Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d22ae9b2-4c0a-32c9-9aeb-5954c8ed2937.roa
File: d22ae9b2-4c0a-32c9-9aeb-5954c8ed2937.roa (raw, json)
Hash identifier: 8lD4PMmuGOSDm7LyQCWXkPf8iaBbQwfJWACXMmQvUQU=
Subject key identifier: C8:02:0A:AD:6C:86:2F:2C:72:8F:A0:16:D2:B3:75:75:F8:68:5B:87
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A83007AEC0FD1F8B0D740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d22ae9b2-4c0a-32c9-9aeb-5954c8ed2937.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 184.20.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:83:00:7a:ec:0f:d1:f8:b0:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=cd49e935-891c-46fc-b945-19f954fa079c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:1c:dc:0f:87:b1:65:98:79:33:fc:20:b4:
65:02:12:52:f3:c4:41:be:18:55:3c:f3:ba:47:c8:
49:fd:96:9b:d0:60:5b:85:fb:f1:1a:65:fd:b5:8a:
ea:5a:5d:ee:da:15:38:85:d1:04:9c:7d:24:c0:9c:
2e:47:0a:c0:7e:ac:32:c3:e8:16:86:9f:6a:cf:76:
9e:49:ab:f8:e7:d0:8c:51:7f:dd:85:d8:df:11:9b:
35:1c:2f:46:52:26:ce:e3:19:ed:b7:3a:5d:f3:46:
35:c9:60:de:5c:f3:07:17:a0:94:93:38:fb:a4:c6:
b5:22:2f:67:30:85:58:8d:ed:ba:f5:0b:eb:89:8e:
77:db:67:de:20:f1:ec:8d:b7:90:07:9c:59:03:04:
93:9e:12:1f:dc:c3:a7:8c:d8:d0:10:a0:bf:85:88:
29:bc:0d:79:09:a9:f1:45:b3:6c:ad:c0:1b:b1:97:
91:b1:da:be:e2:16:35:87:ad:4a:44:6e:e8:e5:ad:
3b:65:8c:3d:8d:3c:d5:12:db:82:1f:cd:d3:d6:3e:
ca:dd:0a:52:fa:86:d6:4c:a8:63:18:ac:e4:7a:57:
9e:25:5b:89:b7:01:f5:a8:9c:e4:09:8c:fe:1c:d7:
5f:de:d5:2a:49:42:99:18:fa:9f:7d:8e:7a:00:be:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:02:0A:AD:6C:86:2F:2C:72:8F:A0:16:D2:B3:75:75:F8:68:5B:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d22ae9b2-4c0a-32c9-9aeb-5954c8ed2937.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:17:9b:92:c8:f1:ee:d2:54:13:82:63:d5:a5:e1:2e:89:f9:
4c:17:dc:1c:0c:ae:9f:a3:3c:16:db:94:97:1b:9e:6c:c2:a1:
7c:99:63:a6:c1:d6:2f:58:00:2a:93:01:47:b2:5b:26:e7:ee:
eb:13:d6:a0:a5:d0:dd:dc:1a:14:6e:1e:2f:7b:7a:98:32:9f:
9a:b5:81:5c:f5:07:74:65:0d:71:37:68:1f:a2:e8:03:8e:50:
2e:d2:c4:07:7d:c9:5f:f1:df:9b:36:dd:10:1b:d2:16:14:c5:
42:7f:45:11:ae:1f:52:c1:dc:42:63:0b:0c:f2:00:11:f1:39:
c7:5b:54:5b:22:a8:ae:19:0b:b8:89:1c:b9:89:51:da:de:3c:
d3:0b:28:a1:ad:89:1f:b5:0b:96:f2:64:69:56:24:70:12:d6:
81:dc:f9:f4:7e:25:59:ca:90:4d:1c:65:bc:1c:b5:79:a1:90:
cf:d0:d2:d8:9c:df:88:cb:46:e5:fc:92:a5:f9:8b:f8:b0:ff:
4f:a1:57:3b:d4:0e:6b:a3:5c:89:33:03:2d:7e:fa:d8:9f:ea:
a5:0c:a0:36:68:09:d2:b6:51:b5:ad:d9:c2:bd:d9:e5:35:36:
ea:5b:89:3f:35:82:4a:4b:95:67:5e:6f:d3:f0:66:1f:c9:fe:
43:f1:cd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:25:53 2025 by rpki-client