Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/ec6d447e-59e2-3b17-b57c-e6ab4563e18e.roa
File: ec6d447e-59e2-3b17-b57c-e6ab4563e18e.roa (raw, json)
Hash identifier: dr6+on8siMmFg4UUF6EVT41l3lfXrL9F0ejFrXx9o7E=
Subject key identifier: 38:22:2F:4C:7E:69:71:5A:42:45:8D:41:03:48:D9:00:12:2E:E0:FE
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F432858485B6AFCB5AF09FA6205B41700
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/ec6d447e-59e2-3b17-b57c-e6ab4563e18e.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 36231
IP address blocks: 163.123.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:fc:b5:af:09:fa:62:05:b4:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=ce37f265-143d-4fc1-859f-c715f451190f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f4:f0:62:7d:eb:7a:fa:72:db:3d:4f:9a:7c:
db:bb:bf:ea:e4:1f:ef:51:0a:a0:61:ae:51:7b:3a:
f4:21:c6:43:d0:2f:2f:d3:a7:ea:fc:e8:bf:19:e9:
9a:e2:ae:84:b2:cd:ed:5e:44:28:c8:31:6e:d6:75:
a1:98:03:f6:11:e5:fe:81:1e:54:ac:09:fe:8a:f1:
a3:45:cd:0b:c8:b4:b5:af:8d:48:15:8a:ce:26:f1:
2e:96:de:f9:ad:56:01:b7:92:7f:69:9c:1e:fb:02:
67:2a:86:57:8b:17:57:3a:48:15:22:6a:fb:c1:92:
ff:06:0c:98:39:99:15:23:26:6e:52:5e:56:57:38:
9d:a3:9c:55:28:f0:df:5c:07:f3:e6:de:47:3b:78:
c5:ea:82:3e:a3:5f:d1:c3:27:c9:b7:cf:cf:a4:21:
d0:6b:a5:01:07:0e:a8:8f:01:ce:6c:2c:fe:9b:a3:
68:40:d3:34:51:a8:5c:08:d7:ae:08:32:d5:1c:18:
27:8c:6b:e5:4f:1b:d1:71:db:5f:81:0a:df:19:5f:
82:a7:15:c1:f9:b2:f9:0c:c4:be:ca:31:a1:f9:33:
68:08:52:09:26:0f:a7:f0:96:95:af:d3:08:8e:df:
78:47:52:84:26:0e:bc:ae:8f:a1:fd:ce:a5:e1:35:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:2F:4C:7E:69:71:5A:42:45:8D:41:03:48:D9:00:12:2E:E0:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/ec6d447e-59e2-3b17-b57c-e6ab4563e18e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:63:ed:f8:4d:ed:8e:14:45:89:3d:50:d0:13:48:b6:5b:be:
b3:bf:c9:8c:a0:74:0d:71:8f:df:76:b0:4e:d5:67:eb:84:f2:
46:fb:bf:15:d5:e4:52:5b:01:b2:9e:93:bd:e1:1e:50:f4:eb:
de:ab:d7:71:10:d1:19:ff:2c:55:c1:ac:f8:94:0f:35:67:e9:
65:b4:46:7a:27:2a:5d:6c:a1:e9:0a:10:e2:45:e8:18:6b:5e:
20:9f:89:86:3f:ab:24:73:7c:f9:9c:cf:1b:a9:ba:47:c4:af:
9e:87:d9:85:37:46:40:ee:74:e8:74:3a:d4:de:6b:08:27:b7:
6c:da:f1:8e:03:44:28:39:be:10:59:5a:f5:1f:17:42:99:7e:
db:0c:10:7e:70:28:68:81:5f:23:84:86:f5:26:a6:48:2f:fb:
bc:4d:54:85:c9:7a:b5:29:ad:4a:2b:6b:44:d4:6b:48:e3:1c:
50:7a:c4:8f:02:83:7d:22:d4:6a:e2:2c:d7:7b:a0:65:e0:9d:
9f:8d:6e:14:3b:21:cf:6c:f0:b0:c8:56:26:fb:f0:e4:74:5f:
3a:69:dc:3b:34:74:11:09:fe:ed:4c:ec:98:c5:5d:44:fb:18:
42:66:1c:c2:c0:22:2f:15:de:09:89:13:90:1f:0d:05:e0:64:
a8:0f:a0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:15 2025 by rpki-client