Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/4d8fae59-9014-33f4-9760-1d9213e68080.roa
File: 4d8fae59-9014-33f4-9760-1d9213e68080.roa (raw, json)
Hash identifier: vJ977D24YjfOrJhCHlfR+72QefyRRn1S57oXaz1MhWc=
Subject key identifier: E0:3E:02:8A:FE:EA:8A:33:51:D8:B2:60:55:9A:1B:97:8B:4A:C1:52
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F432858487CEB2C0FA9FD9F6B639BB100
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/4d8fae59-9014-33f4-9760-1d9213e68080.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 11537
IP address blocks: 163.253.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2c:0f:a9:fd:9f:6b:63:9b:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=e61ed6fd-507e-444b-8004-391e37d30a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:25:33:33:ac:53:2a:da:91:3b:8e:00:ec:
6f:c0:2f:07:58:8e:6b:0c:b1:13:5c:29:98:a7:e6:
41:bb:85:67:f1:ef:94:d9:cb:87:42:b2:fb:37:2b:
2a:70:ba:55:85:7b:4b:3b:c8:1f:e5:01:a8:6e:95:
0f:8d:14:47:7b:cd:49:52:4d:86:2a:4e:0b:30:18:
f2:5d:55:e2:d4:1a:d7:7d:67:a1:6f:e8:73:29:08:
73:c1:39:eb:eb:8d:cc:7d:12:12:ff:41:f9:b1:28:
e7:bf:e3:b8:0c:e0:2f:2e:e0:ff:82:15:c7:45:59:
d8:07:d7:15:03:c2:33:f3:b8:be:fe:78:17:10:76:
5f:59:df:53:05:53:c6:50:2e:19:34:fa:a1:2b:98:
84:5a:9c:b6:7c:07:40:33:28:a4:c1:fa:0d:f5:68:
af:7d:68:59:57:ea:41:16:a5:c5:61:58:11:ac:22:
38:cb:d8:7b:97:5a:0a:b4:c3:6d:1e:e8:2e:b5:2b:
a0:7b:66:3d:1c:bf:4a:6e:64:70:ed:b9:6f:a6:16:
61:2f:a1:03:bd:dc:34:13:63:d4:34:1b:5f:44:ee:
99:6e:91:ad:b7:80:a8:c5:4f:16:d4:52:34:be:b2:
1a:3d:b2:0b:46:16:7e:8d:21:ca:6c:82:38:4d:b1:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3E:02:8A:FE:EA:8A:33:51:D8:B2:60:55:9A:1B:97:8B:4A:C1:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/4d8fae59-9014-33f4-9760-1d9213e68080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:13:41:8a:66:10:a2:89:7b:bb:89:5b:14:c6:1f:57:5d:fd:
b8:9d:df:d7:fa:85:14:ce:81:76:2a:04:85:61:9a:75:e5:6f:
6b:fc:8d:49:44:f3:c2:b1:c5:0c:25:1b:8c:25:f7:a2:21:4a:
88:40:6c:4b:a3:f0:c8:5e:8a:18:29:5c:fe:0a:6c:ac:df:6d:
c0:6d:ae:61:eb:37:8e:4e:3d:cf:1f:fb:cf:0a:2b:fc:06:6b:
67:a5:e5:ef:85:8d:78:64:de:17:97:1b:11:df:ac:72:e7:43:
d7:ac:68:cc:2e:08:25:e4:47:1c:f0:56:3c:5a:5f:72:39:d0:
7c:f5:63:1b:09:74:1f:03:30:76:c9:2f:01:08:e2:e8:ec:3a:
0c:75:3e:2c:04:a1:2e:73:f4:ad:7a:d6:c0:48:19:2f:f4:d6:
6f:85:5f:e3:ff:07:82:29:e3:a2:06:47:0f:9c:12:4d:4c:ae:
23:08:3d:83:a3:48:0a:e0:a7:65:53:51:e8:06:35:62:e8:5d:
d5:3d:a4:22:c4:36:1e:fb:65:f5:48:e4:b9:90:e4:99:eb:84:
bb:b9:03:fe:af:e0:f3:2c:f5:a7:29:79:75:c9:d8:8d:85:bb:
c6:45:ec:da:bf:06:b4:25:65:f7:90:06:18:00:44:f5:cb:cc:
8c:6c:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:33:18 2025 by rpki-client