Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8829d381-598f-32dc-af1c-60266045a431.roa
File: 8829d381-598f-32dc-af1c-60266045a431.roa (raw, json)
Hash identifier: fNIxxFIr3IBjWrIaknsgPFOVjP6jzo/LqpIMMNchTtA=
Subject key identifier: 2A:F6:27:0E:BE:11:D6:FB:3E:49:37:A1:07:E3:52:BA:52:E8:30:4B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B18F6FC60637C5EFF49A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8829d381-598f-32dc-af1c-60266045a431.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 184.21.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:18:f6:fc:60:63:7c:5e:ff:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=81839f5b-1e48-4821-b2d1-b6a57fa3cd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:1c:53:2e:f4:80:fc:7d:6d:c0:cd:59:4a:
0b:ef:57:ce:ec:6c:06:1a:ad:86:53:c2:76:05:42:
34:16:54:fb:a4:a8:3d:aa:fc:73:47:49:a9:11:23:
18:8a:05:9a:7e:e4:81:ee:e7:93:77:ea:5c:c2:70:
62:8d:3a:61:48:49:83:a6:89:e0:63:0e:21:fa:22:
19:dd:e0:62:3c:fe:40:5a:5a:1d:20:ce:bc:50:a2:
bc:f3:ea:78:0c:1d:c4:13:15:11:4c:9b:eb:c6:87:
e8:ed:06:cf:b2:e2:ac:8e:45:20:72:50:67:5a:c2:
f6:35:11:92:68:13:1d:1e:19:79:55:e9:04:70:0f:
bf:82:88:30:a0:41:e3:56:72:bd:a9:6c:be:34:99:
ce:11:e3:98:a1:2a:3e:2f:99:82:43:e5:2d:a5:48:
47:90:1b:9b:8d:bf:56:4a:0f:bd:54:13:59:8d:e8:
a4:80:9a:c2:00:00:21:58:ff:09:22:8d:3a:07:35:
65:c0:f0:c1:a3:a3:e0:83:b2:4a:9d:ed:30:0c:63:
0d:a9:e9:70:31:22:7c:fa:c4:f7:0c:df:9d:ab:41:
46:d2:63:93:f0:ad:86:f8:41:5f:3a:2d:05:f6:43:
60:2c:99:4f:19:ca:c5:ef:d8:b9:7e:4b:ee:5c:66:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F6:27:0E:BE:11:D6:FB:3E:49:37:A1:07:E3:52:BA:52:E8:30:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8829d381-598f-32dc-af1c-60266045a431.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:6b:a7:5d:ed:e3:91:92:c6:fc:8a:21:d9:ec:18:53:b5:8e:
d4:3a:31:ed:7f:87:7e:08:d3:db:5f:df:16:f4:18:84:6e:24:
17:92:28:a9:10:03:1a:d5:cd:55:93:0d:5d:08:8d:5c:7e:c5:
6c:68:db:4f:d8:ff:68:4a:be:71:9f:98:3f:52:ed:0f:da:57:
d2:bf:79:78:e8:e1:4b:c3:c9:c2:d2:fc:60:d6:db:91:ad:17:
44:1a:c0:19:98:d7:00:2c:8d:c9:03:71:51:52:9b:7b:81:c5:
9b:cb:ac:eb:2d:c9:3c:4d:df:e4:b1:ec:6e:4e:b9:c2:40:d9:
83:f2:6e:b8:30:ac:da:62:79:25:df:7a:88:29:4e:93:4f:5a:
99:85:a7:0e:ab:b1:f0:18:c2:d1:c0:3f:b8:b8:2b:04:3c:c8:
fd:43:95:41:86:56:2f:71:09:20:ff:05:0f:be:f6:47:05:21:
85:2f:98:84:57:8a:46:8a:e2:da:4c:d7:75:97:6c:3a:82:a7:
b9:b5:dc:14:24:b8:19:ba:d2:b1:8a:80:1c:af:bb:9e:b6:76:
3e:5b:30:cd:3d:82:b7:15:2b:8f:e7:43:4c:08:c3:d3:43:06:
bf:de:e3:10:56:e5:da:01:68:c5:f6:fc:2f:18:80:aa:ef:9a:
7a:49:bf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:36 2025 by rpki-client