Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa
File: 40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa (raw, json)
Hash identifier: jB9PgrmG8vqhQoy3LZCSR5StRVwzwZT+aXA2OBxYjOs=
Subject key identifier: 1A:5C:68:5E:B3:AF:FC:E8:BD:3E:50:E7:CC:41:F0:E8:15:32:BF:C9
Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial: 010D0C9F4328584858A055209F12F08DDB198500
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 1239
IP address blocks: 63.160.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:55:20:9f:12:f0:8d:db:19:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=70b0d9f7-def9-4d84-ba7a-f0f7c7adbe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:ff:d1:ae:9c:7a:d4:4d:80:89:fe:95:53:
bb:0e:8f:c3:b8:d7:f9:89:b2:91:85:7b:19:03:27:
e8:c2:d8:54:66:39:ca:1f:c8:7d:73:61:c7:d4:b3:
b6:9b:f4:68:5e:0b:dd:ac:6b:99:10:29:a6:b7:25:
80:42:c8:95:83:6b:b5:52:d3:24:39:06:c1:47:64:
55:8d:d3:a0:c2:9e:f5:87:26:7b:da:8f:8f:87:63:
a3:14:4a:97:ce:af:22:19:df:95:c6:db:1e:53:26:
ca:6a:db:9e:ed:22:0d:fd:ac:53:bc:78:20:46:91:
fe:13:d3:ac:a5:39:a2:84:9a:cd:42:41:0a:d1:17:
8f:09:64:1b:e2:2d:e3:72:c5:9b:12:d5:c3:38:ec:
4e:6f:31:92:90:0b:26:97:7e:6e:a6:93:d8:45:73:
5c:0f:42:69:63:cb:6c:4e:30:6c:c8:8f:46:e5:ba:
c0:35:01:7f:5e:5e:1f:17:45:45:d3:78:d1:55:4f:
73:3e:6b:49:b5:f2:e8:05:50:19:f7:a5:b7:42:90:
19:e3:ff:9a:e5:3b:1e:a8:a7:05:30:83:d9:8f:5e:
e5:b8:60:e6:da:52:cd:06:6f:64:5a:be:25:ec:d4:
ca:68:f2:f4:4f:31:e7:ce:7f:fd:6b:e0:70:84:37:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5C:68:5E:B3:AF:FC:E8:BD:3E:50:E7:CC:41:F0:E8:15:32:BF:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
X509v3 Authority Key Identifier:
keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
sbgp-ipAddrBlock: critical
IPv4:
63.160.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:a4:3c:ae:a6:58:0f:1e:65:4e:eb:25:51:c1:94:e5:a1:62:
9e:ca:d9:ad:fa:f0:21:cb:d3:49:4b:25:0b:4f:28:06:88:84:
4c:a1:17:e8:6a:f1:8b:3a:e4:ca:f0:3f:cd:06:61:96:22:e9:
a2:7f:7c:7c:6a:0a:a7:a0:c3:ca:1f:9d:f6:41:63:85:38:f3:
4f:05:34:3d:84:af:32:62:89:85:76:31:14:4a:c6:c8:49:5c:
89:43:5a:65:b7:98:98:21:52:97:af:1a:ea:99:17:ac:b4:68:
e6:58:93:5b:6a:1c:73:93:e2:02:68:bd:0b:fc:82:94:ef:02:
79:34:13:f6:32:c4:a6:86:ef:af:aa:f2:f0:c8:a1:91:b6:5b:
cf:9c:be:54:ed:e1:50:b7:ff:71:30:18:62:5a:f6:b2:fb:b0:
22:4a:4f:4a:b5:ea:ea:70:49:52:15:5a:2a:05:0a:40:08:fa:
fe:1e:4d:b9:e2:d7:f6:6a:8d:43:2b:b4:0a:2b:bf:b7:1f:25:
85:0c:9c:09:cf:30:4c:ad:d4:d5:71:89:2e:2c:ec:fd:a3:10:
d9:61:a9:82:f0:82:ae:08:f7:53:ad:b1:05:9e:de:b4:81:bc:
01:0b:c7:7d:27:b7:5c:30:11:c8:78:e1:57:1c:6b:c7:d7:a3:
c7:19:7e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:25 2025 by rpki-client