Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c2535aae-8dcb-38fa-a211-c345a2d57257.roa
File: c2535aae-8dcb-38fa-a211-c345a2d57257.roa (raw, json)
Hash identifier: tQ1MRSMBTaWr0XG0/NlOcBYXBE30MtsqygAUtsJnfr4=
Subject key identifier: F3:E9:D2:C4:C2:12:26:1F:B7:22:7D:F7:F9:AE:36:60:5F:67:78:75
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848159FEE7AAB11CF288E9ABD58
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c2535aae-8dcb-38fa-a211-c345a2d57257.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 24413
IP address blocks: 63.217.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ee:7a:ab:11:cf:28:8e:9a:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=17d11259-9913-4f38-8e2d-98d383e72893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:2f:24:c9:2c:b9:55:b3:2c:78:5f:55:df:
39:51:74:40:c8:98:a8:49:b2:0b:38:f6:67:d4:dd:
14:0e:a4:bf:5f:35:08:db:b1:c9:4e:ed:08:a6:07:
42:05:91:6f:6e:80:01:74:68:8b:83:59:dd:77:ba:
e6:18:e2:5f:25:99:6f:78:1b:8c:b1:f6:bd:f2:5e:
c7:48:8f:e6:a3:a5:15:8e:a7:3f:f5:49:6e:97:35:
d1:87:d2:c8:62:ce:d0:21:f4:eb:1c:4e:a5:9a:f8:
24:a3:7e:3e:65:3e:9b:35:a6:ed:cf:d8:3b:af:24:
39:3a:06:28:4e:4f:1c:51:e2:95:c6:42:8f:99:2e:
7b:ca:29:72:10:7a:c5:a0:38:fe:11:ba:41:9e:6c:
2e:80:49:ba:eb:8d:db:e6:04:86:ef:b6:14:35:d0:
8e:a0:c3:66:ff:6e:41:32:5e:d9:dd:aa:f8:c2:68:
8e:af:41:70:fa:cf:21:a2:da:16:df:b8:4c:e6:01:
cc:cb:98:8d:7d:60:8c:ad:cc:49:e7:b4:76:df:9d:
e5:db:b3:72:c0:12:b3:00:87:00:5b:1e:d9:8b:a0:
17:2f:0b:da:62:84:04:0b:b1:55:d3:99:2e:ad:a4:
74:fc:bd:94:2c:77:cd:84:ee:c0:ab:6a:97:5b:e1:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E9:D2:C4:C2:12:26:1F:B7:22:7D:F7:F9:AE:36:60:5F:67:78:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c2535aae-8dcb-38fa-a211-c345a2d57257.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
63.217.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:b0:c9:7a:44:36:6a:f7:40:49:cd:e0:75:b9:3e:1b:23:72:
31:bf:cd:35:47:cd:32:22:6e:00:52:e8:c3:d5:64:47:7d:31:
d7:34:54:02:3d:25:4b:d6:75:4c:4c:7d:46:95:ed:0e:6a:b5:
3f:21:3d:f5:4f:f0:06:82:68:34:71:07:80:6a:82:a4:80:5f:
7c:f9:ee:2c:e7:09:24:3c:6c:54:4f:7f:75:e5:2d:9f:15:d5:
14:59:6c:e6:72:42:eb:0c:f8:4c:78:99:e6:16:83:17:6f:26:
83:fa:85:08:34:ea:9d:b8:2d:3f:5b:2a:13:f5:8f:22:06:97:
fe:6e:ef:82:67:97:48:14:dd:39:8a:2a:81:a8:88:3a:47:84:
ab:b1:19:57:ca:38:43:a1:c5:12:c2:63:73:f8:76:0f:ab:ba:
84:fb:f3:3f:95:1b:1c:03:ae:9f:a9:f2:50:99:50:0f:5e:db:
e0:da:f4:b9:a8:9a:e4:46:92:a6:e6:f8:b4:ec:f7:2b:c1:7d:
2f:9b:a9:74:aa:74:31:ea:b8:fa:47:c1:9c:97:8c:1c:4f:25:
19:ed:1b:9d:fa:23:2f:48:b7:4f:ee:61:a0:5c:5d:bd:bb:0b:
70:59:1a:68:b2:66:40:d3:d3:0c:83:7e:a1:67:ce:d6:10:7c:
b0:40:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:02:14 2025 by rpki-client