Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ecfe60b6-54a9-379d-b34e-e83112265586.roa
File: ecfe60b6-54a9-379d-b34e-e83112265586.roa (raw, json)
Hash identifier: 0o0vfmG0LOVQzYBRDk0vdK67+asdAQSGL2S1IhtRGWI=
Subject key identifier: A2:1B:3C:6F:DD:38:86:7A:39:A4:D0:1D:43:93:D9:DB:CA:0D:9B:D6
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F432858481C9A88D43A52CD3359F1DD40
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ecfe60b6-54a9-379d-b34e-e83112265586.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 11537
IP address blocks: 163.253.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:88:d4:3a:52:cd:33:59:f1:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=b48ed020-a380-475a-97c5-96cc7022e282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:b3:3e:b8:21:9d:9c:20:4c:73:e3:6a:88:
d9:e7:c0:ec:a8:91:ac:a2:73:02:8a:de:5d:2e:b5:
25:6a:fa:b0:19:2e:f4:39:87:b1:71:17:d2:73:51:
0a:93:d6:51:cf:d1:df:72:87:3d:7b:94:eb:8e:10:
7a:96:df:ed:13:8b:6f:f1:a0:44:4c:d4:96:55:17:
48:9f:40:ca:95:3c:65:11:85:e3:a6:00:52:a1:5c:
1a:3a:4b:b6:65:c8:18:86:69:f3:4a:db:87:46:56:
cb:9a:93:4e:44:c1:58:fa:b8:9c:f3:b4:c5:e3:80:
09:47:67:b9:04:fa:8e:9c:d6:86:2a:32:7d:70:25:
c8:70:9a:e0:e7:fd:74:1b:df:65:c5:46:23:30:91:
3d:f0:bc:44:b3:02:c4:91:61:87:67:36:0d:36:58:
7b:ed:d5:3e:4e:38:90:3e:97:91:59:57:57:4f:2b:
a4:24:e6:93:8a:1f:11:4e:ac:11:02:d5:a2:90:b2:
24:cb:e8:af:39:16:f6:f8:db:e4:8e:b0:e8:22:69:
19:e4:d5:df:4e:63:ac:ef:0c:92:79:85:43:5f:3c:
e4:2d:32:30:b4:d6:e0:4d:97:41:0b:e4:d5:53:fb:
2b:3c:f7:ef:e0:2e:db:f3:c1:54:0d:23:19:9b:52:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1B:3C:6F:DD:38:86:7A:39:A4:D0:1D:43:93:D9:DB:CA:0D:9B:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ecfe60b6-54a9-379d-b34e-e83112265586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:4d:48:49:42:8b:f5:d7:59:37:d6:e3:b7:02:db:9a:3d:0d:
c9:38:4b:29:05:ae:2e:f9:85:9b:8f:54:9e:26:62:d3:3c:99:
d8:6e:f9:67:d4:da:7d:a4:6b:2d:24:54:46:e8:b7:32:c8:8a:
24:88:6d:06:b4:4c:3f:eb:86:34:70:5a:07:8a:b7:25:f6:10:
50:22:37:6a:b2:28:0c:70:59:13:ba:e4:10:e4:a0:58:ff:b1:
d6:f4:16:0c:31:1e:24:70:c8:c6:df:00:8f:83:4d:69:ce:92:
70:9f:d0:12:0e:43:d8:98:a3:ca:9b:05:bb:42:f3:a9:26:70:
53:89:ea:88:ef:52:2c:f6:15:a7:34:7d:7f:e3:df:7e:1b:98:
e1:8e:39:fe:dc:c6:88:07:31:45:83:25:d0:38:62:67:7f:df:
3b:7a:bd:6b:2c:88:7c:c5:76:df:e3:e2:60:af:c9:04:d1:dd:
78:0e:a1:0b:29:eb:90:d3:60:14:47:5b:07:40:3b:39:36:56:
3c:c4:cd:7e:c8:1d:24:42:45:6f:f9:81:4b:aa:f9:51:3a:ec:
68:b4:39:0b:7c:81:8f:ed:aa:76:33:d7:31:d1:8b:9b:6a:68:
ce:af:80:0b:c0:80:ff:62:d3:c1:8c:60:de:ce:52:fc:c8:6f:
30:ec:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:39 2025 by rpki-client