Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa
File: 8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa (raw, json)
Hash identifier: VB33iITHzrg3JgneQQO+Sf+KGKg+U9CFkQF2B/NoBns=
Subject key identifier: D0:27:DA:03:86:61:EB:58:15:DD:DB:E6:0A:A7:5A:C9:33:CF:FA:5E
Certificate issuer: /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial: 010D0C9F43285848F9269A911E83CDA237202540
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 31898
IP address blocks: 162.253.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:9a:91:1e:83:cd:a2:37:20:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=8b863e50-50b4-4293-9645-71aecc7458b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:c6:54:0e:29:0d:03:e4:97:94:c6:0c:e2:
9b:62:fc:4b:51:ff:33:50:09:0c:db:b5:11:78:31:
ff:3d:64:4b:c1:49:3e:b0:9f:16:59:20:95:7d:e4:
7e:36:ff:77:d3:f0:42:ea:9d:ea:92:d3:65:2b:3f:
ef:0c:61:19:f5:b5:72:7d:f5:fe:a8:66:6d:d7:0b:
fe:75:66:d7:50:eb:f8:36:a1:84:71:bb:e8:43:48:
32:3d:d3:9e:55:10:04:e2:a9:50:c3:6b:31:cf:18:
45:f5:0b:24:ac:65:2f:6f:a7:f7:b2:83:1d:a1:4a:
fb:13:32:9f:84:40:40:1a:8a:09:05:24:b1:f0:87:
84:7d:04:6d:50:9b:fb:83:9d:54:b2:de:39:e0:9b:
9e:49:2c:fd:7f:27:c4:79:61:fa:63:2f:d0:1f:a5:
90:bd:9d:cd:7b:45:30:91:b3:5f:b9:87:d3:6c:f5:
cf:70:11:02:39:56:d6:9b:d3:a1:75:da:cc:0c:44:
12:83:37:39:f7:69:cc:af:16:b8:7b:a7:82:93:d6:
bf:c2:bf:4f:c9:be:69:0a:2e:a4:62:17:ac:18:1b:
49:a6:45:47:c7:ac:2d:5a:c1:a8:6d:04:10:82:3f:
32:7a:8f:12:08:51:e7:b7:80:86:0b:7c:37:a8:7b:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:27:DA:03:86:61:EB:58:15:DD:DB:E6:0A:A7:5A:C9:33:CF:FA:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
X509v3 Authority Key Identifier:
keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
162.253.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:14:9d:bd:2f:de:66:f4:29:c5:44:1d:df:45:eb:1e:63:16:
3e:f5:80:ac:5c:55:8e:ff:cf:3e:8e:2e:a0:8a:fc:0a:07:d8:
d7:5c:84:75:ed:fa:6a:2c:07:a6:04:92:fb:19:5e:fe:28:46:
43:e2:7e:7d:3a:c4:af:d6:be:45:53:b1:85:00:e1:3d:aa:dc:
09:b9:36:0a:f1:4f:14:01:f4:7f:00:78:b2:22:38:48:3a:34:
f2:eb:a0:ba:04:32:a4:58:0e:f0:11:23:43:3a:d2:1a:20:11:
54:d8:6b:a3:45:2a:36:7f:6c:df:8b:d0:2b:ac:ec:45:df:9f:
d9:24:5a:eb:16:42:90:b0:42:f9:37:64:31:b0:32:97:3f:c1:
69:b6:6d:c0:97:dc:63:d7:72:4d:03:bc:34:71:e9:03:3b:85:
e3:bc:c8:7d:71:73:f5:29:f7:97:76:2b:e9:36:63:a5:66:79:
a5:6d:5a:a2:87:5b:9b:ae:1b:be:91:7e:86:cf:96:af:19:2b:
c6:d0:5f:a3:c8:33:a3:bc:57:69:f2:df:2e:d5:20:33:49:0a:
7b:91:98:13:e4:6d:22:ac:4a:94:05:7c:74:ae:9e:80:a2:3c:
2e:61:80:15:5c:4a:e2:4d:b4:0a:c8:a0:75:8c:d8:51:47:f9:
f7:ba:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:39:51 2025 by rpki-client