Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa
File: aa20e92c-ef1d-3334-9d2a-c581e247163f.roa (raw, json)
Hash identifier: 5ghIdELjkZB14LRTYmBC3o3jthbd2XUXe76A1mJskJk=
Subject key identifier: 20:04:FA:92:97:48:EA:C7:2B:2A:67:9B:C2:60:9E:17:D2:15:11:EA
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848239548171FEBCD97067EC4C0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 198148
IP address blocks: 63.222.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:48:17:1f:eb:cd:97:06:7e:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=3d73515d-c21c-4c67-bd18-c6184200818c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:98:32:a0:b1:7d:48:17:06:a9:88:8b:72:
99:69:15:94:cf:e5:50:c4:f9:b5:70:a6:e7:35:45:
95:e4:35:3e:f8:12:a9:44:62:d0:5c:d1:84:da:2e:
6d:58:fd:f0:12:d1:d4:92:b1:c3:11:37:49:d5:35:
b0:1c:d8:81:86:b0:20:fa:66:05:cb:68:45:09:6e:
f3:5a:c8:0e:ff:69:b9:df:9f:c6:8d:26:75:26:35:
c1:96:98:e4:5d:ea:d3:ac:15:1f:c5:83:07:d9:28:
56:df:10:47:50:22:e5:ce:90:8b:23:ba:2f:d0:0a:
f0:40:68:47:8f:da:c3:a7:78:e7:94:f9:6c:84:7b:
7b:02:08:8f:3b:b4:09:65:21:8d:46:2e:81:fe:2a:
02:ea:55:9f:af:12:88:06:00:c2:f1:9e:30:52:d6:
d4:75:fd:d7:e7:66:4a:e8:57:d2:ff:28:20:3d:d9:
ad:09:29:e3:47:2d:91:ca:5c:b5:ec:a2:e2:1a:ec:
e4:61:bf:a2:41:ab:5a:14:e0:ce:35:dd:6a:ef:4b:
06:35:a5:44:b0:4d:b9:7e:30:fd:fa:56:62:94:1e:
ee:47:7d:c2:b2:ba:a8:72:9a:6a:e6:f8:ac:4f:42:
cb:9b:44:f1:f4:30:a0:4f:4f:5c:7d:4c:2c:cf:96:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:04:FA:92:97:48:EA:C7:2B:2A:67:9B:C2:60:9E:17:D2:15:11:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
63.222.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:4c:d1:80:32:36:4e:1b:a4:d0:f4:26:25:e8:27:cb:1a:a6:
00:59:af:4c:2e:8d:aa:12:f9:cc:60:c1:50:f9:cf:13:f7:31:
2d:b1:09:db:ee:95:be:b5:18:3e:02:63:48:03:56:77:3e:ad:
3b:79:07:b7:0f:b9:85:93:f1:4d:4e:e8:85:74:fe:66:65:bd:
ba:86:a4:83:1d:dc:0c:71:e6:14:93:7d:e2:31:c4:04:4f:69:
79:70:ae:70:c6:44:05:e9:06:da:60:fa:ec:06:db:94:fd:e0:
39:80:35:07:51:9a:ce:1e:ad:4f:31:72:b5:b6:18:81:a2:b4:
24:3e:40:2b:82:2b:a4:7c:b8:67:65:81:62:86:67:22:d5:e8:
c7:3f:fd:0b:9d:e8:64:ef:63:3f:7e:08:92:03:45:43:f0:d0:
c9:cb:58:db:b5:a2:93:3d:f0:8c:f2:28:aa:c9:a2:35:45:78:
34:2d:d7:62:c3:9c:e7:84:07:19:cd:7c:e2:cf:f2:65:19:a6:
15:92:33:7a:01:ff:41:64:7a:f0:78:da:8b:da:64:8e:b8:ea:
a5:6f:ee:ec:e7:f1:51:97:43:0a:c3:6a:bf:18:b4:cf:95:9f:
38:7c:73:8f:6d:55:a7:ac:87:f8:3e:80:8a:10:3a:18:b5:e5:
43:f5:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:41:31 2025 by rpki-client