Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa
File: de97a398-0fe3-3499-a1ee-909d1a9839c0.roa (raw, json)
Hash identifier: ayHQTebClrrzQ0BUgQjywnhCXzciViE3N813E2zK3Mc=
Subject key identifier: C1:49:0D:A6:64:7C:AD:AE:17:59:67:EC:85:78:82:A4:6B:5F:B5:32
Certificate issuer: /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial: 010D0C9F432858485B6AFEA8F35EADF599FE1180
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 16580
IP address blocks: 131.232.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:fe:a8:f3:5e:ad:f5:99:fe:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=8bcd1f46-2ae5-4791-a74f-25353ecdafcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:09:1b:f7:a4:2f:88:b7:05:47:65:2f:b7:
41:67:a3:23:f0:c1:49:23:f8:0d:55:e9:bc:20:1c:
c4:ea:e2:58:98:83:1f:13:e1:e6:d0:85:a9:15:19:
a1:f3:dd:93:73:ec:f0:32:1d:12:48:bb:5a:21:16:
29:99:02:2d:f9:b9:b3:94:69:3b:09:a1:92:4f:25:
8c:67:57:d1:19:44:e7:6d:17:3a:e8:df:29:a2:48:
8a:6f:37:2f:f2:28:5c:05:d3:74:ca:e1:31:c7:c3:
78:a1:fd:85:87:86:5b:af:ff:c3:72:11:b3:5d:fe:
05:84:da:f7:c3:06:b3:40:01:74:05:00:94:7f:6c:
78:c8:b5:7d:09:45:69:c6:67:e6:94:a0:2a:aa:65:
7a:60:08:99:42:af:20:c1:4e:66:8b:2c:61:a0:77:
f6:d4:9f:47:48:65:32:2f:f7:ee:d1:56:e3:31:06:
1d:18:c7:6e:94:22:97:6c:07:4d:f9:55:cf:33:8d:
de:52:53:ce:10:d6:97:a4:64:f4:36:eb:b8:67:6f:
02:36:12:b0:52:1e:59:cf:a5:4a:30:b5:27:8d:65:
d5:73:8e:08:30:9e:7c:99:68:32:ca:a2:d8:43:21:
69:d7:40:7d:be:ae:0a:80:e8:cf:5e:a2:43:5e:c1:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:0D:A6:64:7C:AD:AE:17:59:67:EC:85:78:82:A4:6B:5F:B5:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
X509v3 Authority Key Identifier:
keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
sbgp-ipAddrBlock: critical
IPv4:
131.232.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:fb:2c:5d:68:1c:eb:a2:1b:45:0d:b3:ea:45:be:e6:b8:02:
c4:41:fa:94:7f:32:79:e2:ab:27:41:54:d3:6a:19:63:f6:73:
12:30:c9:92:af:12:43:c4:45:e8:37:0b:2c:a3:19:fb:4c:db:
ad:db:c6:88:7a:2b:ab:23:2c:2c:ce:4c:96:c1:32:11:9a:53:
f7:3d:a5:02:ef:21:59:79:8a:78:8c:1d:c1:6e:8a:cb:fe:ad:
54:72:d3:79:ed:b4:fc:ab:81:d8:af:98:bf:95:c9:75:5c:aa:
7f:b8:09:b0:64:03:00:62:24:eb:18:70:82:3f:8f:0f:ed:d4:
68:85:c4:02:4f:66:a4:f6:18:a4:27:5b:49:c9:88:74:06:61:
62:41:3e:5e:80:25:30:d5:d4:03:4e:39:2d:d6:a9:45:2d:c7:
db:d1:14:12:d5:9f:b6:7f:97:f3:02:07:6f:e5:35:44:fa:f0:
c3:f4:ca:40:b5:ec:c2:d3:cf:81:b1:86:10:f4:5e:13:af:ef:
6a:4b:4c:c2:3e:5f:80:43:8b:3d:28:9e:24:cd:39:cc:e1:b0:
75:e0:8f:7f:c6:c5:82:8b:73:dd:d0:c3:67:22:0e:7a:71:89:
05:d3:95:82:57:f2:46:66:1b:d1:1d:65:15:6a:76:74:d9:d3:
8b:86:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:31:35 2025 by rpki-client