Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/78e20c46-e0de-3b67-a054-84ea3ba8c128.roa
File: 78e20c46-e0de-3b67-a054-84ea3ba8c128.roa (raw, json)
Hash identifier: rvzfY3jgQuzJKemV4mzvhNoQFRrdoQji+cMNNR1LuU8=
Subject key identifier: 9B:F0:C7:BC:F2:F0:D1:6D:3E:67:8F:F8:A0:BA:EE:D6:02:48:38:7C
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848159FEF3866CA801F923A7244
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/78e20c46-e0de-3b67-a054-84ea3ba8c128.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 29802
IP address blocks: 63.223.89.0/24 maxlen: 24
63.223.90.0/24 maxlen: 24
63.223.106.0/24 maxlen: 24
63.223.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ef:38:66:ca:80:1f:92:3a:72:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=303baaaf-8913-4fd9-b247-a33edd652f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4c:a7:cd:88:3c:dd:f6:1e:4e:6e:23:67:a3:
ab:61:5c:e7:47:47:d3:6f:c9:ec:55:50:5e:52:60:
ba:c1:33:70:6d:b9:a9:6a:38:05:59:ef:3d:56:96:
c0:54:c2:41:86:e6:44:8a:c0:6e:39:57:ef:eb:15:
c9:9c:e5:79:87:2f:1a:71:82:a6:54:6c:07:bf:68:
1e:49:c6:48:f9:df:33:e2:2a:39:b2:44:33:ec:85:
7b:f7:17:80:27:21:d1:87:fd:6b:81:3f:25:f9:97:
af:6f:62:81:e2:c2:66:39:35:d6:7a:d5:9e:3c:9f:
29:52:89:dd:54:9a:55:7b:54:c5:ab:54:1e:14:8d:
e9:f3:02:06:a9:66:9d:15:23:d3:b9:af:c7:de:80:
8e:88:1e:74:f4:86:81:02:43:13:e5:6d:ce:57:1e:
09:dc:f4:8e:fe:bf:6c:af:fd:34:e8:44:a7:00:7d:
c6:b5:f1:6f:42:10:a4:93:73:ff:e7:fd:22:7d:2f:
b1:da:b5:70:86:fb:19:cd:fa:bd:60:38:40:e4:c6:
c3:7e:11:33:b7:46:b6:73:d1:60:ea:28:30:07:de:
4a:d6:f6:57:da:76:3c:23:d0:89:79:86:88:34:ce:
ef:87:bc:a2:44:07:b3:18:31:2e:67:da:c8:1c:07:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F0:C7:BC:F2:F0:D1:6D:3E:67:8F:F8:A0:BA:EE:D6:02:48:38:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/78e20c46-e0de-3b67-a054-84ea3ba8c128.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
63.223.89.0-63.223.90.255
63.223.106.0/24
63.223.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a5:0c:c1:c3:d8:80:b8:e6:e1:43:fd:7f:f5:67:fe:51:84:
ab:24:87:02:3d:87:f8:88:7a:2a:b2:03:f5:cd:5f:48:41:8c:
8a:9b:33:34:32:ab:eb:22:5d:2b:16:ad:15:0b:86:c7:0f:28:
e8:fb:df:93:d6:ea:93:73:af:b7:70:c2:f5:60:8b:e6:5a:05:
65:0a:f7:98:76:49:1b:64:c2:3d:7d:12:b3:15:e1:10:01:23:
52:da:e8:36:a0:e1:5c:93:db:a9:00:24:be:49:71:8c:64:b8:
6f:77:56:3d:6b:16:66:3c:b5:e5:40:98:22:d8:4a:c3:c2:b2:
3d:15:d2:36:f5:e2:51:67:9a:98:a2:96:74:29:2f:b4:10:e3:
56:cf:22:17:5e:95:40:69:28:ca:7c:45:96:15:ad:67:35:13:
8b:3e:ff:09:df:d3:c7:c1:76:68:3d:4e:37:f2:b9:56:3b:51:
37:96:55:99:bc:42:f1:70:97:42:29:a1:30:ca:e1:af:cb:59:
2e:e1:71:0f:53:f0:30:f7:1b:42:6d:0b:3c:e9:bd:88:f8:16:
95:10:63:6c:85:c2:be:e4:c9:9b:e0:93:42:bc:32:a8:e8:33:
fc:0a:8d:29:30:9c:64:a3:97:05:9c:de:0c:f9:61:10:7b:91:
a8:a7:52:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:21:42 2025 by rpki-client