Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa
File: 2088ad0e-df10-303d-a609-0636c73f7c1d.roa (raw, json)
Hash identifier: t/4fKYAeE60QPRSf4q2kWL08Hj6ShhLlXSOL8v0ArW4=
Subject key identifier: E6:02:24:D7:F4:6E:63:F0:C9:6A:2C:09:2F:FD:60:1F:0A:EA:F9:17
Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial: 010D0C9F43285847F84F8A363C943BB807039700
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 38047
IP address blocks: 103.123.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:8a:36:3c:94:3b:b8:07:03:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=f223d29b-2d18-48bd-b5b4-13a8e5988cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:ab:a6:85:a8:ef:89:84:cb:00:54:b1:f3:
28:38:2d:88:ce:a3:9c:00:e0:30:7d:55:62:83:6d:
ab:95:7a:92:6e:63:66:7c:fd:fa:c1:3c:c9:55:22:
e9:90:3d:fc:1d:4a:ad:9e:f5:88:8d:61:a5:d3:10:
54:96:31:47:3b:b6:3c:ac:91:21:a8:0f:93:77:78:
1a:7a:5e:90:31:fb:5c:87:3a:fc:06:53:92:9b:22:
dd:07:2f:d0:b7:50:95:9a:ee:64:79:bd:f0:e2:eb:
26:eb:b3:8e:92:d3:49:a2:25:da:73:ca:c7:58:68:
58:26:9c:ea:50:62:e8:6d:bb:f8:3f:e0:21:a4:eb:
16:cc:1e:bb:f8:c2:c1:5b:c9:25:8c:2f:b5:72:fb:
31:ed:33:30:a8:3e:25:4d:ba:fb:69:c2:dc:f3:32:
7c:f9:67:d6:e5:66:6e:35:34:5b:72:5e:8b:e2:b7:
aa:23:4c:73:29:ae:a9:be:0b:af:59:3d:66:96:44:
70:94:ab:59:8f:16:5d:9b:59:ae:46:dd:02:a3:64:
5f:99:4d:99:bb:9e:ca:69:9e:34:46:5e:d0:a9:3e:
db:f8:37:48:b7:4e:23:f6:57:21:22:a1:0b:bc:2b:
ed:2c:f7:92:87:30:ff:11:4d:51:11:be:66:8b:9a:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:24:D7:F4:6E:63:F0:C9:6A:2C:09:2F:FD:60:1F:0A:EA:F9:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
X509v3 Authority Key Identifier:
keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
sbgp-ipAddrBlock: critical
IPv4:
103.123.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:19:6a:c8:60:a1:40:7c:18:81:37:c1:cd:87:1b:30:52:b7:
e0:94:98:a9:44:92:69:b8:0f:86:e7:cb:df:94:04:ad:ef:67:
4c:06:b3:27:9e:03:70:a0:80:8e:e2:c0:ac:be:dc:e2:74:4e:
22:15:b5:e6:7e:3a:42:31:36:fb:7a:fb:99:bd:17:53:12:fd:
24:85:01:ea:dd:06:81:fa:7f:a0:80:d1:48:fa:68:7c:d2:54:
14:da:b0:90:a3:fc:da:ac:52:0f:1a:c4:a3:b7:a2:c3:65:2b:
80:87:74:56:27:81:66:35:5f:1d:7f:08:89:40:31:4d:cd:46:
fd:6a:6b:55:10:2d:d8:24:13:16:20:e6:8e:c9:0f:98:3e:3f:
82:9e:45:93:f6:77:0b:ed:da:2f:79:9c:97:9c:22:0b:8c:47:
0f:b9:d2:c4:a8:6e:17:42:7b:42:a4:8a:24:cc:51:4f:5a:5d:
e6:35:e9:a5:c7:29:e1:e0:fa:dc:21:0c:84:c6:c9:f8:e6:c9:
e1:92:38:c8:b4:12:55:75:4d:fc:db:d4:f9:bb:4d:e5:1c:d9:
16:e1:4b:b4:48:25:23:3e:d6:6d:04:6b:51:1a:2a:e4:f9:d0:
56:6b:36:23:e8:1e:c8:7a:e5:20:c0:49:cb:a8:dd:c4:70:aa:
35:5b:b0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:14:24 2025 by rpki-client