Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa
File: 3405a899-675d-3694-b986-0720ff81db0e.roa (raw, json)
Hash identifier: sI5dJVugVH221ferPN3vMC1phR2uAInDtNxT64wqhO8=
Subject key identifier: F8:1F:DF:22:4F:81:2E:EC:BA:93:A9:D5:BA:F3:82:BD:E0:9C:49:C3
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F43285848037B6320FF622373766AD380
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11537
IP address blocks: 163.253.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:63:20:ff:62:23:73:76:6a:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=e957358e-091c-4057-a827-0b1a7e276797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:a8:86:54:30:63:ae:0a:5d:a1:a2:3e:39:
37:bb:84:a3:8e:34:a7:84:8c:d5:b9:a7:3d:b1:0e:
35:4c:2b:b5:bc:f1:8c:11:df:8a:65:e0:9a:a4:9e:
bd:c1:34:7a:56:a1:62:cb:0c:3e:c7:b3:64:32:57:
19:66:1b:38:f4:a1:d6:0d:de:26:c5:1b:78:64:eb:
58:92:68:bc:cd:69:5d:93:fb:0e:4d:2d:e5:11:78:
65:87:71:8e:7e:86:ca:46:4f:ae:71:81:26:af:c6:
fe:ea:bb:6a:0b:3d:2a:b8:f8:c0:d4:89:cc:46:3a:
19:ee:48:52:94:26:78:bc:7a:76:60:df:18:f3:57:
a2:e8:be:c0:60:c5:a8:79:42:48:2a:90:b2:fb:98:
15:bb:ed:22:00:37:93:6a:b0:9d:49:cc:e6:33:b8:
c6:eb:3b:e6:0b:75:4e:1b:94:6c:9c:25:9c:0a:c3:
ac:47:84:e5:c1:88:f8:a7:40:f0:cf:f5:e4:38:83:
25:6a:d3:7f:cf:be:65:36:a1:02:44:03:81:cd:ea:
f7:a2:ae:30:12:aa:8b:80:5b:bd:5b:41:4f:18:44:
08:c4:80:84:ab:21:ef:dd:52:f1:1c:4d:7b:16:8c:
b1:db:94:45:c0:68:33:3c:25:0a:fe:22:4b:ee:73:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1F:DF:22:4F:81:2E:EC:BA:93:A9:D5:BA:F3:82:BD:E0:9C:49:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:77:9a:c4:ce:22:71:1f:45:d3:84:97:8a:2a:d4:13:09:8d:
46:f5:22:24:0f:13:be:f3:be:45:f0:7e:cd:df:6f:8a:5b:7b:
4b:32:39:1b:e3:0c:af:60:7b:2c:e6:07:57:7a:15:f2:6a:f2:
9d:05:3d:2d:b7:24:bd:0f:9c:f9:de:d4:3c:f0:85:73:92:5b:
54:f4:5d:df:14:91:ae:12:c3:46:77:ec:3a:ef:b6:f8:48:c8:
2b:9f:53:ef:7a:20:0d:d9:c0:d9:e3:54:37:1f:f2:27:2f:ea:
e5:06:a1:81:0b:85:ed:ab:5d:35:be:f9:5a:13:a1:2a:dd:fa:
e5:20:f0:81:9a:bb:5b:79:e5:5f:15:97:3a:58:3c:a8:85:c8:
ba:47:fd:5e:c1:34:45:34:4e:4a:e5:43:0a:b0:8a:f0:9c:4c:
ed:19:6a:aa:1a:f2:79:c7:65:b6:fc:b7:fd:33:e6:26:4b:5c:
50:65:0a:a4:ab:c0:89:29:95:20:79:d9:63:23:12:6f:99:c8:
ec:44:33:a8:cb:d0:0b:26:8f:eb:f5:8d:5e:40:a4:ff:fe:8c:
b3:28:31:78:cf:bd:55:dc:bd:68:0a:b3:f4:38:28:57:a0:33:
ed:31:7d:39:a5:1b:e7:78:3e:b0:16:ab:a5:06:de:54:ec:e3:
dd:2e:87:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:48:16 2025 by rpki-client