Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa
File: 3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa (raw, json)
Hash identifier: SJCpsNOOfKJ9qSSkISbsKchdbiSKDbDSjxUQ0XSxBco=
Subject key identifier: FC:BC:80:89:F4:26:75:82:59:75:ED:9D:60:6A:93:74:11:26:31:3F
Certificate issuer: /CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
Certificate serial: 010D0C9F43285849350EA71F44C61C57593DA680
Authority key identifier: 8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 8849
IP address blocks: 162.247.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a7:1f:44:c6:1c:57:59:3d:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=81a164cf-9dd0-44fb-849c-ae66bbe54e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:28:a0:bc:3f:5e:65:f5:6a:84:69:6f:27:68:
02:be:64:7c:58:05:72:19:f2:97:f4:2a:aa:10:46:
01:ec:8c:06:96:bf:9b:a2:67:62:93:a9:2e:32:d3:
fa:f1:57:0f:5c:df:8e:be:e6:69:61:37:75:a2:1b:
9a:ac:81:ff:0a:49:15:b5:4a:3a:77:ad:93:c6:30:
3b:f9:7b:79:ad:78:aa:a7:f0:5d:63:7e:5e:7c:c7:
bb:f3:07:e9:20:c2:f3:48:ab:81:77:c9:72:cd:39:
3a:8e:71:35:d8:a8:65:1d:5e:5c:0e:5f:f3:98:4f:
37:a2:7e:d4:9c:25:f3:b2:bd:82:11:8e:f2:cc:23:
fb:99:57:63:60:d5:1d:e6:a4:da:2f:65:51:53:52:
4f:e6:bb:62:12:78:ac:81:3d:4e:61:a3:70:1e:bc:
fa:b6:8f:01:eb:3d:bf:c5:ee:22:ba:b0:8a:f7:df:
94:81:82:58:b6:cb:e4:c6:13:e9:07:f1:3c:c9:b0:
eb:fc:80:08:70:d4:78:6e:e5:cc:8b:64:b2:16:36:
42:6a:ef:58:88:5b:ec:58:8f:cd:b5:82:4f:07:46:
0a:8f:85:e7:3b:a2:29:3b:76:99:5f:91:23:19:2a:
a9:52:99:a7:2e:d4:34:0c:6b:cb:23:08:ad:23:8c:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BC:80:89:F4:26:75:82:59:75:ED:9D:60:6A:93:74:11:26:31:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl
X509v3 Authority Key Identifier:
keyid:8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
sbgp-ipAddrBlock: critical
IPv4:
162.247.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:2c:62:28:4e:01:8e:6c:e4:c2:19:78:23:52:8e:d0:7c:b2:
10:af:18:21:8f:6c:9d:e7:6a:8d:6a:e6:ee:e3:53:ba:01:3c:
a7:49:92:4a:3c:ae:3a:db:c1:36:c0:74:b6:44:b6:87:9f:cb:
ed:75:71:ff:94:5a:45:8c:a8:67:38:84:fc:b4:2f:c8:d2:65:
4f:8d:78:6c:51:d6:c9:ba:33:fc:42:c0:64:47:bc:c7:fa:c6:
0a:d7:f5:0a:a8:a7:18:9b:8a:6d:31:cd:c9:37:a7:3e:cd:82:
e1:f7:e1:21:bb:bf:fe:4d:d3:73:ba:07:ff:8e:de:57:83:be:
9f:38:65:4e:d5:04:6b:e6:7a:0d:25:01:91:88:47:ad:34:b2:
a3:85:80:fa:d1:02:8a:91:d3:34:ab:3e:e2:1d:05:c3:1a:1e:
05:ed:98:dd:d5:fb:76:94:3f:b0:3b:20:ce:75:ea:2f:68:4e:
e3:67:dd:e4:c4:54:e6:e8:4c:35:10:98:9a:d5:7b:12:cb:de:
e2:ab:9f:87:6d:5c:53:c7:7f:b2:63:a7:22:ee:fc:54:ed:79:
a8:1c:6e:90:53:f9:90:71:65:db:94:85:0c:cc:50:b5:73:38:
04:74:3e:2b:f3:6b:2f:6c:f0:9e:80:1d:e9:66:a1:ec:af:f8:
f7:e2:c8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:00 2025 by rpki-client