Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa
File: 46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa (raw, json)
Hash identifier: tFYKgPzIjv1sgcp4nLfm4AGYQVPsUfEn/Juv3hMkbK4=
Subject key identifier: 27:9E:EF:A5:48:2D:CB:E6:C3:01:3B:13:A3:84:97:C6:65:55:5D:64
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858489340AD9765B4C49AF60F7E00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 17984
IP address blocks: 63.222.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ad:97:65:b4:c4:9a:f6:0f:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=91ac8fca-c544-45d3-b202-1ed4b3d9e8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:25:0c:88:22:d6:c6:68:1c:b5:f2:75:17:43:
26:3e:61:f3:c0:1f:48:90:b7:d9:7f:a0:ff:9b:65:
ba:69:43:d5:d0:af:3f:e9:44:50:f3:5d:38:cd:7a:
0c:ff:e8:c3:bf:dd:96:f3:c7:f9:90:1f:f2:42:f4:
fe:c4:41:ab:5e:54:22:9a:f4:9b:ae:46:f3:28:16:
5f:3d:27:e7:c0:c0:01:0d:26:43:e0:83:c7:ce:db:
14:32:4d:35:bb:ae:96:c6:7a:a0:cc:f0:0d:68:17:
aa:72:9d:ef:2c:99:e2:47:f3:02:86:29:98:0d:83:
db:71:af:1a:8a:7c:e9:b9:e4:07:9b:e8:6f:e7:e2:
ff:eb:7e:bc:69:b0:98:e9:48:65:5a:17:4c:08:9d:
cf:dd:3c:97:57:e2:3b:fa:21:8f:50:24:4b:89:bd:
bd:00:80:bc:ea:56:b9:8c:ef:f3:af:f6:dd:21:e3:
a8:80:8f:4f:36:b9:ca:03:42:2d:89:3d:4e:04:e4:
53:c3:e3:4b:d0:37:00:f0:0a:3b:f8:1d:ba:48:10:
ec:b7:74:f7:7e:88:5d:0e:38:20:fa:be:f7:d4:0a:
4c:24:a2:db:27:64:e0:2c:8f:0a:60:1f:d6:b0:e4:
8c:c6:38:11:36:f6:a4:08:33:50:9e:21:c1:7f:49:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9E:EF:A5:48:2D:CB:E6:C3:01:3B:13:A3:84:97:C6:65:55:5D:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
63.222.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:7a:3d:e8:8e:2a:d3:b2:0a:60:fb:af:ef:4d:05:8c:1d:de:
73:47:5a:9b:ca:93:3b:44:da:25:b5:a2:dd:a0:eb:93:a9:c6:
f1:4c:fc:3b:64:92:9c:c7:b0:19:fc:0c:f1:ee:9e:ea:e3:da:
d0:1a:3a:17:3d:55:50:69:01:b1:ea:e7:c4:50:3d:5d:b7:f3:
55:ba:53:50:d4:19:5b:90:61:12:6f:5c:a6:d6:a2:03:bf:d3:
2b:90:ec:ab:6b:c9:d2:d9:3b:78:26:a1:d6:1c:59:92:5d:20:
60:5e:e1:8d:25:7d:c7:3f:82:56:31:53:11:c9:e2:68:fa:23:
b5:e2:b0:9d:91:0d:64:0b:57:86:8f:22:9f:28:ab:98:0e:14:
43:1e:66:bb:81:b0:69:cf:b0:42:64:07:93:46:63:c0:ca:e9:
55:1c:aa:18:9e:7a:4b:75:64:e9:95:1d:2b:f1:9f:b4:01:df:
d1:e9:4d:37:8e:9f:4e:83:60:0a:93:17:f5:3f:7d:7f:45:ec:
66:d4:05:f8:01:46:29:a8:8c:92:ac:d8:b8:bf:56:c3:28:8b:
39:09:b3:6e:8c:40:4c:d6:d2:81:8b:de:b8:a9:64:17:a9:8b:
8f:9a:26:a5:e3:18:49:4e:15:fd:70:82:33:12:ea:04:69:57:
b6:2c:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:17:36 2025 by rpki-client