Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa
File: fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa (raw, json)
Hash identifier: KjzKQqgTlRcEpmboTSMtVzCFtIE5EUkQ0LG6bG8kPFc=
Subject key identifier: E4:3D:90:24:2C:F9:AB:92:C7:7B:17:61:CC:09:A2:54:A2:48:EB:CF
Certificate issuer: /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial: 010D0C9F4328584819CFCF7FCEA94AEF674C2490
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 162.253.3.0/24 maxlen: 24
162.253.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:cf:7f:ce:a9:4a:ef:67:4c:24:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=8b3ea063-febe-40fa-9c32-6b566b09f583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a9:31:ba:dd:f7:19:4e:fd:c0:65:20:16:cc:
ae:13:89:8f:a3:c5:1f:f6:05:d0:83:44:c1:26:77:
9f:b9:b4:21:1e:64:15:4d:4e:2a:17:ab:14:ff:3b:
21:19:03:ed:19:a4:87:d1:3f:87:19:de:8d:93:2f:
c6:0a:9d:a5:24:f6:57:36:4e:fd:18:78:1f:ac:18:
b2:49:d6:d7:d3:f6:00:ab:5e:36:85:84:e1:94:45:
e1:50:39:48:5f:83:5c:74:2c:94:b6:08:36:37:df:
c6:d4:88:6c:50:15:65:86:19:7f:e1:3f:60:22:6d:
5a:e6:cc:fb:cf:aa:7b:c9:d6:fc:38:52:ca:e5:2a:
53:b7:36:20:26:08:a4:7a:f8:8f:21:63:a7:28:ac:
7c:f7:60:2e:48:d4:e1:31:5b:10:ad:8b:f1:16:92:
53:69:da:8b:98:49:4e:49:67:5f:3f:11:a8:80:87:
e6:16:d4:94:74:1c:ff:24:ec:d4:29:3c:ba:a3:2b:
37:c8:00:38:7b:61:b6:c4:1f:eb:b2:e4:78:a1:41:
e9:55:3e:21:47:9c:32:11:7f:d1:48:70:ab:f1:ae:
97:f2:b5:c2:49:36:28:55:db:37:46:59:83:3e:11:
18:53:78:e6:93:28:0d:43:25:7a:33:c2:c0:24:9b:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:90:24:2C:F9:AB:92:C7:7B:17:61:CC:09:A2:54:A2:48:EB:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
X509v3 Authority Key Identifier:
keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
sbgp-ipAddrBlock: critical
IPv4:
162.253.3.0-162.253.4.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:a8:e0:9d:cd:aa:80:bf:ce:f3:c8:88:59:0c:24:5a:c6:cf:
32:f7:41:cf:d7:87:7f:f9:8b:f4:a8:c1:ac:db:c4:0e:4c:a7:
4a:df:d7:ab:33:3f:29:4e:16:8b:ba:0b:78:01:2a:64:29:0a:
48:0c:d1:22:c7:fd:d8:c9:04:05:bf:4b:34:5a:b3:e1:97:f2:
de:36:09:2b:9c:33:8f:5f:72:6c:81:ee:d6:f9:5c:00:d4:4d:
75:0d:ee:c1:c5:10:59:43:85:ae:84:d6:17:21:ca:97:f4:f7:
a7:9d:36:9c:9e:0a:41:0f:f6:ff:4a:f0:fb:6b:51:d6:61:ca:
73:3f:59:e2:54:61:b0:f2:4a:9a:6e:3a:1d:a0:d0:01:cd:4d:
0f:c7:37:43:24:6c:50:56:90:92:09:74:18:72:95:59:16:4a:
f3:b6:e6:1c:d7:55:ab:a6:c4:d3:24:5f:85:1d:d2:59:ae:b3:
66:3a:d8:d8:53:a8:fc:69:97:7a:64:37:1f:5a:38:f6:1a:72:
c9:06:d1:07:cb:96:e4:19:51:46:f4:56:72:e6:a3:50:00:be:
a5:cf:89:cf:89:3a:a4:b8:60:3f:45:c4:fe:9d:4c:11:79:e8:
67:fc:2f:1e:de:ee:90:89:30:80:2d:43:f2:59:54:82:8b:61:
d8:11:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:28 2025 by rpki-client