Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa
File: 8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa (raw, json)
Hash identifier: t3AulWzrS4WikB3PUqeNX0rKes1rr7QX2ph2a8orhqY=
Subject key identifier: D1:22:25:8A:24:70:C5:8B:C0:D0:3B:AA:9E:8C:F8:18:E7:7F:70:98
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F43285848037B633D2E36AEA24A6357C0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11537
IP address blocks: 163.253.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:63:3d:2e:36:ae:a2:4a:63:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=5d1f2c48-33d8-44f8-9e75-3ca6c82813fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:32:49:0a:68:a5:38:d7:01:43:fd:e3:8c:
b2:46:1b:65:b0:6b:27:96:ae:03:65:d3:23:1c:23:
26:b8:30:49:47:70:76:16:60:b1:c5:41:11:7c:ea:
bb:1d:66:27:cc:7a:a1:80:b6:fd:97:17:b2:18:f7:
fa:04:b2:88:bd:64:05:2f:44:b9:42:dd:35:7f:c7:
c3:88:ad:de:0d:bb:1f:dc:ef:80:b5:dd:e0:5f:44:
dc:63:32:21:0b:e5:73:f1:b6:4b:46:2f:7c:bb:f6:
14:95:68:44:ca:d0:6f:9c:8b:c8:66:a6:ac:d4:eb:
e7:d0:d6:e4:09:48:4a:ed:24:e5:5c:21:85:5e:8e:
8e:0a:95:bc:86:8d:6a:a7:e9:c3:36:d9:90:58:3f:
7e:0d:59:ee:0c:55:81:ae:75:fb:e3:87:23:7e:86:
c5:2a:d2:76:ac:39:53:24:98:62:f3:48:47:e9:fd:
65:ab:e7:b7:88:2d:bd:16:15:aa:e4:2c:45:ca:27:
e6:ee:22:fb:d1:e2:bc:30:6f:96:e8:9d:15:d0:17:
84:14:de:c0:9b:00:ca:0d:2c:b5:26:46:98:3a:88:
7b:8f:9f:ea:3c:6a:41:cc:56:73:9b:4c:a8:28:d7:
c1:89:6f:f6:e9:89:21:1c:7d:2c:f1:91:61:9e:d6:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:25:8A:24:70:C5:8B:C0:D0:3B:AA:9E:8C:F8:18:E7:7F:70:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d7:b0:bf:01:67:3f:7b:22:4f:c0:4a:e7:b6:09:22:f1:ca:92:
7e:8a:10:bb:9f:a1:f1:be:bf:57:e7:ef:a4:40:47:1e:64:32:
ac:6b:8a:19:6a:5d:95:be:df:7f:1b:cc:f7:02:97:e6:31:d7:
b0:cc:4a:f3:e9:42:33:8c:6b:64:fd:fb:07:1c:14:19:ac:c3:
1d:95:d9:ab:39:2c:44:d1:62:04:9f:af:ac:1f:2a:57:4e:98:
c0:be:da:31:25:74:45:53:fc:75:68:04:5c:56:ba:d8:20:3c:
59:b4:a1:5b:3c:16:5a:5a:b3:02:83:ea:6f:01:f8:af:72:90:
5f:f0:47:50:cd:fc:c3:44:48:17:7a:22:a3:b5:f3:ff:9d:57:
d9:73:32:47:b5:52:10:0c:2a:c1:92:28:5f:38:7d:53:31:2e:
65:b0:25:32:98:42:41:8c:1e:b6:4c:b7:2e:36:1b:97:85:c8:
dc:d8:62:85:2e:ae:73:ac:32:4a:01:75:58:a2:7d:d3:a8:b3:
47:03:dd:7e:c0:bc:47:d2:d5:b1:e2:69:19:fc:05:10:f3:86:
de:1d:93:15:65:f2:d1:49:b6:d4:13:12:fc:6d:f0:32:b5:70:
9a:6f:2c:47:1e:be:3f:6f:e8:57:6e:e8:ba:b5:8c:55:83:1f:
dc:c7:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:01:45 2025 by rpki-client