Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/38210fb7-c765-3c3e-9391-b97eeeb28281.roa
File: 38210fb7-c765-3c3e-9391-b97eeeb28281.roa (raw, json)
Hash identifier: Rm+l2mXe/GxpRpS6f+VPs7djBRaljxiyL2knOLcV17Y=
Subject key identifier: E3:5E:A8:EA:73:C0:95:28:D4:00:36:A0:67:1E:A8:C0:BF:69:CD:9D
Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial: 010D0C9F43285848451585180DE7689F6C7CB680
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/38210fb7-c765-3c3e-9391-b97eeeb28281.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 399139
IP address blocks: 63.161.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:85:18:0d:e7:68:9f:6c:7c:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=fe310350-2c5f-4bd4-a0f3-0232f4168357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:fa:9c:8f:aa:7c:55:d1:22:9f:97:bd:18:
20:c3:72:26:f6:0b:be:17:9d:d0:87:02:88:61:55:
b0:4e:80:9f:34:02:43:28:6f:ad:0d:ac:a2:1a:b3:
5b:16:a8:12:64:a8:c8:0f:54:7b:e7:1d:06:4c:ca:
1a:b2:5b:b5:a9:27:dd:2e:69:5d:8a:bb:ac:35:80:
14:43:05:37:b0:19:32:77:bc:ce:94:5c:cc:11:9d:
8b:95:b1:34:69:3a:80:0d:67:f7:cf:92:83:f9:14:
21:85:28:d1:2c:d2:e0:26:42:c8:6b:d5:56:c9:0b:
3b:da:27:0a:ba:c4:ea:17:98:04:19:b6:34:1a:5a:
72:a0:fb:29:60:3e:b6:c4:85:02:c2:eb:35:f9:2b:
16:ea:8d:74:94:d6:24:0e:5d:96:c8:4d:2e:d7:df:
60:3e:a1:11:4d:99:5e:39:dc:bc:0f:b7:ac:44:41:
75:ae:a6:1b:ab:1a:33:15:37:0c:ba:33:fb:3e:fd:
6a:e1:91:a4:8f:a6:62:ad:a2:47:ab:f2:1c:50:e0:
d3:1e:97:50:39:aa:a3:0b:b7:03:81:b0:c7:56:0f:
1a:ab:43:6f:af:2e:8e:da:58:76:ee:66:62:56:36:
55:54:81:3e:ba:d5:2b:3b:51:0f:35:8f:b1:f6:6f:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5E:A8:EA:73:C0:95:28:D4:00:36:A0:67:1E:A8:C0:BF:69:CD:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/38210fb7-c765-3c3e-9391-b97eeeb28281.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
X509v3 Authority Key Identifier:
keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
sbgp-ipAddrBlock: critical
IPv4:
63.161.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:b9:20:6a:4c:57:3d:94:3b:fc:2f:36:31:b9:fd:e1:31:a5:
25:4f:5b:29:1c:d3:e8:a5:30:fb:a9:45:b8:76:ed:f4:42:e6:
ec:37:95:3d:18:dc:78:01:ea:b3:96:f8:a7:e7:93:0c:d9:11:
ea:92:13:3c:f1:68:87:cd:f8:61:a8:6c:ca:ed:b7:d6:62:8f:
f4:21:4b:40:54:c8:48:b6:f5:5e:fa:61:b7:4a:b4:d6:1e:5b:
ab:f6:c1:3e:66:e9:fa:c5:0c:00:e1:40:9f:37:00:58:e8:4d:
6a:72:82:76:75:ca:2d:d9:3a:0e:a8:d4:7c:d0:1e:49:d6:f7:
58:d2:3a:c2:a1:77:04:0c:01:c9:29:37:7c:b8:21:45:3d:4f:
a8:e5:85:0e:30:68:c6:73:76:9f:87:df:56:da:6d:94:f3:d2:
39:6a:de:d8:b3:27:cf:79:c6:4c:a6:0f:94:14:bc:99:80:74:
44:87:69:63:d6:b8:cb:22:a0:a1:9f:2b:6c:d9:37:95:39:19:
db:27:13:21:70:c9:9f:6d:4c:44:3f:45:c6:d6:98:65:a2:4b:
3d:5b:fe:67:e4:3a:2a:34:86:95:0c:06:9d:64:28:6b:dd:17:
c9:d7:62:de:a4:4b:93:95:fe:9c:8d:b9:93:17:c4:52:19:47:
fc:74:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:20:25 2025 by rpki-client