Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/71c32875-17b9-37fc-883b-5b24872cf840.roa
File: 71c32875-17b9-37fc-883b-5b24872cf840.roa (raw, json)
Hash identifier: XS2Z6WvthOsC8hcWycQthe1UukI0+W/OMpNI6GOf9Kk=
Subject key identifier: A0:76:DB:85:AD:6B:21:42:71:61:C6:87:EE:B9:35:EC:9F:25:5E:4D
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F43285848037B636CDD50453383800F00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/71c32875-17b9-37fc-883b-5b24872cf840.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 13436
IP address blocks: 163.253.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:63:6c:dd:50:45:33:83:80:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=b96c1d30-3d5a-4a91-b7dd-b367366a9624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:34:e7:b1:71:ea:2a:3c:15:fd:c1:d4:04:
c7:9a:0a:c8:0e:86:ee:34:f8:b0:97:cd:c7:05:d2:
59:fb:36:7b:de:91:76:a1:25:ac:e7:aa:40:b5:d6:
46:2f:4a:3a:bf:c0:73:2c:26:18:f2:7b:0f:ed:0c:
22:32:7a:46:a2:dd:1d:fb:9d:fe:06:b7:2d:1a:58:
6a:c3:8a:f6:89:18:b7:83:fc:b8:41:31:1f:e1:32:
3e:b7:59:53:b5:67:b9:4c:09:8d:2b:30:99:a0:c1:
57:e1:bc:e9:a4:12:c9:6d:62:7d:d6:12:a6:03:5c:
6d:56:0c:89:db:32:f4:87:68:ea:60:f0:a2:4d:c2:
d8:5a:f1:62:c3:34:2f:72:f4:04:b7:fb:e6:2b:d6:
4b:ed:31:dd:04:84:2a:9a:d2:72:20:45:5a:35:6e:
4f:39:ae:a4:51:cb:f7:cb:8c:54:61:dd:8c:b5:84:
5e:4b:ac:cb:a2:82:78:80:43:fa:a0:f4:fc:c3:72:
ee:c0:ee:eb:1a:88:41:a5:5f:00:f1:de:1e:a7:eb:
be:8b:50:26:d1:9a:a6:8d:8e:87:84:e8:59:67:ec:
d4:c4:fb:2c:2b:fc:2c:bc:8e:5b:ff:5b:51:fe:b4:
55:b8:f0:ba:a5:74:e4:0b:03:e8:49:4e:49:56:99:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:DB:85:AD:6B:21:42:71:61:C6:87:EE:B9:35:EC:9F:25:5E:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/71c32875-17b9-37fc-883b-5b24872cf840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:78:67:83:ca:51:ff:f5:d5:72:bc:07:a8:9e:a8:7a:a1:66:
d8:54:59:8b:39:f7:3c:00:f4:78:b4:79:63:0d:25:fd:af:27:
74:d8:62:34:9b:a8:b0:b9:29:01:18:c9:82:de:ae:1d:88:85:
c8:21:22:7a:fe:04:94:a3:59:62:c2:4d:a7:f9:30:30:74:0f:
c1:9d:3d:dd:4d:29:3a:20:55:a4:15:7a:12:2e:c1:9e:2d:9d:
85:15:15:ac:c5:6c:65:36:57:99:78:b6:70:49:e2:f1:88:55:
cc:9a:b2:97:18:ca:e8:78:01:d7:3e:35:25:63:5d:c3:f3:dd:
5b:bf:4a:56:92:a6:50:b8:4a:63:30:20:00:c5:0d:45:a9:ca:
f7:0b:65:03:c2:2b:a0:06:45:49:24:3c:b1:5f:8f:a1:20:5c:
d1:0e:7c:b0:5f:1d:28:fe:3a:c4:d2:fc:7f:cb:28:c2:15:d4:
c8:70:b6:2a:f5:0a:87:c5:12:e7:c7:36:16:05:b7:21:88:e8:
7c:d2:b4:87:d3:15:ca:fb:3f:a7:31:4e:14:87:31:c3:9f:9c:
ee:e3:0c:ca:f4:10:25:ee:e4:c2:8e:dd:7e:03:2d:51:37:91:
1f:cd:ab:d1:35:eb:37:24:da:0d:4b:a4:23:05:ba:f9:04:28:
e0:61:2c:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDe2Ns3VBFM4OADwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
Yjk2YzFkMzAtM2Q1YS00YTkxLWI3ZGQtYjM2NzM2NmE5NjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtE057Fx6io8Ff3B1ATHmgrIDobuNPiwl83H
BdJZ+zZ73pF2oSWs56pAtdZGL0o6v8BzLCYY8nsP7QwiMnpGot0d+53+BrctGlhq
w4r2iRi3g/y4QTEf4TI+t1lTtWe5TAmNKzCZoMFX4bzppBLJbWJ91hKmA1xtVgyJ
2zL0h2jqYPCiTcLYWvFiwzQvcvQEt/vmK9ZL7THdBIQqmtJyIEVaNW5POa6kUcv3
y4xUYd2MtYReS6zLooJ4gEP6oPT8w3LuwO7rGohBpV8A8d4ep+u+i1Am0ZqmjY6H
hOhZZ+zUxPssK/wsvI5b/1tR/rRVuPC6pXTkCwPoSU5JVpl9PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKB224WtayFCcWHGh+65NeyfJV5NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvNzFjMzI4NzUtMTdiOS0z
N2ZjLTg4M2ItNWIyNDg3MmNmODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDo/0wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIF4Z4PKUf/11XK8B6ieqHqhZthUWYs59zwA9Hi0eWMNJf2vJ3TYYjSb
qLC5KQEYyYLerh2IhcghInr+BJSjWWLCTaf5MDB0D8GdPd1NKTogVaQVehIuwZ4t
nYUVFazFbGU2V5l4tnBJ4vGIVcyaspcYyuh4Adc+NSVjXcPz3Vu/SlaSplC4SmMw
IADFDUWpyvcLZQPCK6AGRUkkPLFfj6EgXNEOfLBfHSj+OsTS/H/LKMIV1Mhwtir1
CofFEufHNhYFtyGI6HzStIfTFcr7P6cxThSHMcOfnO7jDMr0ECXu5MKO3X4DLVE3
kR/Nq9E16zck2g1LpCMFuvkEKOBhLC4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:38:47 2025 by rpki-client