Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/20692d06-b0b3-38da-82a3-338113d0bc26.roa
File: 20692d06-b0b3-38da-82a3-338113d0bc26.roa (raw, json)
Hash identifier: Vljwp8TwT8up0sFxI/MYNUGX9zp/p/2COMbuMNTCETs=
Subject key identifier: D7:2E:1E:30:66:8C:60:C3:05:3B:22:44:EE:1E:53:C8:9A:20:C2:91
Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial: 010D0C9F4328584843B00C13F01C67210C08AC00
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/20692d06-b0b3-38da-82a3-338113d0bc26.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 20454
IP address blocks: 125.253.88.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:0c:13:f0:1c:67:21:0c:08:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=3846687f-0523-43a5-adaf-607b607cc485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9a:0b:ee:79:3d:53:ae:53:f2:f1:76:34:d5:
1e:7d:bd:fc:3e:cc:3b:d3:e1:29:bf:fe:bd:d7:eb:
73:c1:3f:ed:73:22:f9:12:84:de:d9:09:6b:f5:62:
e3:87:97:a3:7b:96:0f:2c:41:81:19:06:39:8f:1c:
a2:7c:b3:24:af:e8:29:6f:d8:95:5b:60:85:e8:24:
9a:d5:e6:54:2d:d4:1e:84:2e:b9:e7:b4:f9:e6:64:
ac:b0:c2:84:6e:7a:5f:aa:49:99:95:4a:79:ff:4a:
3c:ad:a6:fa:86:2c:f2:e7:68:9d:da:6e:36:ba:6a:
5b:35:d8:c3:6f:41:72:1d:5e:ab:a4:e0:b5:1d:f9:
a0:91:cb:6e:42:73:7f:d3:ed:a8:6b:58:d6:9f:ac:
01:bf:6a:6c:83:43:e0:5c:47:d4:23:e7:b4:a5:80:
d9:7e:95:6c:41:22:16:42:bc:20:5e:c6:b2:be:0e:
5d:4a:3f:d5:9f:4e:15:1c:ee:7e:03:65:6d:92:51:
ac:84:c2:a3:76:3c:70:a2:91:19:13:27:e3:f2:ad:
7d:c5:ea:3f:03:23:1e:3e:5a:29:eb:ec:18:12:fc:
41:09:fa:8e:40:fd:af:ba:00:6e:b7:39:42:8b:d7:
2d:aa:72:40:c6:44:88:86:ec:e5:b4:61:8b:01:16:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2E:1E:30:66:8C:60:C3:05:3B:22:44:EE:1E:53:C8:9A:20:C2:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/20692d06-b0b3-38da-82a3-338113d0bc26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
X509v3 Authority Key Identifier:
keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
sbgp-ipAddrBlock: critical
IPv4:
125.253.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:e8:25:87:d3:4e:3c:9e:6c:4a:c7:b3:6d:e8:a6:73:a1:49:
b6:cb:99:6e:57:61:84:68:55:53:55:5d:b6:49:e2:5d:c2:c9:
ca:cc:df:97:46:6a:b8:29:d9:72:e4:de:13:b9:4c:c8:ce:57:
3d:71:37:ea:7e:4a:8b:0e:5f:08:51:eb:cb:ec:a5:ce:31:ee:
af:37:7b:15:f0:62:9e:d8:da:21:5d:70:f0:f7:ae:a4:9f:0e:
a1:6f:bd:71:55:3b:68:e6:a4:78:b7:6e:ac:28:52:33:3c:5f:
07:41:02:ad:2f:4b:c1:64:b1:e6:7e:d5:93:19:81:fa:9c:8b:
7a:e3:46:51:bd:3d:74:9b:67:8a:fe:01:0c:73:44:93:05:4f:
31:fb:e0:56:52:74:2d:27:7e:d3:9c:24:e7:78:d5:04:b5:df:
cf:25:72:ce:99:b1:5a:da:35:30:0b:eb:6b:f3:77:ad:34:0f:
b4:a7:cb:2c:6d:a6:17:95:88:af:45:c3:26:81:a4:d8:4d:5a:
d5:61:55:70:10:d3:42:96:ce:c4:40:cc:ff:a3:df:fb:a5:cd:
7f:ad:a7:26:fd:3d:14:c5:28:b2:8b:07:09:ef:4d:0c:e6:36:
4a:06:66:bd:66:0b:10:ce:df:aa:af:d6:62:ff:6a:70:97:45:
7b:b4:81:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:28:08 2025 by rpki-client