Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4c444a54-6828-35c0-9010-b82d9b4f9e37.roa
File: 4c444a54-6828-35c0-9010-b82d9b4f9e37.roa (raw, json)
Hash identifier: M8xp7Nn4I9Lf6yxDoXRgZf0GF/M2ECxcclezDv6fOLQ=
Subject key identifier: 80:EC:F8:98:72:60:91:94:27:EF:3E:0D:BD:99:C4:D6:29:1B:40:DB
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F432858485470306BC04FC813CA8A4B40
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4c444a54-6828-35c0-9010-b82d9b4f9e37.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 36231
IP address blocks: 163.123.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:30:6b:c0:4f:c8:13:ca:8a:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=bba957bc-23f3-41c9-bf50-d4c8a9455b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:92:71:1c:66:8c:e9:96:06:a3:10:af:73:
84:33:a0:83:8f:fe:16:34:23:e7:fc:2f:1c:f1:ff:
26:5a:4f:84:e3:72:45:aa:a8:62:11:af:66:20:97:
3e:53:52:b9:20:04:b5:d5:ce:bf:65:4f:2c:92:de:
40:a4:8d:b3:1a:81:77:7f:6f:36:0c:51:60:38:fc:
d0:a6:c1:50:ac:06:d4:6b:bd:74:d3:2d:0b:c7:e4:
73:7f:43:bc:15:35:d5:df:2f:5b:5f:03:8b:b4:47:
47:ea:d9:5d:60:4e:9c:72:e9:1b:51:30:2a:86:b6:
44:b2:51:ca:a4:9d:a3:e4:06:ae:87:62:1b:94:8f:
c1:70:a3:43:0f:67:ed:8c:b0:46:66:52:9f:9a:0b:
1e:7d:54:f9:03:69:4b:54:d0:cc:57:68:e9:86:ab:
e1:05:6a:95:87:65:2e:4d:00:9f:d8:3a:33:ee:0e:
28:0f:80:41:ec:df:e8:e0:cc:ab:b5:d2:26:71:0b:
9f:79:63:ee:29:d8:58:43:16:9a:8d:f3:4e:b2:0f:
f3:f8:e6:04:e9:9e:b8:e4:d6:23:82:fa:de:54:d6:
73:22:1c:c6:82:2a:d7:7b:71:da:d5:a8:84:b9:ef:
a6:de:36:d3:86:40:73:75:24:6f:78:44:f6:c0:d0:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EC:F8:98:72:60:91:94:27:EF:3E:0D:BD:99:C4:D6:29:1B:40:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4c444a54-6828-35c0-9010-b82d9b4f9e37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:9c:df:34:80:58:83:67:d0:06:e1:cd:0a:05:42:35:4b:29:
1b:da:c1:d1:4e:57:b3:9a:7d:60:cb:5f:0a:78:a9:d9:e4:06:
77:c2:04:29:7f:b1:1b:38:19:90:52:f1:79:9b:40:e2:60:01:
69:f1:9d:8c:70:75:60:1a:bb:c4:f5:f4:d3:37:1d:df:f1:6a:
3e:76:dc:0a:42:dd:32:74:57:92:2f:2c:1b:89:2c:9e:97:49:
8a:ab:38:23:57:05:ea:9e:4f:23:fa:9b:93:83:98:f9:0b:87:
a3:a7:8a:ac:1a:a4:a1:84:e8:fc:41:4a:ae:a7:08:88:91:94:
81:12:69:31:5e:5e:32:e3:48:0f:f9:ac:c0:17:b2:c7:20:52:
29:d9:59:a2:2e:96:ec:f9:e1:4b:5a:36:cc:fd:db:6f:54:e1:
dd:26:74:0b:f5:ee:12:ba:a7:bb:97:ff:65:0c:6a:5f:5f:82:
45:d5:a3:a1:98:09:ff:dd:90:cc:0f:2f:6e:5e:81:b5:0b:2a:
c2:eb:52:68:3c:90:25:32:ae:fd:45:b6:8b:ed:6a:11:7f:3b:
26:30:cf:f8:c2:bc:bc:a0:c1:d7:e1:e2:bb:60:56:1b:b8:25:
c0:d7:ba:0b:56:da:66:53:82:cf:1f:d6:2d:59:4d:18:67:e1:
69:98:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:51 2025 by rpki-client