Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2be22edb-0c49-36cd-9b15-b5e4861a68e4.roa
File: 2be22edb-0c49-36cd-9b15-b5e4861a68e4.roa (raw, json)
Hash identifier: XRMMfmap7rqyihbeYyrDjbkc3/TiQDdOJ5TDjdA9pCg=
Subject key identifier: 72:E2:6F:43:66:E0:67:D2:69:6B:E3:4F:E0:D8:5E:55:12:BD:73:38
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F4328584863CB0B7F48B3104579712410
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2be22edb-0c49-36cd-9b15-b5e4861a68e4.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 198148
IP address blocks: 63.222.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0b:7f:48:b3:10:45:79:71:24:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=5bd11919-026c-4273-a184-65d95438cc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:fe:e9:f2:e9:81:11:33:b3:ff:ab:45:49:
9a:da:0c:bf:b7:c6:66:66:01:5b:75:89:d2:4f:fc:
89:80:64:ac:69:f8:75:8b:19:af:87:69:b8:17:21:
3a:5c:92:b1:f2:ba:a2:33:87:49:e1:d6:19:c5:1f:
0d:41:21:7f:58:a3:1d:2a:b7:9a:c4:17:24:9b:ca:
4a:d7:f2:e1:b3:1f:4f:fc:90:26:b0:bc:16:ed:ef:
0e:fd:b2:31:2c:a5:85:b5:63:72:39:a0:78:0b:8a:
87:ad:be:73:55:cc:1f:a2:91:af:3e:c2:e4:d2:fe:
ae:58:2b:75:a0:e4:66:84:ed:46:09:49:87:5b:68:
4b:b0:e9:71:52:26:3f:f5:ce:61:16:c5:f9:57:f4:
d7:d6:3b:ac:e6:d0:c9:28:19:46:af:25:1c:4c:36:
28:e7:02:40:6b:dc:f9:fe:2c:c3:8a:96:b9:1d:f5:
45:61:33:d3:1b:10:60:73:af:7e:84:9a:d2:00:81:
2f:f8:72:c2:e9:06:6e:91:20:41:d2:e0:48:19:c4:
86:05:68:6a:97:e3:69:96:c8:cf:a1:84:93:d6:6d:
1b:f7:87:8e:3c:82:4b:07:53:4e:54:bc:ff:52:3c:
0c:29:99:21:4d:f1:ab:a5:3f:bf:1b:fc:1e:5a:07:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E2:6F:43:66:E0:67:D2:69:6B:E3:4F:E0:D8:5E:55:12:BD:73:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2be22edb-0c49-36cd-9b15-b5e4861a68e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
63.222.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:0a:1f:28:83:6c:35:be:fe:ef:c2:43:51:48:20:d5:fa:62:
a9:3b:2b:24:25:0d:b4:d0:01:b7:5d:fe:57:c2:52:b3:da:9c:
c2:bb:52:88:ab:de:1e:33:2d:c8:29:22:fe:41:50:94:75:47:
aa:0a:ca:2b:89:1b:32:6d:2e:3b:32:d8:60:21:ab:71:48:95:
2d:a2:27:e5:3f:88:27:72:a8:29:6e:e9:35:d0:9d:26:dc:88:
32:07:1a:91:43:32:ef:fd:43:2b:ae:9f:00:c7:79:58:c6:db:
44:ea:f0:75:db:a4:54:6d:ae:51:47:59:85:22:9a:3a:24:3a:
cf:d9:de:8f:c0:c7:5d:b3:47:17:91:90:63:49:d7:fe:1b:44:
9a:99:b5:0c:72:06:bc:e4:b0:91:29:3c:47:83:74:91:30:46:
70:86:97:c5:d4:ac:a6:3a:58:2a:bf:d1:af:5f:14:3f:84:2c:
9a:8a:43:fa:52:d4:70:45:1f:6d:83:8a:6e:04:ce:06:a5:f0:
88:96:a1:14:f8:fc:81:51:e9:33:da:67:6f:ec:ca:9a:72:9d:
b8:90:4e:23:21:66:11:da:cf:a4:44:84:f1:5b:14:84:f9:15:
fe:47:db:8d:26:e3:18:2b:c9:d8:50:ef:05:83:e8:78:02:3b:
2d:85:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:05 2025 by rpki-client