Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2e040eec-70e3-3761-847a-129348c183fe.roa
File: 2e040eec-70e3-3761-847a-129348c183fe.roa (raw, json)
Hash identifier: VEt3yxGCRdWRAQT+RhnJuEU87u0bRueXMyxBYWMEkhA=
Subject key identifier: 23:6D:1F:FA:0F:E5:F8:B0:F0:F6:CC:1E:9F:CB:6E:64:C3:C9:D4:31
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584883E5C69488B773B09BC83D80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2e040eec-70e3-3761-847a-129348c183fe.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 198949
IP address blocks: 163.253.32.0/24 maxlen: 24
163.253.34.0/24 maxlen: 24
2001:468:2610::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c6:94:88:b7:73:b0:9b:c8:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=6e6143d4-6c24-4be3-b950-51d6799c85ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:e7:94:ca:1d:8d:d6:2b:40:2a:32:81:41:
cd:be:a9:83:50:bf:74:53:8c:32:b1:dd:ab:ef:8b:
2c:9a:49:30:bd:74:30:69:70:66:73:f5:8e:d0:e0:
e9:0c:1d:65:5e:5a:0f:84:17:7d:b2:ca:55:01:73:
5b:35:3b:85:70:5a:12:1f:58:1d:22:af:39:75:05:
ec:af:0f:56:42:4d:12:c6:a3:ab:80:a1:92:a0:d7:
8d:62:e4:a3:47:26:fe:29:29:77:ae:89:44:4f:f3:
a4:63:1b:3b:1b:9b:2c:5c:59:9b:fc:af:b4:95:cc:
ea:e7:91:d0:53:14:fa:a9:03:96:5c:cb:7a:3b:72:
43:da:4d:46:92:30:00:42:85:5f:ae:b6:45:56:5b:
42:59:3c:6b:38:d9:c9:87:59:86:d5:32:7b:db:da:
d0:bf:70:71:9e:77:01:0a:e9:7e:56:d2:7b:ca:73:
45:86:5f:b3:c6:a7:d3:1c:1b:0a:a2:82:2f:3f:f8:
a1:c9:1b:b4:21:f7:9b:2d:1b:48:93:17:76:5b:fd:
31:05:87:e5:19:42:9b:ce:65:5c:89:45:0c:b5:1c:
dd:eb:a4:d8:d8:21:de:4e:7c:95:e9:5d:3d:6b:31:
3a:72:7a:75:2a:e9:d9:92:be:fd:12:d3:57:84:83:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6D:1F:FA:0F:E5:F8:B0:F0:F6:CC:1E:9F:CB:6E:64:C3:C9:D4:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2e040eec-70e3-3761-847a-129348c183fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.32.0/24
163.253.34.0/24
IPv6:
2001:468:2610::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:71:c5:c1:76:b3:cd:99:e1:23:ea:8f:ba:f5:03:be:f1:32:
5c:38:84:c9:ce:6b:3e:10:d9:4f:61:31:3e:8b:df:33:b8:2a:
0e:90:16:67:c2:45:b8:c2:2c:aa:d6:53:2c:ce:82:f0:86:da:
a5:45:1e:66:0b:5f:31:1f:2a:48:db:89:c2:48:00:8b:77:7d:
39:2a:58:57:68:fb:cb:f5:71:ad:ae:83:7b:29:5b:73:74:94:
c0:f7:e7:4d:67:71:b0:e2:99:b6:a5:f4:51:9b:78:87:7d:f4:
94:cd:89:b5:13:27:8c:51:79:c8:89:78:f4:96:78:1b:e4:b2:
39:f6:68:a9:9c:5c:d1:e9:d7:05:98:f5:64:22:a7:c5:08:10:
e8:52:b4:b6:51:c9:83:75:05:3d:39:5b:43:4c:60:f8:db:02:
60:d4:89:e4:c9:30:fe:1a:e7:23:30:28:60:f6:57:bf:26:b3:
22:8c:1c:e5:15:33:38:4b:2a:8f:14:4e:39:6e:3b:2a:f1:20:
40:4d:88:6f:40:2f:4d:eb:fe:3b:fd:13:f7:25:14:a2:fa:d5:
20:7f:e7:5a:5f:29:61:51:a4:49:a9:f7:36:57:8d:8d:b0:ad:
16:7b:ee:4a:81:4c:e0:68:42:3e:d9:d6:fc:9a:e2:57:6e:bf:
a9:d6:76:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:33 2025 by rpki-client