Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa
File: 02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa (raw, json)
Hash identifier: 4VkpFRhaKFi4ktAFG4gjXMdCCgBFtH0O3tL8Qbrzi28=
Subject key identifier: 47:C2:E9:82:C1:36:B5:FE:24:C2:75:5C:FC:EC:42:C4:78:6D:AB:5E
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584883E5C66931CFE06697156E00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 396450
IP address blocks: 163.253.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c6:69:31:cf:e0:66:97:15:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=c938e776-f8f7-4c97-8bda-550d5adb0a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:95:08:9c:39:24:1e:52:e0:ef:51:a5:32:cf:
65:22:99:cf:96:3b:27:85:22:ac:e9:aa:4d:d7:d9:
07:0e:aa:2f:4d:fc:40:fc:1e:82:ba:6f:12:03:38:
bd:2d:28:2d:8e:72:58:99:9e:d9:ad:20:7a:7b:5c:
30:88:5d:d5:f3:b2:36:cd:cd:8a:b3:77:9c:4a:16:
2f:37:cb:73:a0:54:29:63:45:a8:c4:77:c4:2b:e9:
3b:5a:e2:f7:9e:a6:48:5a:ea:da:99:b1:a6:2a:cf:
31:e3:66:bc:fe:17:b4:98:ec:9e:7b:0f:35:e5:7c:
2e:44:df:1f:8a:5a:76:3b:7e:b3:f2:ae:6a:ab:b8:
e3:2a:d3:02:03:c0:95:dc:35:6e:1a:a6:cd:34:ea:
d4:0f:46:66:1f:5b:55:eb:e6:c6:46:fd:67:08:54:
d1:75:6c:58:db:b0:fe:9f:51:32:51:16:9e:3f:78:
87:1a:c7:cc:19:c9:ed:70:4e:4e:1e:8d:8d:fd:ab:
23:e0:67:03:1b:02:77:b0:16:4d:5a:59:cd:7a:b9:
61:cc:cc:f8:a1:4b:aa:45:58:af:bb:c5:fb:f7:b8:
0f:73:27:8d:90:25:9b:f0:15:43:f0:6a:e8:de:59:
7a:86:9d:31:d3:7e:72:da:31:02:61:c6:14:c5:65:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C2:E9:82:C1:36:B5:FE:24:C2:75:5C:FC:EC:42:C4:78:6D:AB:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:d1:be:41:11:b1:05:f7:3c:a9:e6:d2:79:4b:b9:cb:c5:65:
81:74:2c:0e:42:1d:10:ad:1f:26:bd:74:21:e6:d0:81:cc:74:
08:d7:55:64:21:cf:c6:4a:16:fd:88:c6:6b:08:62:c4:f9:39:
84:ec:5f:b8:ec:bf:81:53:f8:b3:49:ff:df:62:5e:1b:8c:8a:
eb:18:54:32:ec:49:33:47:0f:12:03:33:fa:0b:8c:ad:dd:0d:
b5:94:f1:44:90:fb:64:d5:b1:f2:ff:9f:6e:96:fc:47:6b:f2:
ed:28:be:cc:91:a6:11:7d:ea:e1:49:dd:08:70:f6:19:29:53:
5b:74:32:8a:2e:e9:ac:d5:2b:c4:46:09:7f:e8:f3:1d:d0:70:
49:c9:73:55:b5:fa:c6:ca:5b:0d:16:af:85:87:18:db:4c:03:
d6:30:19:a6:01:da:06:e9:1d:07:04:da:1a:5d:c0:33:33:67:
f3:93:b6:b6:04:1d:fe:42:64:d8:07:4f:7b:c7:2d:17:ab:2d:
14:9b:4b:42:59:e6:7b:ee:6e:4c:71:36:d3:c3:01:54:96:db:
5e:90:f3:ab:83:0d:82:b4:fe:c8:23:53:f9:9a:ea:c9:55:d1:
d3:2c:af:58:fc:db:e7:23:3f:55:fc:ac:9f:bb:00:dd:0f:a3:
30:b3:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:32:49 2025 by rpki-client