:
1e:be:09:27:5c:79:cd:ab:73:b7:05:96:c9:68:91:
cb:cf:c0:3c:45:68:5c:6d:9e:eb:c0:d3:72:c9:b4:
80:30:a3:2c:cf:43:19:27:51:9c:74:3b:2b:47:ce:
eb:bb:71:55:ad:b9:c0:84:4d:8d:ff:38:78:8b:26:
69:15:16:50:ff:f1:f3:e0:99:d7:0e:68:7c:b1:76:
6c:ae:c7:cc:6b:f0:9b:23:cf:fa:78:09:e2:43:93:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:76:2B:CB:2A:57:D9:85:5E:0D:16:D6:0F:2A:43:CE:D6:AF:B1:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:a9:ab:49:a5:40:41:14:7f:e1:f5:9b:92:f2:c3:4d:d6:fa:
83:af:1d:0c:03:23:e4:7a:3a:9b:fe:0a:89:24:29:ae:d4:4a:
77:fa:73:5d:f0:fa:fe:0c:e5:23:c1:77:dd:99:f3:c0:21:d4:
b4:8e:ce:5a:ec:7c:18:4d:61:df:e2:f5:cb:a2:ec:59:26:6d:
f2:fe:9f:fc:26:09:df:5a:93:fe:dc:8b:b3:64:22:ce:fd:50:
58:63:86:4f:55:6b:f9:de:71:90:3f:3f:75:d0:80:f5:cb:2f:
81:45:88:bc:ea:c0:99:14:f0:e7:6d:8b:ab:e8:d6:6a:d6:12:
2e:28:33:98:5f:17:f5:8b:bf:7a:26:09:53:f2:ca:17:84:f5:
21:a3:ff:0c:04:d1:3f:44:7d:ce:9d:43:56:2f:54:28:45:63:
6a:93:62:e0:51:21:da:ee:93:5f:86:05:af:1f:a2:28:b5:8b:
9b:88:d1:3b:e2:a6:1c:2d:50:c6:c9:66:39:f9:3c:6c:99:09:
f7:b4:b4:8e:02:12:f3:ee:86:61:22:be:6d:61:e4:63:de:03:
c5:f3:be:4a:87:b0:c6:89:2a:59:f4:e4:bc:a9:fe:66:f7:ba:
9b:56:26:55:19:b9:fc:c5:fd:67:ec:de:25:3a:3a:01:2c:15:
68:ed:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:25 2025 by rpki-client