Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa
File: 609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa (raw, json)
Hash identifier: SMlCQPLelu3vzaq/APFViOqTDYqL2OXdB1iBUM9r4oI=
Subject key identifier: 7B:C8:C9:17:19:F5:88:99:36:D5:3C:83:78:4D:FE:F2:21:4E:97:DF
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584827C5433972D5BD00AC144800
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 11164
IP address blocks: 163.253.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:43:39:72:d5:bd:00:ac:14:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=ca3d6c12-b342-44bb-ab7b-2833790f4afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:06:b4:eb:46:52:e4:ca:af:48:4b:27:e8:
e8:2f:51:8b:8f:6d:03:0d:12:e0:8e:ba:2a:bf:b8:
52:a7:c3:9b:34:80:d6:e9:76:20:a2:6a:a3:11:a2:
8f:51:05:62:0b:8e:23:d7:a0:29:8c:74:5a:ad:15:
0c:1e:40:2b:43:5f:c0:d5:c2:56:a5:e3:6d:8d:5b:
38:5f:dc:59:8f:61:65:43:47:f3:42:0a:4c:f9:1f:
e5:75:ed:09:6b:3b:ad:49:49:72:d9:b2:12:0b:a6:
a1:2b:f6:6c:1b:7a:3b:a1:76:22:b3:c6:e8:98:ad:
0a:ed:7c:ec:b9:c4:52:75:04:53:5f:f2:d3:7f:33:
72:a7:42:b5:c6:8e:ef:c5:ad:13:d5:08:ff:b3:12:
23:0d:77:10:b3:c2:01:b4:47:95:a2:1a:9a:88:02:
1c:91:07:79:2d:0e:6a:db:93:a7:39:a6:42:ff:44:
03:3b:c6:55:ba:ac:f8:f5:51:af:c4:e7:de:d7:a9:
27:f9:4e:d1:34:fd:1d:dd:da:40:2c:08:b1:50:07:
c7:c4:2a:17:6e:df:07:ce:67:61:de:63:d2:03:82:
81:80:bc:a0:f9:1e:1e:4f:c5:91:34:fe:7d:b6:2f:
4d:be:d8:00:49:20:32:5a:50:ab:bc:2b:fd:4a:e7:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C8:C9:17:19:F5:88:99:36:D5:3C:83:78:4D:FE:F2:21:4E:97:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:b7:59:4b:34:c3:44:62:fb:d1:39:8e:5b:9f:1c:22:3c:72:
f5:ee:8c:61:91:93:7b:2d:91:8c:1d:9d:9d:12:59:b3:d2:85:
90:11:f4:72:f6:aa:8a:e1:34:6a:6b:ba:46:c9:f9:fa:0d:fc:
e3:bc:c7:75:fa:90:c5:27:be:bc:0d:85:c7:9f:48:9e:ff:f5:
68:10:bb:24:4a:93:b2:2f:45:70:55:79:31:7a:30:32:fc:20:
c1:43:72:1c:41:13:6f:d1:00:16:2c:f4:ec:92:b9:bf:84:3a:
bb:ae:d9:9c:82:22:d6:82:94:5f:ab:5d:45:66:90:8b:b1:90:
d7:49:a3:77:22:98:94:8a:9c:e2:70:4d:51:87:79:fe:79:ff:
38:09:e1:1a:43:e2:7d:25:97:41:20:3c:fa:d3:7f:20:b3:9a:
20:62:b7:8f:d0:88:5b:71:79:0d:52:b1:ae:d0:39:74:f8:91:
fa:20:e9:b7:19:3e:41:85:e2:ee:8b:71:4a:1d:39:b3:78:44:
27:25:c2:95:f7:63:b6:28:e8:25:21:92:c1:d0:da:5a:e5:9d:
0a:71:cd:f9:81:87:91:16:08:d7:ed:fb:3b:f3:7b:73:21:e9:
27:1e:cf:2b:20:62:35:cb:bf:86:c2:04:00:62:0e:f0:6e:2a:
39:ef:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:11:08 2025 by rpki-client