Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa
File: fd024f7b-7f82-397a-b676-0e4b1349bccf.roa (raw, json)
Hash identifier: TmgE4m0ecLDLHCrOkWi2RL5VbArhI8i6r7Urj4eR8yE=
Subject key identifier: 45:EB:3E:15:F2:9C:BB:65:DF:87:9E:2D:37:62:98:18:3C:04:83:88
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584832F026893121AF60EF2A2E00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 0
IP address blocks: 131.153.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:26:89:31:21:af:60:ef:2a:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=a0a5da16-1079-42db-a4b0-93cc77f865b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:dd:2a:ab:e5:eb:f3:e8:98:d0:5d:d9:50:
e8:d2:76:a7:6e:6b:68:8d:96:4d:83:08:77:bf:cb:
07:3a:18:18:40:9e:39:8a:ac:15:8f:98:00:5a:40:
bc:95:0e:9c:53:f1:77:ff:d5:03:1d:5e:4c:c2:0e:
39:e1:5d:f2:b1:87:ec:bf:cc:b1:15:5a:b6:a2:eb:
a3:9b:4b:72:f5:6c:69:67:04:d6:f3:86:65:7d:33:
ed:2a:a4:52:c2:2f:54:33:f9:da:ac:7d:33:77:a2:
02:d7:82:c5:dc:d0:53:37:4c:74:b4:f3:04:f0:9f:
fb:3a:88:d8:2b:38:5f:a5:bf:26:8a:2d:2b:3a:7f:
b0:13:a5:ec:fb:9d:26:3f:1b:67:09:8c:ca:0e:a5:
45:70:a1:44:13:02:1f:1f:ce:4b:b7:6a:0b:60:37:
4f:a8:81:63:8f:59:dd:af:ca:e3:34:32:8a:4a:20:
3c:5d:87:60:3e:db:c5:f6:59:a8:c1:dc:3f:41:3d:
72:f6:47:c3:b2:df:e0:f1:fa:92:66:c8:74:58:49:
04:38:c8:0b:0b:2d:8d:ea:c6:18:b0:ec:48:e4:b7:
65:ff:f3:df:9e:c8:d9:5c:0f:db:7e:ec:22:a1:67:
c7:ce:9e:91:c5:8e:ae:12:16:fd:f4:85:a6:44:2a:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EB:3E:15:F2:9C:BB:65:DF:87:9E:2D:37:62:98:18:3C:04:83:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.153.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:01:83:c2:c4:56:55:95:fb:65:63:56:fb:23:dd:5e:6e:0a:
3f:68:90:80:78:ae:d5:9a:cf:17:03:47:ff:79:7b:af:28:9f:
d3:ce:08:d4:e9:b5:c5:5a:b1:ad:64:b6:09:1f:7d:da:c0:3a:
cf:a9:86:8b:0f:eb:c6:ad:98:d1:38:1b:7b:cc:bb:15:42:17:
d0:28:bc:fe:b6:dc:c5:f1:a3:eb:8b:65:dd:a7:72:22:3f:fd:
38:7f:f1:03:cb:a6:c1:53:0b:d0:39:44:30:e7:f0:6a:59:cf:
67:4f:ed:76:3d:47:14:ac:24:23:27:02:f4:3b:92:0d:72:46:
85:55:b3:00:0f:2d:bf:b6:5d:dc:86:88:14:61:fc:98:af:24:
d7:53:b3:74:e4:1d:bc:01:9d:2c:b6:13:f6:f8:f4:4f:28:b6:
c0:66:9e:e0:a4:f2:1e:29:13:a3:18:ad:77:97:11:6e:49:e7:
75:2f:ef:d7:cf:cb:96:5f:c6:af:ec:b5:9d:2d:86:69:ce:f9:
dd:5b:9c:3c:2e:f9:f5:73:71:42:ca:88:e9:5a:0f:58:d9:bf:
9f:e2:21:6b:a1:d7:b6:a9:19:f9:d3:6d:41:fb:5f:c2:c0:cf:
47:d6:df:c1:46:67:a5:5a:00:77:41:b8:4d:10:df:05:ec:85:
00:f5:e5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:06 2025 by rpki-client