Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa
File: d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa (raw, json)
Hash identifier: IcAzpsAcdDM1J9JoJeBQcMdii3zeVDoXixQQcA2Rf18=
Subject key identifier: 60:5E:AF:47:59:AA:A9:59:DF:8A:AF:E0:82:A6:17:B5:32:3A:5F:AD
Certificate issuer: /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial: 010D0C9F432858490B4C22D5BC166A2344F54640
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 31898
IP address blocks: 162.253.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:22:d5:bc:16:6a:23:44:f5:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=e73a2829-3723-40aa-81cb-18e377618ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:25:89:6c:0a:88:68:d9:16:0c:d3:f9:40:
7e:ab:9a:f3:9a:00:6d:8d:54:bf:dc:ab:05:73:fa:
8c:44:a4:96:c5:e0:2b:d8:56:15:e5:98:f5:81:78:
2a:76:14:29:99:68:2e:aa:d3:ff:5f:5e:57:2e:21:
9f:20:f6:bc:84:b3:fe:65:08:9c:80:dd:cd:80:33:
22:ec:10:2d:dd:f7:85:5a:d7:2a:fd:26:d3:17:2f:
b0:63:22:5d:0b:4d:4a:ad:9a:2e:00:23:8e:ba:39:
1e:59:27:a6:8f:9a:0b:19:4e:48:fe:bc:f5:17:24:
6b:10:88:18:05:15:c0:02:c1:fb:0c:96:33:c5:64:
ad:ae:a6:eb:a9:bd:39:54:4e:76:a6:e6:7c:f0:2f:
a8:7c:33:24:0c:05:ff:08:f2:1f:dc:d3:e9:7d:45:
66:6b:41:f9:c4:34:0e:ca:77:25:32:32:28:5e:14:
4d:bd:41:4a:ea:a9:a5:b4:31:3e:db:b8:e3:cb:51:
45:55:7e:c5:c7:2e:2f:3f:fa:76:5d:a2:44:da:e6:
32:ec:11:ec:79:95:be:72:6e:8c:a1:13:cf:2d:70:
74:30:cf:45:8b:8a:c5:87:43:54:77:3c:0a:e9:be:
58:5f:56:23:de:d9:4a:38:42:5d:e3:0d:4e:49:b1:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:AF:47:59:AA:A9:59:DF:8A:AF:E0:82:A6:17:B5:32:3A:5F:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
X509v3 Authority Key Identifier:
keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
162.253.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:cd:26:39:e5:85:9c:3c:84:07:14:1a:96:53:e4:ca:43:fe:
f4:d9:05:58:cf:57:d6:f4:99:87:25:26:05:1f:75:ad:a1:0f:
b3:48:d6:24:21:04:73:2e:0d:43:cb:84:22:15:78:d6:7d:72:
f2:f6:cd:77:45:6d:3b:a4:7c:45:5a:63:b3:60:51:8d:55:4a:
77:81:1f:e3:97:a9:cc:88:3d:43:6b:11:fb:98:2d:1c:da:77:
0f:bc:0f:01:86:ff:cc:2a:e7:03:ab:3b:44:36:23:1c:35:cb:
5c:a5:58:de:7b:16:b9:2a:57:2b:77:de:01:16:ba:26:a4:99:
a4:a4:b6:7f:2e:4f:0b:90:5c:c7:a7:27:98:59:5e:8c:c4:e6:
e7:de:75:df:18:95:40:06:35:5c:51:d6:d8:73:2e:4f:00:0e:
90:a5:28:ba:63:6a:e3:15:61:9e:b0:3d:bb:4b:de:49:bb:74:
54:53:1a:70:29:5c:06:ab:bf:41:33:39:b1:bd:84:d0:c4:20:
43:dc:ba:dd:cd:61:33:8d:44:82:fb:27:a8:bf:d2:62:db:2e:
ed:ba:9a:ac:3a:27:2d:59:de:c3:4b:09:cb:82:7e:71:74:d9:
78:06:61:e3:60:15:22:39:ab:92:17:3c:e6:10:8a:e5:af:85:
a1:a4:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:32 2025 by rpki-client