Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa
File: afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa (raw, json)
Hash identifier: lxT87TbtuklQ3qk2smO3Rf6rRCoRzv66VFGKWtonLNQ=
Subject key identifier: 6F:12:EB:A2:B4:0C:62:95:AD:B2:88:54:61:25:70:84:71:36:20:59
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584812D53D76054A450E002E42A0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 62775
IP address blocks: 163.253.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:3d:76:05:4a:45:0e:00:2e:42:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=de456742-e7a3-4e74-97f3-e4b7cb0e9803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e2:29:8a:9e:1d:a0:30:3a:79:bc:5f:18:42:
ae:3a:e8:b0:94:1b:69:6a:89:d3:0c:dc:0c:64:ee:
4f:a1:fc:03:9a:2b:4e:eb:d9:a6:c0:88:0b:88:4d:
89:25:9a:6f:87:a4:e6:2c:72:73:1e:ed:e2:42:44:
c5:b2:6e:42:cd:70:87:52:31:14:eb:02:d9:89:32:
1e:c9:80:5c:59:b5:26:f3:9f:dc:29:ee:53:a2:2d:
c4:9a:f8:ae:08:34:bb:d4:05:e3:b1:d8:a0:ec:50:
aa:3c:fb:41:27:a7:8c:7b:59:8d:2c:60:85:2a:3c:
f7:fa:68:2a:28:86:bc:2b:f1:ca:ea:30:d6:7f:86:
02:ee:24:59:b8:7a:44:62:a1:20:04:d2:0a:7f:ea:
8a:1a:aa:ce:1f:41:c8:63:a2:1a:94:c0:8e:3a:54:
03:11:c7:e2:b3:97:3e:1c:d7:89:79:db:dc:ff:f7:
24:b7:93:56:62:36:12:22:46:37:d9:92:89:e0:08:
cb:b8:ab:70:0a:67:c6:8b:86:1f:73:86:5b:2a:fa:
eb:28:cd:0f:0f:a0:43:2d:a8:20:1a:12:57:5e:68:
2f:16:86:ed:22:2a:09:f1:9e:42:a4:80:db:16:a9:
55:5b:f5:7d:75:a6:d1:d4:19:de:46:63:17:a7:24:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:EB:A2:B4:0C:62:95:AD:B2:88:54:61:25:70:84:71:36:20:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:ea:8c:ec:4f:2f:1e:00:78:ab:39:90:72:03:e2:ca:21:be:
07:d8:3d:c1:da:f3:88:48:8f:d6:5a:29:ec:cf:9e:3a:4c:70:
4b:d1:df:8a:e3:a4:d3:f4:52:6d:02:b8:3f:79:13:f6:05:1d:
f6:80:c9:9b:25:37:83:30:b6:de:b1:00:a4:81:a1:33:8a:df:
e5:86:13:22:8a:a9:1b:cc:bc:a3:91:69:8c:58:44:13:07:96:
e2:4b:8a:fd:2b:9f:10:32:9a:57:62:20:43:0b:9a:71:98:a6:
ad:e4:ca:9b:ac:4c:5f:67:1a:a0:75:c9:80:1b:d8:fb:4c:cb:
91:c9:92:51:9d:13:9c:ba:b4:e8:18:21:0c:c0:35:18:08:cd:
aa:e6:64:63:e5:b5:59:50:55:70:cf:a8:f0:a0:f3:e4:a6:26:
15:ed:90:bd:04:89:5f:88:29:ca:e6:47:e4:ca:a1:88:71:7c:
e2:12:7d:12:66:ae:5a:d9:0b:f3:82:1d:84:c5:ad:a6:59:7c:
93:aa:cf:57:df:d3:ac:fe:d8:6b:55:b2:b6:37:f2:47:d2:d3:
d8:0a:ce:76:de:a0:80:6c:d4:6c:9b:d3:57:01:95:bf:39:17:
bf:75:aa:73:f8:33:46:4a:66:14:c0:ec:97:d6:5b:f2:f7:8a:
5c:13:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:09:51 2025 by rpki-client