Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/ec6d447e-59e2-3b17-b57c-e6ab4563e18e.roa
File: ec6d447e-59e2-3b17-b57c-e6ab4563e18e.roa (raw, json)
Hash identifier: EfVYZ+t544i1M/QMziPqj0zmOL1oKXODaD0fwntq0Ag=
Subject key identifier: 29:51:E9:90:D3:69:98:F9:36:5B:DF:1C:BB:2B:6D:69:EE:C7:97:F2
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F432858493C0929B920E1B3FB9D244A40
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/ec6d447e-59e2-3b17-b57c-e6ab4563e18e.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 36231
IP address blocks: 163.123.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:29:b9:20:e1:b3:fb:9d:24:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=81fe59bc-060a-4ecc-a9f7-76e449a1f4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e7:1c:a0:9b:bf:40:40:07:51:e8:d8:95:77:
e5:11:66:be:69:8c:a1:3e:46:af:0d:74:d6:0b:ca:
f0:7b:cf:8b:d0:ff:4e:a5:15:67:5f:22:e3:fb:51:
57:fe:d1:23:9e:c0:6f:5a:3a:70:8b:9c:d2:03:4f:
b9:17:7a:85:fd:db:c6:79:8c:4a:65:13:0a:e3:c3:
95:10:66:a6:e2:30:ae:0b:df:ab:e3:cf:fd:5c:58:
81:26:1e:f1:05:f5:e0:74:23:99:cc:34:d9:62:a5:
1f:f9:62:33:45:32:9b:61:c0:bf:b1:16:25:d4:4f:
9e:55:d4:18:3a:46:33:cc:1a:dd:3f:90:3b:be:5a:
bb:6f:ea:cd:0f:5b:53:02:da:26:fb:f3:6b:07:08:
ce:85:21:0b:26:b8:d5:f9:b8:ca:25:64:30:79:ca:
d9:01:a0:33:a0:64:34:bd:e3:63:f6:84:0e:a2:1a:
e0:b0:a0:11:14:99:00:b7:a0:3b:e7:8d:ee:a7:a5:
77:33:52:43:27:f1:6a:2a:04:ab:65:92:12:3c:09:
bb:5a:0b:35:92:d8:62:1a:28:c2:02:4f:14:86:34:
69:73:d6:23:49:95:91:45:67:c0:d9:d0:29:ab:b0:
38:45:b7:d9:93:18:91:a5:c9:b4:39:7e:0e:80:ca:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:51:E9:90:D3:69:98:F9:36:5B:DF:1C:BB:2B:6D:69:EE:C7:97:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/ec6d447e-59e2-3b17-b57c-e6ab4563e18e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:6a:fb:50:5d:ce:5c:6b:5b:81:a2:13:7d:41:86:53:85:39:
71:41:25:6b:00:ac:e7:e6:b3:93:b0:b8:be:12:93:35:cc:98:
de:a3:b4:23:f8:e8:94:96:b5:37:57:85:e3:1b:fd:e8:f6:e7:
b4:49:3b:74:e3:a0:60:52:26:47:0b:fa:4c:09:d8:ce:d0:75:
6d:9e:95:89:e2:7e:cf:87:f6:63:83:7e:03:c4:6b:e0:f5:eb:
4f:c1:87:44:04:65:b5:f4:83:04:ab:88:54:62:3d:ad:01:38:
e1:62:8d:4b:52:ec:5d:e6:ee:7c:30:c4:20:f7:7d:b6:95:09:
2a:ad:e3:60:3a:3f:51:a9:06:92:32:16:85:8d:dd:f9:0e:80:
27:4e:5b:b0:4e:4e:ff:e6:02:0e:db:dc:d4:af:ec:4b:48:41:
f7:38:bb:8e:4a:5d:27:dc:de:bf:e0:4d:0c:c6:3e:dd:90:3e:
f3:24:a7:48:10:57:14:95:5f:ce:76:57:35:ad:4e:3d:ba:69:
28:a0:4d:2c:2e:83:3b:58:a2:98:85:cf:26:68:ef:13:fa:28:
ae:aa:e5:ce:7e:dd:53:01:79:d1:08:b3:9f:6f:c4:ae:2b:93:
46:a6:46:a9:e2:39:29:a4:aa:4c:6b:70:57:fa:86:c4:6e:95:
74:2f:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:54 2025 by rpki-client