Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b20849d-7deb-343b-a92f-51032655f0a5.roa
File: 2b20849d-7deb-343b-a92f-51032655f0a5.roa (raw, json)
Hash identifier: sg2ZiV5m3H2ADxgBUK3tqRVk1gh5SpGlrYKcSRPQoIo=
Subject key identifier: 15:64:61:26:0D:8B:8D:F4:DE:6D:76:D3:CC:E4:89:36:15:86:9B:CA
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A2C35E95D0D90C38A9230
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b20849d-7deb-343b-a92f-51032655f0a5.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 40306
IP address blocks: 184.20.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:2c:35:e9:5d:0d:90:c3:8a:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=5d364a87-b92e-431f-904b-b190a0770da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2f:1c:7f:b6:86:f8:ea:c1:c0:32:97:48:50:
c7:7e:f9:0c:b2:a1:84:d9:16:b1:1d:3f:7d:bf:4c:
d0:db:d9:70:ea:31:ed:03:70:d1:ad:74:10:a1:38:
70:33:ae:54:6f:60:53:13:db:ad:07:0f:4d:73:fe:
13:df:30:68:2c:55:12:b1:9f:23:a5:0d:c7:79:06:
c0:d6:06:32:af:53:ec:9e:7b:ca:a2:4d:9b:ac:0c:
f6:cf:e5:e9:e1:21:a5:18:9a:46:27:d1:64:0d:e7:
63:23:20:c9:95:1d:a4:2c:18:d4:f7:08:a9:96:32:
dc:94:5d:ba:35:06:7a:6e:ed:b2:9a:d6:04:07:09:
6a:7e:fb:b0:1b:52:74:31:8a:f5:90:1c:f2:3f:7a:
70:5a:8e:c6:f1:3d:74:07:ea:f6:42:f4:bf:25:dd:
9f:80:26:05:30:46:04:88:8c:b8:62:87:a4:5a:ca:
8f:fd:58:cc:cd:dd:d3:84:1c:3f:26:c2:5c:dd:9e:
b9:d8:00:25:87:3c:cc:5c:0e:93:e6:7e:96:41:ef:
22:7b:22:12:ea:15:bd:66:c5:05:0e:58:61:27:2b:
e6:ef:3b:56:e2:c3:f5:71:46:5e:1d:a8:c6:35:fa:
33:4d:65:e3:39:7c:27:dd:e5:fa:b6:d5:99:a0:b3:
0e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:61:26:0D:8B:8D:F4:DE:6D:76:D3:CC:E4:89:36:15:86:9B:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b20849d-7deb-343b-a92f-51032655f0a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:ac:64:28:46:a5:e5:27:c7:39:45:0b:c1:0d:0a:30:92:d1:
74:5b:e3:a0:f8:7d:9e:bb:d4:ea:2b:3f:b3:1c:26:90:1c:ea:
2f:70:b4:d3:bb:72:3f:3f:a5:40:be:5c:70:98:64:55:e4:32:
e0:8e:67:37:ee:51:b8:f9:7c:d5:f6:a5:d0:90:19:df:c2:30:
17:32:96:3e:24:f0:3f:34:70:5a:12:50:01:3b:6e:4d:6b:bb:
2e:38:cc:be:17:30:8d:8a:2d:cf:9e:14:a8:f4:6a:14:22:a6:
09:b8:3f:ae:4b:1e:75:1a:6d:9c:a6:31:5c:4c:32:29:89:9c:
81:65:e3:9f:cb:58:44:97:1c:81:18:c5:5a:d2:2d:f1:b1:ad:
24:a0:73:4f:2b:ad:74:ba:19:7d:15:e1:f4:43:41:4c:bc:2f:
d8:bd:43:00:da:10:6c:04:49:8b:f2:9e:48:cb:5b:42:2a:3a:
fa:63:28:1e:30:33:75:32:06:05:af:33:63:b9:e2:b5:3d:6f:
d3:3c:da:69:b8:37:2f:72:ce:d2:6b:f8:7c:bc:11:8d:8c:f7:
c5:e1:0b:58:c7:8b:1e:cb:6d:52:cd:ba:c2:6b:23:b9:49:c8:
79:8a:9a:8f:d6:96:9c:9f:22:17:06:4b:c1:a2:b4:c4:69:ed:
23:22:74:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:43 2025 by rpki-client