Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa
File: f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa (raw, json)
Hash identifier: f7KlO1WiU3ix3l/GI164UjoNdbAbSBGCnxMj/lYqhsM=
Subject key identifier: 14:DD:D8:CD:29:E9:82:F5:4E:C3:64:E0:39:85:AB:E4:E8:CB:64:E0
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858482D5A8B7A227BCDF87874A160
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 397378
IP address blocks: 131.153.121.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8b:7a:22:7b:cd:f8:78:74:a1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=571f52b0-241c-4362-870e-71ba694573a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:7a:82:94:a9:1f:d1:61:44:c1:e1:8c:56:
2b:ad:e3:cd:71:33:6e:d2:67:e0:98:47:a9:8f:f3:
1b:b2:f6:b5:bb:dc:90:bc:99:b4:57:44:69:22:f2:
64:25:9c:cd:2d:2b:21:d3:8f:eb:08:c8:92:04:db:
07:e3:2c:8b:f6:cc:d8:9e:72:38:21:84:02:60:d4:
8e:a1:7e:7a:ae:7d:c4:8b:88:67:d8:81:55:83:0d:
f4:71:a5:21:21:b4:dc:bb:5e:65:11:25:8c:24:44:
17:15:a9:c3:6a:1d:73:39:ff:19:56:76:3c:33:4c:
a0:50:6f:75:7c:53:21:d6:2f:87:73:2e:09:71:1a:
50:fb:5d:b4:ce:ad:68:22:e5:f6:a5:9d:f7:4f:29:
7d:20:7f:4a:f7:3b:4e:50:40:6b:7e:1a:9c:11:69:
f6:b2:50:09:97:6d:91:74:58:f3:69:a6:a2:05:fe:
dd:ce:d7:d1:0e:02:75:2e:5d:e9:07:db:78:98:8b:
82:79:ec:e1:6b:0c:9f:d6:cd:64:31:5d:e3:88:df:
34:34:4d:ed:16:54:b0:3c:2a:c2:3e:98:40:b6:aa:
ea:8c:22:e3:61:77:bd:c9:db:60:2c:27:c4:76:4f:
2c:8e:d8:c7:e3:c4:e3:60:87:b5:4f:f3:70:6e:9f:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:D8:CD:29:E9:82:F5:4E:C3:64:E0:39:85:AB:E4:E8:CB:64:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:78:83:79:c3:10:b3:67:04:5f:1a:8f:02:73:f2:5b:5f:69:
47:2a:9f:fa:16:38:5a:e9:31:0f:be:8b:8c:dc:f4:a6:d5:64:
4f:08:75:b5:e4:0c:11:2b:42:8a:a8:d6:a5:1f:ff:c3:14:32:
9e:92:50:a1:32:18:16:6b:e2:1a:ee:88:d2:c4:58:2d:90:08:
37:fc:6d:89:de:74:43:14:72:64:1d:1e:88:0d:93:13:84:e0:
5b:38:10:63:17:33:9f:6c:3d:4d:3f:58:bd:9e:06:2b:fd:07:
38:dd:dd:db:a3:75:97:14:b5:f6:06:57:ee:78:e3:62:16:ef:
46:42:b7:58:37:58:aa:78:4b:a8:58:1e:f2:7b:6e:a5:44:12:
d9:7c:67:ae:2d:2e:88:40:bc:89:8f:1d:14:b2:50:54:fd:b2:
80:83:4b:1a:66:1f:66:b8:a8:a3:f5:55:2b:23:36:72:32:71:
dc:70:22:ff:9e:8e:cb:e7:6c:d7:a0:59:04:ab:d7:98:e1:c2:
40:7a:ce:b6:df:d2:7a:e2:d5:e2:55:f7:21:20:54:46:c3:cb:
ed:e2:fd:5a:3c:86:a0:e8:7a:ae:ad:2d:a5:04:49:cc:37:d4:
64:dd:3f:8e:8e:fc:0c:c1:bb:c9:d5:56:2a:1b:96:92:c2:88:
b9:29:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:05:09 2025 by rpki-client