Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b5f99b30-4603-35ae-ad98-204811afee7d.roa
File: b5f99b30-4603-35ae-ad98-204811afee7d.roa (raw, json)
Hash identifier: jLsxfRNzO/PAyVh3RX83u0RelhTALO1F0Hv44dfbiho=
Subject key identifier: 9D:BE:81:BA:B2:3C:84:30:57:DC:BF:BA:1B:83:75:38:F7:C4:1C:46
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B169866461C744ABA6D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b5f99b30-4603-35ae-ad98-204811afee7d.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 184.20.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:16:98:66:46:1c:74:4a:ba:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=975ea8ce-feea-4249-b226-a6f9b9e39226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:de:0d:b9:59:6b:22:55:b4:e0:80:29:60:
a4:98:69:7a:ef:d6:75:d3:0f:63:ef:03:40:ce:5e:
23:59:19:3d:74:a7:3c:48:e2:77:9a:74:22:fc:6c:
81:c2:03:6f:de:69:7c:2d:94:a2:80:32:72:dd:c5:
14:a1:0a:61:d6:86:6a:cd:09:19:5f:2f:3e:10:c7:
44:01:0f:29:f3:42:5c:3e:09:fe:5b:5e:1a:23:c2:
39:83:98:5b:a9:d6:ea:99:17:83:ad:cd:03:68:b7:
b4:68:58:54:5e:dd:13:2b:12:a4:3f:93:c9:d4:2d:
e1:e8:9a:cf:2d:9c:23:33:ec:54:f7:84:b9:1a:ef:
fd:70:43:69:a2:c3:54:e5:e6:89:cd:46:fe:b0:37:
4a:f6:76:fe:18:3d:52:1e:53:ff:48:aa:ad:4d:47:
be:19:64:7b:5d:a1:6c:e4:9c:09:e7:8c:25:56:44:
bb:b7:14:e0:45:19:0e:e2:f4:0d:75:7e:0b:df:4c:
ee:39:74:55:2b:67:0f:8c:b8:f5:6d:32:25:c2:f1:
63:6e:13:68:d1:3e:0f:fe:31:a0:24:d7:fa:05:f5:
42:c9:7c:80:da:e6:64:8c:1c:ad:bc:e6:e6:cd:f4:
c4:c8:05:35:49:f8:43:6a:ee:a3:a1:14:71:43:7e:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BE:81:BA:B2:3C:84:30:57:DC:BF:BA:1B:83:75:38:F7:C4:1C:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b5f99b30-4603-35ae-ad98-204811afee7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:8b:23:86:30:4f:28:a7:81:11:f4:36:a7:0d:59:4f:d1:39:
7e:45:1c:fe:a3:63:c0:65:95:c1:50:4c:13:82:6b:73:ef:fa:
10:fa:01:a7:78:7e:c8:f6:d6:88:c6:0d:0b:95:8c:12:bf:6c:
f7:a2:d4:2f:19:a6:f5:a4:83:4c:d0:38:2a:46:f8:d8:09:8e:
c1:1f:f5:5f:01:c1:ed:81:75:8d:f2:9c:73:f9:e7:0c:df:27:
cb:23:51:67:26:1f:5b:ea:76:94:61:2d:69:85:c5:5e:74:72:
34:39:49:56:ee:14:8e:33:dc:0b:16:c3:2d:d6:cc:5f:50:28:
61:18:f1:12:41:9a:9b:bf:62:36:65:cf:c4:48:95:7c:ed:ed:
6e:fb:ac:c9:e9:72:d7:a7:45:76:f6:e4:a7:1d:51:7e:b6:82:
3f:56:76:e2:1e:8c:fd:51:b3:ca:dc:25:49:b6:38:ac:1e:22:
a9:c3:88:73:62:53:13:4f:f7:5c:dd:ea:25:e9:8a:87:cf:30:
d9:aa:e2:b2:aa:b9:fa:e7:50:46:65:91:dc:c8:02:fc:1d:7a:
d9:1d:17:4c:db:84:24:b8:61:f7:0e:56:85:49:31:7f:85:dd:
df:17:5f:23:e9:b8:dc:ed:1c:9a:5d:76:cc:b4:65:29:da:0b:
c4:98:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:42:32 2025 by rpki-client