Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa
File: 2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa (raw, json)
Hash identifier: 1K/l9jsywUHYtFXeMXtDlFtVUNJiauagKP90ZBjF5Yo=
Subject key identifier: 3E:35:49:83:D1:C6:7C:30:89:CA:E6:62:35:C7:0C:F3:10:93:51:33
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584812D52F1D48C4D7804FD3C8A0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 396955
IP address blocks: 163.253.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2f:1d:48:c4:d7:80:4f:d3:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=ef8d4314-5f78-4c5f-a1d0-8da208657842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4b:33:a2:ed:38:2f:f4:8c:1b:f4:8f:7e:1d:
d8:29:5c:09:06:45:95:03:40:35:7c:8a:63:87:f6:
c5:87:bf:4a:8e:33:d5:ba:c3:98:bf:7c:7e:1d:a5:
08:14:7b:52:56:26:a0:69:46:13:f5:a9:76:02:7d:
e8:dd:3d:d3:27:19:c8:22:b7:4c:4b:0d:f8:b5:88:
b0:f3:2d:3c:e4:cc:80:42:f1:29:37:49:a8:f8:75:
75:6a:39:ea:12:30:ab:d6:13:01:aa:9e:b3:d1:2e:
43:56:63:03:8e:ce:d3:e7:43:94:80:f7:cf:f7:7f:
78:1e:0d:5c:f3:9f:71:b7:f7:88:fd:fa:10:9e:dd:
4d:a9:aa:1d:ee:1e:9c:2b:c2:8d:46:3e:19:2c:b0:
7b:0d:99:95:bf:47:cd:4b:28:cb:af:f4:9d:a9:d2:
62:5a:22:e0:c0:c2:15:30:93:3e:d5:52:4c:96:2a:
de:86:8b:55:d5:45:e9:50:bb:7c:93:18:81:ff:b4:
e1:f6:e9:3d:96:c4:d9:c6:08:e7:49:b9:94:1b:1d:
0f:e3:56:bd:98:b9:ef:2b:1b:6d:e3:71:96:ca:91:
f1:b5:b0:de:85:f3:56:3b:43:34:27:e8:9b:24:c0:
46:b9:36:88:a1:4f:c8:5c:36:59:ce:4c:e1:bc:e9:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:35:49:83:D1:C6:7C:30:89:CA:E6:62:35:C7:0C:F3:10:93:51:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:ce:11:3a:36:2d:2f:b5:81:24:e9:64:2c:dd:69:3a:a1:c7:
25:dd:60:a9:79:8d:b7:48:ed:c8:d2:f7:75:98:60:b8:c8:ff:
7e:cf:cc:be:a9:67:39:28:1e:aa:85:e2:24:73:23:01:8a:34:
e8:8d:07:2e:4d:0d:e1:5c:cc:cf:c7:06:74:be:25:1f:f3:84:
b9:b2:8d:c6:e8:81:20:b4:ff:e8:26:76:97:71:84:c7:52:64:
78:de:de:0b:17:6e:50:57:f1:79:a0:b3:14:95:ee:1a:8d:e3:
05:1b:67:d9:c6:51:15:69:01:a4:8d:01:f8:53:fd:42:19:65:
a7:93:0c:8f:37:f1:77:0a:1d:12:83:c5:72:15:af:3b:5c:cb:
74:54:07:99:fe:8f:d4:ea:d0:e4:0a:8d:be:1f:e8:3a:1a:4f:
14:14:a4:37:78:91:0b:5a:fc:a7:b7:68:36:99:9a:74:97:46:
b8:f9:2e:3a:de:d6:a5:8c:ee:c2:73:e1:c0:57:db:a4:69:5a:
6d:4f:b5:04:c2:18:44:d3:b1:a6:c6:6e:19:c9:cc:a7:bd:cd:
47:5c:99:e7:31:bd:dd:4e:bb:34:d2:ca:cd:1e:ec:bb:3f:de:
29:9f:1d:5f:a6:f3:67:e8:42:51:76:d4:de:38:e2:fe:29:47:
09:5e:dc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:33:08 2025 by rpki-client