Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa
File: a19e3195-8a84-3cd1-96c4-4347391db867.roa (raw, json)
Hash identifier: Fs9u1vonVYcqJkRdYZ20P5Nnaw4EboRaWaoYlYNbEog=
Subject key identifier: 0C:38:17:FE:D1:7D:7B:05:4E:22:A6:CE:91:99:40:10:46:58:75:12
Certificate issuer: /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
Certificate serial: 010D0C9F4328584854703457B72991AD647A4640
Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 8075
IP address blocks: 162.254.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:34:57:b7:29:91:ad:64:7a:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=e52116c0-93e9-4e70-9c5f-9c2c8c7ffa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:13:65:3f:ef:0e:51:ae:51:46:9a:d7:0c:8b:
2b:31:fc:fe:23:ec:94:7b:13:a0:79:ae:b0:4d:4b:
49:9d:50:82:36:03:78:4f:87:3f:6d:2a:2a:28:38:
8a:57:80:a7:74:d2:03:d4:10:42:91:e9:55:e8:66:
a4:dc:ef:90:53:1c:d2:dd:db:2e:a3:46:88:de:bc:
27:59:7a:b4:69:fa:7f:90:00:c1:f7:d5:0c:ec:d1:
4a:b5:e3:96:63:93:0c:9e:3f:ca:c1:68:92:57:f6:
cb:ca:ce:91:63:59:e5:3e:c7:cb:af:2f:99:69:90:
5c:c7:de:1d:19:41:59:c2:9c:cf:38:99:66:35:dd:
ea:0b:96:a0:49:76:9d:26:93:b0:bd:38:2e:54:5d:
3c:b7:1a:45:c6:62:25:e3:0e:42:f6:73:cd:5f:3e:
52:fb:38:42:d7:58:4f:5c:26:8c:a3:da:f3:ec:42:
ef:6d:28:53:9f:ac:a0:a0:bb:bf:77:1c:39:a1:75:
61:34:b9:f1:6e:2c:9f:e5:5f:87:e7:cf:b5:f6:68:
a0:d2:88:76:e0:a8:2c:b2:1b:b3:60:dc:79:16:4b:
8f:be:68:a6:98:1c:bc:83:47:b4:bc:9a:53:d6:dd:
a2:89:e4:95:31:c0:75:6d:81:29:be:c7:f3:92:23:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:38:17:FE:D1:7D:7B:05:4E:22:A6:CE:91:99:40:10:46:58:75:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl
X509v3 Authority Key Identifier:
keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
sbgp-ipAddrBlock: critical
IPv4:
162.254.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:a8:97:42:c5:23:bf:b3:7f:7c:7c:37:54:cf:ee:4e:74:c6:
7a:a1:ff:0d:17:5b:35:c8:24:14:c4:7d:e6:8f:21:6a:5a:ae:
ee:1d:0d:d1:9f:a7:0a:36:0f:67:5e:21:d2:6d:30:31:a9:23:
28:81:29:af:54:c0:e4:fa:69:1c:86:18:25:d7:a8:4c:17:0c:
12:f5:4c:e5:c9:09:aa:58:28:3a:bf:53:1c:1d:3e:51:f6:ff:
b6:26:aa:38:b0:8a:7f:7c:4f:ed:fa:6b:73:95:c8:02:f5:1d:
00:27:0d:36:59:df:b1:0f:1c:ab:ee:2e:a0:5d:e2:c7:55:39:
0d:f4:44:34:3a:9f:1f:26:79:46:58:d8:f8:95:b9:74:45:bb:
79:b5:59:76:3d:af:4c:47:c7:f4:b1:d3:bd:d2:6c:a6:3d:ca:
7d:5a:86:3a:fd:87:e4:bc:3c:23:bd:58:19:ad:14:ed:bc:e3:
cc:8a:d8:14:6b:27:92:f1:1a:7a:09:ea:64:39:c0:96:22:f5:
e0:33:c8:da:75:31:1a:48:72:e9:a1:0c:6f:32:fb:ae:ab:07:
04:76:3a:f6:7d:c6:5f:79:5a:32:38:1b:49:14:cf:c9:df:47:
e2:0c:18:8f:90:a6:f6:5d:16:f8:85:94:4a:f9:80:1c:55:c3:
2e:c6:4b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:26 2025 by rpki-client