Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/ae5b4219-ee8c-3f30-8046-1cba4e11b7b3.roa
File: ae5b4219-ee8c-3f30-8046-1cba4e11b7b3.roa (raw, json)
Hash identifier: eHQieBwxTYw3WCX0I9pjnv1shfAqchrab58tPVPhLgs=
Subject key identifier: F2:3E:00:67:90:FD:34:E0:77:93:86:61:1D:A1:4D:6A:17:FF:C8:C8
Certificate issuer: /CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
Certificate serial: 010D0C9F432858493C0922C4D9B9F39469EA2E40
Authority key identifier: 42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/ae5b4219-ee8c-3f30-8046-1cba4e11b7b3.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 16509
IP address blocks: 203.96.187.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:22:c4:d9:b9:f3:94:69:ea:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=b1f53f17-4978-4ce1-94b4-bf1712736b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:b0:34:34:d2:d2:db:50:c8:e8:6c:35:5d:
0e:84:0c:5d:0f:7c:b4:0a:6d:cd:8d:03:8d:9f:7b:
cd:2d:60:d0:81:28:7e:38:81:f9:b9:a2:db:34:30:
08:ce:78:ff:61:86:82:f9:43:26:42:1f:5b:fd:94:
0f:8e:c5:5c:39:43:a2:28:90:94:24:8b:60:94:cc:
a1:15:30:1b:3c:26:f9:eb:08:a6:ee:02:4f:a3:76:
fa:53:42:75:5e:fc:7a:e5:f4:d0:c5:c4:2c:ce:5e:
66:67:12:e9:a4:16:55:76:a8:30:61:60:13:c6:d8:
c5:f7:be:7c:c4:0f:bc:e3:f5:5c:cb:34:f0:b0:7d:
c3:05:a0:81:2b:8d:ac:16:e1:db:c8:60:06:3b:a1:
80:08:de:20:da:0b:99:2f:21:dd:d8:97:ee:c3:cb:
34:1b:0f:59:c0:46:70:8e:cb:35:d8:e4:08:2f:1b:
cb:f9:9b:3c:ac:f3:77:f2:ce:eb:fc:52:f6:b6:ba:
68:fb:6d:4d:38:94:11:86:1a:bd:88:99:d5:0e:74:
b6:1b:ae:2c:1f:25:26:a7:2b:cb:b1:84:af:97:de:
80:73:c2:39:fb:28:48:67:ed:58:3c:f5:3b:75:0d:
47:57:0d:07:f0:b5:98:92:cf:4d:86:01:bc:14:9f:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:00:67:90:FD:34:E0:77:93:86:61:1D:A1:4D:6A:17:FF:C8:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/ae5b4219-ee8c-3f30-8046-1cba4e11b7b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.crl
X509v3 Authority Key Identifier:
keyid:42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
sbgp-ipAddrBlock: critical
IPv4:
203.96.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:95:94:bb:8b:df:62:58:ba:0e:ec:9d:83:d0:2f:00:c3:01:
f0:bd:57:b3:ba:44:56:79:b7:b4:52:85:1c:d5:6c:f9:e6:c1:
ea:92:70:3a:59:ce:fa:e7:2f:bf:46:51:e6:62:ee:82:8b:1d:
b5:f6:fb:c9:28:3b:37:c6:79:07:bb:6a:37:5a:79:65:10:8a:
e6:ac:92:0b:00:ef:8f:e8:ac:a1:00:2e:fb:b4:71:49:65:0d:
5e:b3:4f:66:f2:f5:bc:37:ec:2c:11:5a:83:df:d9:ae:06:74:
ce:42:e3:81:c1:f2:d5:6b:56:34:3b:77:33:c3:b6:15:c1:df:
aa:f7:0d:a4:a3:60:a5:01:a5:d2:1a:7d:8f:05:02:5a:d2:f8:
4e:97:1e:a2:57:a5:2e:d1:e3:c2:1a:cf:69:21:93:99:15:1c:
36:df:3c:2b:9a:ff:5f:94:c6:e5:cb:79:1a:e2:71:05:74:a4:
93:48:76:8c:28:71:f8:c1:a7:6a:2b:c3:a4:57:2f:1c:77:ef:
d0:34:76:06:26:3d:ff:a9:ea:6a:8e:55:4e:a6:90:a7:ad:aa:
a6:7e:0b:27:1a:aa:78:a7:26:ad:23:bb:ab:4f:0f:13:c2:7d:
cf:32:38:90:e3:dc:7d:67:b4:e2:30:7a:ac:3f:db:ee:66:11:
99:85:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:12 2025 by rpki-client