Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd8aba92-8ff6-3fac-b07d-be73c5c4fa70.roa
File: cd8aba92-8ff6-3fac-b07d-be73c5c4fa70.roa (raw, json)
Hash identifier: 4JAaQPXnvC/hW8hevllO1PTY/W3AQ3gyhnUJu1d1DyM=
Subject key identifier: D5:90:F2:94:89:CA:92:12:4E:7E:E2:48:F9:1C:4B:C2:01:DB:B1:7E
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F432858487CEB322E4AEA0041BEE997A0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd8aba92-8ff6-3fac-b07d-be73c5c4fa70.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 11537
IP address blocks: 163.253.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:32:2e:4a:ea:00:41:be:e9:97:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=ea76b90a-a74f-4491-9c9d-b1bccb6a8209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:7e:e2:87:86:9a:2f:61:23:fd:19:9f:6d:
5f:9a:2d:5f:c7:49:f8:65:fb:a1:10:34:14:c7:a0:
be:ba:1a:ef:70:bb:72:42:65:55:1d:14:bc:8f:f5:
8d:30:fd:a3:be:2e:bc:71:68:8b:51:d7:85:fc:38:
08:64:73:01:df:ad:99:3f:52:77:b5:41:03:9f:0e:
cd:1c:a6:bc:89:58:c7:25:d3:68:dc:bb:b7:10:d2:
96:28:b7:8c:9e:03:18:80:f2:c0:d9:8c:22:46:e5:
c8:69:41:dc:f8:f2:4f:55:c2:40:ce:9a:c6:32:c1:
36:66:ec:4f:e1:18:9e:39:73:e3:99:29:3f:60:5a:
c0:97:05:72:48:58:40:ab:af:7e:ee:83:fc:3a:63:
a6:07:1c:48:2c:07:4f:fa:9d:fa:ad:a8:cd:d1:40:
fe:37:74:d9:9f:98:e1:c2:63:4d:a5:e0:b2:1c:7f:
73:d4:59:75:d6:3c:50:45:34:4c:a7:3d:d6:3d:ba:
89:6b:a5:77:8f:dd:11:2d:3b:8b:43:f8:7d:bf:7e:
9a:b4:7a:69:2e:4c:95:54:c3:6a:02:3d:00:74:06:
3e:95:12:2e:03:4a:1f:de:15:ae:2d:9f:68:ff:14:
89:d0:16:fa:d6:da:22:46:e6:fa:58:94:36:fe:56:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:F2:94:89:CA:92:12:4E:7E:E2:48:F9:1C:4B:C2:01:DB:B1:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd8aba92-8ff6-3fac-b07d-be73c5c4fa70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:56:c9:66:c6:88:74:aa:9c:9b:02:dd:da:a5:ff:1c:05:02:
38:12:0b:61:c3:63:b3:1c:68:f3:96:c9:b8:54:bb:7c:18:c8:
fc:c8:86:54:cf:e2:a6:24:af:38:5c:ef:0a:c4:9f:41:7d:4b:
5f:fb:f2:16:cf:0a:19:9b:dc:a2:8e:05:a4:c6:db:57:c2:ec:
76:e2:40:74:07:d7:3e:37:06:ea:46:c3:6d:75:15:75:53:cf:
9e:a3:3e:6b:3a:72:84:fe:68:0c:2c:03:24:83:b8:c4:d0:b5:
50:1e:0e:34:7e:22:45:dd:c7:d9:4c:f8:64:75:61:2f:f3:9d:
9f:72:74:9e:ae:15:56:70:aa:ef:a7:92:66:4e:77:a0:ee:1f:
01:35:7b:27:18:0c:a5:3c:f2:02:27:d4:84:98:85:f7:5e:c2:
d3:41:ed:b9:37:82:ce:4a:61:17:6f:9d:38:9c:ea:82:0b:f6:
85:40:03:6e:47:b4:d5:c1:73:ec:67:1b:fd:87:34:3c:d0:c3:
41:9e:76:50:56:be:27:dd:44:27:95:94:aa:7d:1d:eb:83:1d:
3f:ca:e5:f9:e5:b5:60:f4:72:93:fa:1a:73:33:18:5b:94:8e:
79:1c:9b:8e:7b:7a:09:e0:f3:44:48:80:e6:42:fd:5d:de:34:
d4:1e:ed:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:12:14 2025 by rpki-client