Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa
File: 2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa (raw, json)
Hash identifier: APvX7xqajU68j+DhzGOUK/QnX9cW8Kv33e/rXeOiJmU=
Subject key identifier: 3A:32:A5:AB:B0:89:B3:F1:46:2C:09:8D:18:23:1F:1D:5E:03:84:30
Certificate issuer: /CN=a31515c0-c04f-41e6-958d-172bcd0e21de
Certificate serial: 010D0C9F43285848530AF12A808D65A314B89670
Authority key identifier: 34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 31886
IP address blocks: 131.104.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f1:2a:80:8d:65:a3:14:b8:96:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a31515c0-c04f-41e6-958d-172bcd0e21de
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=5d64e9d5-eee4-47e0-b3d8-d0796276ff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:8b:72:1f:b3:ba:f0:44:42:a0:5b:1f:ce:
dc:65:f2:eb:c7:56:c8:10:ce:c5:80:6f:a5:06:14:
2b:a1:73:ba:7a:d3:9e:aa:04:9e:8b:04:16:de:4f:
33:39:57:a3:46:bf:d6:60:c9:56:87:87:d6:8e:77:
07:10:2f:a6:f7:4d:84:b6:eb:33:a3:d6:81:f1:1d:
94:6b:61:cb:5a:8f:b7:b4:e6:67:70:ec:f6:16:71:
86:d7:61:90:b4:57:71:2f:eb:ca:ce:ce:83:dc:14:
0c:8e:9b:29:bf:6b:61:25:c0:f6:16:f7:fb:78:5f:
d0:a9:d2:e0:29:ed:75:94:24:03:12:41:af:e7:f0:
c3:b0:29:73:7c:d0:80:fe:b8:fa:9a:0d:fb:6d:ce:
08:91:c7:a8:38:21:7c:f0:a4:18:7a:2a:27:cb:c5:
99:f6:8a:15:0f:99:b8:ec:1e:bf:ef:f4:0c:30:e4:
79:a0:7a:74:9b:d6:ae:c2:c9:60:a7:8f:3d:23:a3:
71:7c:07:57:b5:25:f0:b2:59:b7:97:80:ff:84:8c:
ba:da:a2:57:c3:7f:a3:ee:10:c9:dc:a9:60:da:cf:
c9:aa:63:be:6e:84:d7:62:aa:2d:97:38:0f:ef:6f:
36:3b:bb:02:44:37:5b:68:ff:8f:bd:4f:e4:07:a2:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:32:A5:AB:B0:89:B3:F1:46:2C:09:8D:18:23:1F:1D:5E:03:84:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.crl
X509v3 Authority Key Identifier:
keyid:34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer
sbgp-ipAddrBlock: critical
IPv4:
131.104.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:8e:27:50:04:3e:76:9b:ae:87:96:37:aa:51:0e:ff:24:65:
fc:76:a4:99:a0:63:6f:04:ec:6b:2d:69:c3:03:b1:1e:c3:bb:
58:e1:16:9b:c9:e8:3d:21:81:a7:f5:5f:1b:f0:32:ab:ba:94:
b1:ad:98:1b:d9:58:f4:14:5e:ef:19:d6:e0:68:5a:87:2d:7d:
1f:bb:65:48:d9:26:c2:25:21:c3:f6:6c:23:9d:44:16:88:df:
44:58:e3:79:7f:5f:32:70:ae:fb:60:91:51:88:14:90:5b:ab:
5e:c0:24:40:42:54:56:70:e8:b6:db:dd:71:8b:42:a1:a3:d0:
e7:8b:ab:6a:7d:4a:15:a9:ef:28:76:f7:55:11:e2:4a:45:25:
42:58:0a:a0:7c:ab:ce:15:b9:df:d0:cb:c9:63:80:d0:11:5d:
c8:fc:c6:df:e9:35:3c:be:c9:d3:f8:64:28:9d:38:ca:ef:77:
6c:92:69:33:c5:cd:ab:14:48:31:b4:bc:da:1d:09:5c:6e:b4:
c5:2f:c7:0a:7b:dc:e2:41:b6:75:c9:84:74:f2:76:ff:f1:ec:
d7:a7:ee:85:fe:6e:aa:9d:1b:d7:ea:af:90:89:80:f2:d8:12:
6c:7d:59:9d:fe:87:dc:b9:24:65:08:b7:11:16:95:c6:6c:53:
30:42:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:09 2025 by rpki-client