Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd455689-082e-392c-88ad-5a693a5b24fc.roa
File: dd455689-082e-392c-88ad-5a693a5b24fc.roa (raw, json)
Hash identifier: mXoXDMGWL8cC71slv1SY+POpKQNlbDYSO11TkZKhf5Q=
Subject key identifier: F4:1D:F0:CD:07:5F:18:3E:A6:F8:63:18:14:08:D3:87:FC:08:57:18
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FD106E97C4AA8DD585CF7920
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd455689-082e-392c-88ad-5a693a5b24fc.roa
Signing time: Mon 24 Feb 2025 11:39:30 +0000
ROA not before: Mon 24 Feb 2025 11:39:30 +0000
ROA not after: Sun 25 May 2025 10:39:30 +0000
asID: 30036
IP address blocks: 63.142.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:10:6e:97:c4:aa:8d:d5:85:cf:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 24 11:39:30 2025 GMT
Not After : May 25 10:39:30 2025 GMT
Subject: CN=a30080db-0e8b-4b41-8517-3841f072b98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:66:4b:f5:38:42:95:2f:83:a9:1f:5c:30:
ec:65:f1:51:c4:e8:84:53:5f:d7:30:3d:72:0f:fa:
bd:6f:68:c9:dc:95:f3:97:2b:8d:ed:dd:58:eb:b2:
4b:ba:59:29:7d:69:f5:b9:d5:7e:79:6e:df:e8:20:
19:02:4a:c8:86:b4:82:67:ef:80:a5:85:53:3a:37:
eb:17:7f:d1:cb:43:31:8f:ef:41:c6:b7:27:9c:f4:
3b:84:72:cd:72:9b:11:99:ee:51:5c:95:4e:77:89:
0f:00:1f:56:d9:83:76:83:01:48:38:fe:8d:20:6c:
cb:8f:74:ed:aa:cd:7c:d4:30:d7:3e:a5:60:65:4e:
8f:6d:ad:e5:bf:a4:b9:60:36:f2:ac:21:88:0a:45:
95:fe:e5:c8:2e:4c:c4:9f:c8:e7:b0:fd:c4:0d:95:
ed:0d:e6:45:b9:8a:08:98:aa:6f:a0:ba:6f:9c:96:
eb:cf:d7:db:a3:2f:85:48:bf:82:23:94:0f:b1:fb:
e5:5c:38:0e:b0:8f:67:39:16:7e:fe:16:ca:0f:6f:
f1:3c:ed:0a:61:64:2c:e1:bc:9b:53:a9:79:91:f7:
b0:38:72:99:b1:cf:24:19:d9:27:1a:0c:22:19:bf:
63:66:e4:c9:ff:64:43:8f:00:12:10:f9:be:2e:a5:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:F0:CD:07:5F:18:3E:A6:F8:63:18:14:08:D3:87:FC:08:57:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd455689-082e-392c-88ad-5a693a5b24fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
63.142.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:5d:06:a2:c6:0a:eb:02:71:81:2c:07:f6:32:25:a1:00:08:
0f:e5:ca:53:11:c4:dd:98:99:aa:f6:b3:64:5d:db:a9:c2:58:
df:b0:62:1d:9c:00:54:31:79:95:a5:53:8a:26:a0:23:40:c1:
f5:31:54:16:80:a9:c6:60:80:91:d1:d1:35:d7:4f:d6:7d:35:
fc:18:c2:44:93:c2:5e:22:5b:19:10:87:4e:d1:e6:8d:09:28:
08:d8:4e:a8:a5:71:fb:1f:d9:9e:83:d4:aa:2f:f4:df:17:f1:
ed:98:eb:3e:07:33:37:11:2d:41:af:bd:5e:91:d1:0e:13:dd:
ac:8f:ef:43:bd:bd:64:b5:41:8a:2e:cf:9f:35:6f:f0:35:91:
49:de:0f:8b:9e:95:60:b7:b2:88:c8:7c:3c:e6:a6:1a:9f:94:
f2:08:db:ae:2d:df:45:a6:c9:c4:0c:e2:b2:a5:8c:e5:23:e5:
f2:c2:80:b6:19:3b:cf:e7:84:a9:73:fe:ad:6d:7c:09:d0:42:
a2:4a:25:41:b2:c9:db:c7:3a:9c:7c:44:6f:f5:28:be:e4:49:
72:88:13:e4:d6:e1:be:5a:59:34:3e:b9:7b:eb:6e:f9:44:3d:
5f:d6:19:74:43:b9:c2:a4:49:db:0e:d1:d6:79:51:fa:6c:3b:
9f:2f:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:21:13 2025 by rpki-client