Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dc4bb194-d171-353d-8f29-814e5bba5989.roa
File: dc4bb194-d171-353d-8f29-814e5bba5989.roa (raw, json)
Hash identifier: XOjoChTrTplYGmejTSVSLJwL3a4W8c4cAmni0JMGAMg=
Subject key identifier: E3:93:03:B8:0E:81:06:87:57:8E:41:23:9A:34:04:60:8C:92:AF:64
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F43285848BFEBA1E7A86E2B602E28C9A0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dc4bb194-d171-353d-8f29-814e5bba5989.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 16509
IP address blocks: 163.253.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a1:e7:a8:6e:2b:60:2e:28:c9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=edcb00a5-619b-4008-8178-021fcbccbcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:f8:bf:e9:d5:92:9e:a1:18:3e:36:c5:b0:
d0:8a:02:87:cc:cf:c1:45:a6:d8:d5:d7:4b:1d:28:
58:1f:6f:c0:f8:e8:a6:10:34:7c:24:d7:57:79:9b:
f1:e1:14:50:96:9b:fb:62:0f:55:cf:c7:38:ce:f3:
fc:ef:77:ec:e6:34:30:f2:20:ce:9d:86:0c:3d:c6:
50:45:28:f5:de:49:43:60:bf:92:d7:fa:14:f6:ef:
5f:b7:6c:4c:0d:ab:ca:91:c7:b4:98:6b:e3:f9:56:
35:2d:a8:1b:25:ff:09:e9:96:23:a8:e9:a6:e4:01:
c4:cc:28:79:2e:c8:15:fe:e5:ed:7d:9b:d3:a1:99:
2f:49:73:4f:68:75:df:5f:bf:1c:5f:30:26:fa:e9:
c1:8d:96:81:56:f3:37:2f:c6:cd:b6:bb:ac:e2:16:
63:85:8d:95:15:df:00:01:3b:34:c0:a4:ac:e8:3e:
97:7f:54:7c:e5:30:bd:49:d1:64:a8:f0:79:75:09:
b8:93:52:cd:5e:49:c0:96:04:d3:30:98:a7:6c:09:
24:9d:05:11:40:21:9f:ed:7f:2e:a3:5a:7b:10:97:
f4:4f:b6:85:cf:1b:24:6d:04:59:dd:37:a1:6d:d3:
c8:ad:28:2a:a8:97:ba:f1:bd:4c:79:bb:4a:53:bf:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:03:B8:0E:81:06:87:57:8E:41:23:9A:34:04:60:8C:92:AF:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dc4bb194-d171-353d-8f29-814e5bba5989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:88:db:00:f7:d3:b4:fb:f6:ec:db:f2:fe:44:3c:73:00:ba:
b1:70:91:f3:fb:e3:6d:eb:8b:23:11:74:75:4b:d7:ef:f9:6c:
fd:92:c1:16:a9:6c:b2:bc:5d:c9:e6:e0:ca:2e:00:4f:e5:98:
f1:b4:75:92:39:e1:b4:6d:da:ee:0e:28:ca:a4:bb:91:dc:1e:
31:f0:8e:7f:25:48:66:ec:e3:87:3e:37:5d:ca:cc:40:ab:61:
b1:5e:ed:f7:87:80:0f:25:47:04:29:c1:da:1a:9d:5c:a8:46:
65:de:6e:75:cf:4a:fe:9c:87:6a:33:2a:65:f3:74:1b:58:54:
95:a6:5b:12:8e:8f:3b:f5:fc:de:e5:33:e9:9a:19:72:3b:1b:
a1:33:1a:28:af:32:3a:1f:9d:ef:db:29:0f:54:fd:91:ea:04:
f1:96:11:65:b9:98:e1:6d:9d:f9:18:2c:ca:0d:ab:02:40:fd:
54:d3:75:28:b2:23:31:e1:b9:f0:4b:f5:6c:87:37:d0:42:d4:
be:91:d6:02:7e:ad:e7:2f:aa:0e:ca:9c:64:ce:46:28:e1:d8:
a3:36:59:cd:47:38:7d:cd:d6:25:9b:ce:2c:f4:52:e9:e9:c6:
41:d6:d0:2a:9e:61:34:a7:7c:2f:82:f0:8f:bd:65:24:42:c9:
5e:b1:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:58 2025 by rpki-client