Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8e454b2-5355-35d0-9384-fd8fc43d82a4.roa
File: c8e454b2-5355-35d0-9384-fd8fc43d82a4.roa (raw, json)
Hash identifier: /f/Ks86qBS7Kk6hRU/sDX/yAa+athMp1BxIu8WROMcg=
Subject key identifier: 52:B6:D0:58:0E:78:28:C1:31:DB:5F:61:8B:CE:49:33:67:59:23:0A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A8690DB8773E8D273FF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8e454b2-5355-35d0-9384-fd8fc43d82a4.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 184.21.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:86:90:db:87:73:e8:d2:73:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=bb735a31-ac00-4899-849f-88618c89baa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:7f:ac:33:27:47:67:9f:ae:54:66:eb:9e:
41:e6:d6:a5:ff:4d:3f:8b:fd:2b:fc:c6:49:d9:d5:
48:bd:10:0d:52:77:89:87:72:3a:6a:2e:d7:be:f6:
be:1c:d9:26:31:bf:e4:71:dd:f0:87:ce:d5:2c:a2:
b8:14:b7:91:97:74:93:fb:52:87:84:ac:a3:95:c7:
c8:f7:c6:52:98:d9:77:f1:bb:47:dc:0f:6b:e9:6d:
69:74:0b:38:68:d7:0d:4c:b9:8e:8e:0d:c9:43:f7:
ff:bb:eb:d9:90:0d:7e:d5:ef:5f:5a:f3:cc:24:5e:
04:6c:de:44:bd:e7:73:32:3d:01:e1:4b:ed:bd:4c:
2f:a7:93:cc:75:c6:b9:11:7d:c5:6f:83:ca:9c:6f:
37:3d:ad:7f:b0:93:1e:f0:90:48:ba:e1:4d:10:c4:
16:08:f1:9e:fd:c2:5a:b1:93:72:44:c9:c9:ca:f5:
4b:3c:30:ae:e6:cd:1a:9e:4a:3c:08:d4:76:75:4c:
c1:21:25:a1:8c:81:ac:51:7d:bb:6a:9f:43:ae:dd:
51:52:06:98:69:97:65:cf:05:c6:ea:ae:b6:ac:35:
36:d9:fd:fc:43:54:0a:06:3b:fe:23:54:59:9e:6a:
39:92:5e:14:8a:78:7c:a6:b3:9c:ca:26:68:7b:2f:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B6:D0:58:0E:78:28:C1:31:DB:5F:61:8B:CE:49:33:67:59:23:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8e454b2-5355-35d0-9384-fd8fc43d82a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:44:b2:47:04:86:5b:b8:74:ba:91:63:4c:ca:1c:52:1c:b2:
83:bf:3e:9e:70:11:e5:d5:10:1a:70:9b:9f:b9:98:d6:47:64:
24:15:30:81:96:52:a5:87:f0:3b:6d:22:6b:fb:1e:59:05:b5:
d5:01:2b:ad:8a:f2:4c:69:35:7b:d3:67:3d:6c:f4:33:98:ed:
0c:09:59:94:e6:35:c1:2b:1d:fd:ae:3b:eb:4c:8a:fa:5b:d6:
32:6e:e2:92:a0:15:3f:83:d6:9e:ee:f0:b8:7b:09:16:aa:74:
68:61:74:77:bc:f3:fb:ce:9c:64:c1:8d:e7:19:6f:80:bd:06:
b9:a2:f1:5f:ec:46:46:45:69:a5:a7:19:fb:80:68:84:df:92:
36:8c:b0:c4:48:76:f1:74:30:34:0b:89:28:a3:ab:3e:29:26:
9e:74:cc:c6:35:ad:cf:4b:98:7c:e9:32:7c:0a:e2:8a:60:a2:
6d:ef:09:25:b3:8b:cf:1c:b7:a5:f1:f0:ff:91:bb:8e:35:31:
a8:87:64:f6:6e:6f:df:1d:13:ba:8f:50:59:d2:33:d7:c0:30:
8f:8d:5b:4c:a5:14:3b:05:84:1a:99:f1:4e:29:02:8f:b7:76:
20:37:1a:4b:b9:51:f7:b7:2f:60:a2:48:da:ef:14:39:d2:62:
6f:18:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:39 2025 by rpki-client