Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa
File: dda697e5-795b-3c5b-960b-01f1086c0e4f.roa (raw, json)
Hash identifier: K73Z+68aOA09oZUmGma0NvilCNHBor58G/1LZj/1DZc=
Subject key identifier: C2:69:B1:34:54:9C:5C:A0:95:BE:6F:DA:C4:59:65:39:59:36:22:FA
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F43285848037B63150C969AA8C8A6FA40
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11537
IP address blocks: 163.253.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:63:15:0c:96:9a:a8:c8:a6:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=cbca37d3-550d-480c-aedc-058c3485055e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:ba:a0:f1:4b:b8:c0:1e:aa:04:66:ef:f1:
40:58:08:75:b8:62:6b:49:e7:d7:40:c6:18:44:43:
79:43:c6:4b:cc:d7:92:71:9f:0c:9b:d9:52:23:f8:
eb:1e:7f:d0:30:a9:3a:bb:54:a4:b1:67:61:5a:1a:
86:3c:a8:56:cf:88:a2:12:06:26:c6:4e:bf:9b:ae:
91:d4:c3:15:6a:db:3c:3c:69:ca:fb:fe:d6:bd:1e:
d8:bf:c5:8b:bf:a7:14:34:c8:a2:bd:2b:3d:ea:c7:
bc:2e:ee:83:57:d0:7b:24:bc:4d:b6:e5:3f:0b:bc:
74:d2:55:05:65:93:1a:d4:df:0b:d2:75:ad:2c:e7:
5f:d3:ee:da:59:ae:52:c8:91:f2:f8:50:98:42:cc:
f4:28:86:87:69:20:31:90:aa:14:79:e6:cb:6f:e4:
1c:8a:fe:3e:d1:9c:f4:48:fe:c2:6c:56:28:43:74:
33:bf:83:b1:4a:8b:64:6d:a9:92:96:21:71:a1:c8:
e5:9a:f1:42:fd:dc:da:52:07:d8:8a:0f:12:35:25:
70:1b:cf:7f:7c:e4:42:f2:cb:34:7b:7c:32:ef:26:
a9:f9:2f:d6:b3:92:5a:f7:15:c9:3c:cd:50:12:fb:
d1:47:eb:b8:54:e5:a3:8a:3e:dd:9b:9d:b0:89:39:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:B1:34:54:9C:5C:A0:95:BE:6F:DA:C4:59:65:39:59:36:22:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:e8:3d:0a:3a:10:c6:eb:00:ea:34:ef:19:25:24:fe:e3:b5:
50:2a:7a:c1:32:b9:9f:83:70:b2:14:3d:28:f6:a8:42:04:ce:
86:70:6c:82:a3:7d:b5:f9:83:0f:8b:07:d2:cc:dc:1c:ab:ff:
82:92:10:b6:85:eb:90:ce:52:54:b7:a0:56:8d:22:6f:f1:e8:
32:62:2b:c5:73:c6:ca:d1:42:61:5e:92:d0:29:b3:67:82:41:
f0:19:24:51:c0:69:6b:a5:62:38:a6:4b:94:09:fb:d7:a5:b3:
4a:7a:86:6f:03:83:fc:23:1d:35:9a:5e:ca:3c:60:f2:df:89:
b0:dd:85:5c:49:72:58:3b:ac:c7:8c:13:cb:72:72:bc:98:08:
08:28:bf:fc:55:43:9a:8f:d6:8d:5d:f0:5b:f7:78:d4:ac:2b:
f3:fd:65:36:f8:53:f6:12:3e:20:cb:43:16:a4:f8:4c:6f:bf:
69:64:cc:1a:ef:a8:38:5c:55:63:9b:a0:e0:70:e3:ce:ed:51:
a3:f5:df:df:0b:e3:cf:9c:a5:93:d3:ce:70:fd:4e:d9:10:8d:
00:94:50:46:30:0e:e2:8a:58:d7:c0:3a:09:dd:61:66:84:1e:
f1:e7:09:97:fa:c4:59:a5:cf:df:0a:d0:06:37:c4:bc:33:59:
f4:40:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:05:08 2025 by rpki-client