Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7532ea0c-e641-334f-986f-c6ddff0253e2.roa
File: 7532ea0c-e641-334f-986f-c6ddff0253e2.roa (raw, json)
Hash identifier: ckelXRXVy2kHsR8gQms99+rh6PtOGEpKcwZ7nuAXyvg=
Subject key identifier: E9:03:97:6F:B7:F1:B4:77:09:C7:EF:E3:1E:80:EA:E6:D9:B9:8D:D7
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F43285848424ACEBA9224B3DFB7BF75C0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7532ea0c-e641-334f-986f-c6ddff0253e2.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 399471
IP address blocks: 163.123.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:ce:ba:92:24:b3:df:b7:bf:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=f67c4f45-e42e-4997-890a-0723a84e22ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:fc:15:e7:af:a4:52:c3:56:ec:35:03:43:
1e:51:1b:e0:cd:51:d0:0c:a1:c9:a3:50:11:f1:c7:
58:2e:01:f9:11:dd:a5:78:97:6d:9b:62:27:fa:d0:
e8:4f:18:b3:10:34:32:cc:69:59:08:ad:a3:e4:36:
a8:0e:df:ce:ba:08:a2:aa:2f:16:14:cc:64:2e:61:
3f:ac:2c:0c:e1:3b:a5:b8:d1:aa:08:7e:14:36:d3:
4c:50:83:86:ef:77:08:6b:4a:86:29:ae:dc:5a:8b:
ac:06:72:b0:3c:fb:bd:bb:a2:da:b9:28:af:fd:0a:
9d:d7:e5:58:a6:93:cd:84:41:a5:61:c8:27:bf:54:
09:c3:af:9d:73:9d:3d:7f:33:6f:1c:dc:d6:93:fe:
62:6f:0b:5e:f5:55:e9:05:e4:89:50:19:40:28:f8:
81:2b:7f:c1:d8:48:d4:0f:27:76:bd:e0:70:78:c2:
80:f0:36:ab:a0:dc:e8:e0:34:81:e3:70:3a:54:3d:
b6:eb:05:c0:c6:0b:ff:a5:0a:3e:35:ce:dd:57:1a:
53:d3:f6:35:1b:34:6d:d5:cc:e6:9a:1d:c6:35:0a:
8b:76:43:92:19:09:fe:d6:45:98:b4:4b:88:c0:fa:
b2:19:da:93:a2:9e:eb:95:30:e5:69:cf:df:26:b5:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:03:97:6F:B7:F1:B4:77:09:C7:EF:E3:1E:80:EA:E6:D9:B9:8D:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7532ea0c-e641-334f-986f-c6ddff0253e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:eb:fc:7d:09:de:ef:18:99:0d:c7:8f:1c:0b:7e:3e:0a:fc:
8a:de:00:c6:7c:76:4c:f0:18:8d:e6:28:16:62:f3:68:3e:1e:
c9:8a:93:67:a8:c8:0a:8b:f5:e6:ad:5d:09:4f:8b:1f:cd:86:
7c:cb:aa:b3:cb:ab:51:f4:f1:d0:82:de:85:d5:35:49:e4:b3:
4c:a8:9a:3c:4c:8a:5e:72:97:21:ac:c4:01:a1:fd:bb:17:94:
62:c3:77:6e:fc:31:f0:a7:9e:ca:5d:c0:c8:21:bd:2f:2e:5f:
c2:0a:78:08:51:f3:29:17:77:c1:09:a3:59:9a:ea:a2:2b:09:
9f:66:e9:ce:4a:ea:7f:e4:f9:8a:53:64:de:1e:c3:a2:c5:2b:
0d:66:3c:57:c7:71:35:01:1a:42:f0:f5:99:c0:c1:7b:6b:ef:
98:cf:08:0a:6f:6a:21:a1:34:74:b4:b7:d9:c0:63:01:4e:82:
15:86:e9:03:52:31:5a:85:54:24:ec:dc:8b:90:69:d5:e2:5a:
50:db:6e:94:bd:de:df:29:7e:99:0a:f3:89:1b:31:ad:b4:dd:
42:93:c6:62:70:c5:21:48:5d:14:3a:39:9b:41:2f:55:fe:59:
d1:88:64:5a:32:82:75:fe:34:15:ef:2c:70:a4:79:7b:bb:fe:
e0:75:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:27 2025 by rpki-client