Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa
File: d2f2610a-a62c-3b03-99f9-138214533fcd.roa (raw, json)
Hash identifier: kjYBKXLAwXU5FjusstJaBOoimy+fxSNo7lzuHgDXhmw=
Subject key identifier: 12:26:6F:FA:8C:24:48:53:CD:14:4B:73:18:62:42:87:22:41:5D:26
Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial: 010D0C9F43285848EC969A7F8A8D0AEF6CB00DC0
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 397666
IP address blocks: 167.253.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:9a:7f:8a:8d:0a:ef:6c:b0:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=d12ec64b-b0c8-4d34-8cf1-57056317730e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:f4:7c:68:a8:48:a0:a5:50:c7:95:7a:31:
56:88:35:9f:08:d7:45:dd:12:1d:cd:4c:80:57:31:
fd:09:66:bd:1f:e3:2a:e9:44:ab:7a:77:f4:cd:e9:
15:f8:1d:91:d9:81:68:b5:d2:eb:c9:30:97:99:ca:
2f:0a:4e:06:b8:09:4e:7f:8d:12:92:e1:3a:26:47:
10:69:21:8b:70:7d:58:45:6e:d6:89:95:82:ca:40:
77:2f:a0:bf:b9:37:6e:f9:b4:d4:b2:92:5e:31:91:
3c:a0:fb:85:35:6f:5e:37:76:29:9c:74:fc:7c:7d:
cc:2b:1c:10:ba:53:87:50:b3:74:b9:3c:9c:63:c8:
a3:7e:4b:ee:fe:ad:16:ae:3a:8a:73:9a:56:80:11:
8c:7d:db:dc:11:bf:3a:2d:c7:e9:73:9c:76:6c:81:
14:7d:80:83:06:fd:37:26:24:29:5d:7c:df:99:42:
8c:2a:a9:4f:86:a8:24:11:e4:9a:1c:98:2e:1e:1b:
14:e3:0c:0b:58:4c:97:7e:af:18:96:bd:98:29:a9:
e3:2e:3b:02:af:b9:16:4b:c5:08:87:ca:6c:61:5d:
3b:b2:15:98:a1:62:f8:dc:c8:ab:5b:38:ca:e8:40:
13:5b:95:8d:60:f5:85:11:a5:e5:3c:eb:e5:1f:f7:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:26:6F:FA:8C:24:48:53:CD:14:4B:73:18:62:42:87:22:41:5D:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
X509v3 Authority Key Identifier:
keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:f4:f8:22:71:d5:f5:e4:d7:d7:fb:a6:4a:b1:98:a8:69:bb:
de:2a:cb:58:13:c3:3d:ed:c9:05:38:e1:8a:b9:db:f3:3a:e8:
1e:de:82:18:d1:68:12:7f:54:bb:24:37:e9:69:b5:be:db:12:
77:0e:d2:2f:4d:9f:f5:89:00:5b:d1:c1:3f:43:94:2a:0b:e6:
28:66:e9:a0:52:74:e7:4f:a7:42:4d:0e:98:4d:5e:a7:65:cb:
74:19:8f:41:12:f3:cb:a5:aa:21:7a:5e:fa:f9:88:e2:12:c6:
2f:71:f5:73:2c:49:fc:47:68:28:c0:f2:b1:f8:68:dd:59:c3:
30:9e:c6:98:39:87:a7:90:8a:04:1c:66:6c:64:36:6b:76:8d:
c4:08:f6:ce:97:6f:d8:85:4d:a5:a2:ca:80:84:08:79:b4:5f:
21:dc:4c:cb:32:29:cb:9b:29:f6:00:43:be:d0:36:6a:b6:25:
02:33:c2:a0:d4:56:fb:54:98:65:d5:8e:61:91:70:8e:2e:82:
40:02:07:a5:ba:48:ac:29:fb:98:2d:f4:c8:af:d4:db:1e:1f:
bc:c2:85:d6:b1:88:c6:63:1a:1f:83:64:99:fb:a6:83:b0:3f:
8a:6c:e4:4e:87:e1:4c:6e:13:02:1e:01:d1:e6:08:1d:7e:59:
a5:36:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:47 2025 by rpki-client