Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa
File: db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa (raw, json)
Hash identifier: N+lCg1w8QpKdwHkkUaNjJCisy5oxeG5wEattP9UCmyY=
Subject key identifier: 48:03:77:A1:FB:2B:E1:C7:41:8B:6B:D9:D3:F6:4F:A0:9C:87:0E:C2
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F43285848A830A90E06583D2EF23E8780
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 11537
IP address blocks: 163.253.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:a9:0e:06:58:3d:2e:f2:3e:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=e3d3b690-ee3c-4e8c-af6c-8de433d96c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:7e:1c:e6:9d:7e:9d:c1:dd:e6:7e:40:06:
5f:1b:f8:bf:e7:14:d2:b4:a4:ec:1f:89:f2:a1:d4:
ea:45:a4:57:18:d4:1f:d5:e1:08:d2:fe:16:5d:99:
72:18:fc:8c:43:c3:95:45:60:99:db:99:e5:2e:a4:
d9:26:fe:c0:60:b4:9e:6c:23:6e:c3:c0:a1:b0:3f:
67:67:22:1b:77:31:c6:30:01:ca:af:40:a8:66:b8:
2c:07:5e:fd:d2:5b:8c:3a:30:49:d7:0e:a4:3f:06:
a4:30:08:6f:ec:49:ca:5d:ae:16:2f:7e:6d:d3:9c:
5f:c2:48:6b:5e:6f:11:4b:aa:6c:78:15:a9:3b:c4:
07:15:6f:71:46:02:5c:04:39:75:0c:17:9b:60:af:
f9:df:1c:df:77:81:7c:7b:a2:92:fb:7c:f2:a0:bd:
35:25:1a:71:ae:45:cf:93:e8:2e:13:f8:f5:56:4e:
48:61:85:1f:31:93:bf:6b:3e:0f:db:4a:70:6b:52:
c0:a2:30:58:65:71:24:53:07:94:74:f9:7a:7a:98:
1b:85:e3:05:76:7b:ad:15:5b:e0:fd:a6:3e:cf:57:
c0:2f:f3:ff:48:a0:05:e4:33:96:c7:ee:2c:e7:fe:
ba:bc:ce:47:43:8a:61:5d:7b:bb:28:5c:f0:07:cb:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:77:A1:FB:2B:E1:C7:41:8B:6B:D9:D3:F6:4F:A0:9C:87:0E:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:74:56:40:4d:c6:b6:94:16:8f:a0:de:15:60:44:72:2a:af:
bb:4e:ff:53:b4:84:cb:e0:a3:ce:79:e6:ff:40:aa:da:47:61:
e4:b1:79:4f:25:83:05:ff:2f:c3:f7:48:bd:f2:d6:ea:2c:92:
80:88:41:d4:1c:49:f0:f8:2a:3e:f8:31:7e:f4:98:37:62:aa:
a5:1e:99:27:70:eb:fc:e1:1a:bd:82:27:8c:22:e4:77:16:3e:
8f:5d:96:e0:43:de:a3:54:6c:cb:30:6b:37:e5:ff:82:18:17:
49:14:8f:81:c5:44:18:15:66:79:3c:90:fd:c3:ff:7f:e9:e8:
0d:bf:f0:de:97:97:ec:a3:46:c2:ca:02:50:12:3a:68:bc:cb:
84:53:1b:ca:b1:11:6a:fb:bf:a8:c9:6d:3c:9c:1c:99:00:50:
f2:69:de:ba:36:9a:38:80:c8:55:9b:aa:05:e8:38:ec:61:78:
13:2e:0f:b9:24:cc:e7:e2:20:0d:61:9c:4c:2e:e6:09:09:95:
a5:05:2b:0a:ac:8b:55:1d:43:a1:4d:d5:d1:60:ed:77:fa:e5:
0d:eb:fd:c7:56:3f:f9:69:c1:11:af:4d:d3:50:5e:0c:d6:7a:
89:76:5e:f5:f0:12:bc:ea:db:28:95:18:d1:5f:ea:66:9a:e5:
18:c2:9d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:42:27 2025 by rpki-client