Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa
File: ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa (raw, json)
Hash identifier: UH7IQYbmDghDUgbeoGQkSSPq5IdLOS4+CKIjcR+FPoQ=
Subject key identifier: 4F:CB:25:47:5F:52:23:9A:B2:04:B1:8B:8B:A2:87:73:83:98:84:22
Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial: 010D0C9F43285848F0529BB70C1ABA7AC5B73880
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa
Signing time: Wed 19 Feb 2025 22:07:20 +0000
ROA not before: Wed 19 Feb 2025 22:07:20 +0000
ROA not after: Tue 20 May 2025 21:07:20 +0000
asID: 19437
IP address blocks: 125.253.68.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:52:9b:b7:0c:1a:ba:7a:c5:b7:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Validity
Not Before: Feb 19 22:07:20 2025 GMT
Not After : May 20 21:07:20 2025 GMT
Subject: CN=4c1f6b21-84b3-4e50-82bc-c8795b8765b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:5b:10:8e:da:f7:8b:f6:ed:a1:15:bd:de:
77:2c:3c:c4:f8:88:6f:6b:53:2e:27:c4:d9:13:76:
73:53:02:de:5e:3f:7c:aa:8a:2f:2b:88:c6:15:df:
6a:42:22:6c:35:bc:66:7a:42:b0:5c:ca:09:73:5b:
7f:b9:13:93:82:08:48:33:d6:49:ff:06:ba:f5:6e:
ad:94:53:53:f8:9a:d6:ca:2a:e6:5b:58:60:67:b4:
c4:51:2b:2a:36:4d:e3:5e:fd:ff:92:f7:d9:f7:ad:
e6:d8:a1:cf:19:cd:82:a7:16:21:51:d3:8d:34:a8:
ce:65:39:e2:bb:11:ff:de:42:7a:51:21:22:08:18:
6a:3b:84:97:dc:c5:7c:24:3a:51:5e:4a:cf:df:d5:
03:f3:51:5e:cd:23:fe:46:1d:93:18:c4:6d:19:97:
5e:b9:87:2f:b5:8e:00:02:d5:ce:0e:da:59:56:9b:
fd:d5:a4:67:5f:ad:4c:8d:eb:ba:5d:1a:60:46:9b:
e2:cd:bd:45:c5:e0:64:59:81:2e:1b:ad:68:ab:ee:
ae:68:79:1b:a8:ba:fa:c1:a3:c2:70:d4:e4:bc:56:
23:69:18:07:eb:74:65:b5:0a:92:8d:c0:fe:fd:ed:
14:fb:23:9f:c9:df:39:ba:6d:3f:25:99:c4:f9:ed:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:25:47:5F:52:23:9A:B2:04:B1:8B:8B:A2:87:73:83:98:84:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
X509v3 Authority Key Identifier:
keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
sbgp-ipAddrBlock: critical
IPv4:
125.253.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:c5:4c:a7:93:29:3b:4a:fb:6b:4c:b3:77:7c:1c:99:a9:96:
ab:74:42:26:b3:fd:f5:d6:7b:c1:90:73:c1:ff:b9:7e:1e:34:
dc:3d:4f:39:d5:cc:54:0a:93:44:f6:22:c2:a4:7b:05:87:66:
f9:e8:04:9f:f1:6d:35:a5:97:be:46:77:3f:ed:52:13:80:9b:
a6:bc:f0:12:53:05:0f:ee:3d:34:33:f6:e0:d6:99:35:37:65:
12:c5:b1:a9:c5:16:41:11:6e:db:16:89:cc:4c:cb:c0:ba:31:
4e:bb:39:44:cb:80:67:2a:15:97:a0:d1:cb:6d:db:dc:9e:a7:
5d:ff:91:8c:f8:03:e1:dd:42:21:16:c1:4e:6f:09:ff:f7:49:
3d:a9:f7:71:c1:6f:a2:c2:55:7f:6b:2a:d3:f8:29:da:17:f2:
93:01:13:7d:73:8e:61:4c:b1:22:a4:7d:09:5e:15:5f:14:96:
d3:01:91:6c:9b:fc:d6:03:4f:76:9e:2b:e5:3a:ab:26:f0:49:
d5:10:e0:78:d6:b2:0f:9a:f0:6f:ac:09:72:73:0a:8e:ba:65:
ca:4d:1d:0c:cf:ce:d5:4a:cf:a7:fe:5d:f5:16:38:12:f1:56:
ab:f3:d6:a4:6c:d1:ce:88:d4:ae:be:5d:d0:c6:6f:75:4e:51:
53:c8:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:18 2025 by rpki-client