Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa
File: dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa (raw, json)
Hash identifier: yJVYw0uSB6tiw71+ItjkDzyWECkYASSkHbSREmekm1s=
Subject key identifier: 64:01:FC:AD:78:CD:6D:F8:77:7E:86:3A:87:02:A2:D5:BA:B1:21:A3
Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial: 010D0C9F43285848573ACEE901ED60A1BCCA0460
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 398210
IP address blocks: 168.220.184.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:ce:e9:01:ed:60:a1:bc:ca:04:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=d8c5d27a-396b-4368-9452-139023a282f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f7:10:71:32:96:07:c4:56:ff:15:d8:30:1a:
2f:01:d1:82:f1:ae:ab:bd:e8:91:6f:6d:34:5e:be:
e2:c2:0f:e5:5f:bf:dd:f3:d3:82:2b:58:53:af:46:
63:2f:55:ee:35:41:5f:48:11:b7:bb:74:54:3c:97:
d1:c5:48:05:13:d1:99:d9:33:9b:10:c7:83:53:0f:
bd:35:1c:84:f2:08:51:49:3d:50:94:d0:80:4c:79:
45:53:d5:ae:b3:f6:19:db:6a:c1:02:d5:55:8f:51:
7d:b7:93:90:50:68:e5:d4:bd:96:bc:58:cb:b6:bc:
fc:15:6e:22:a7:1d:36:a9:95:87:be:48:08:34:94:
12:fa:be:7b:2f:5a:7b:cc:80:2d:27:08:fb:88:9d:
7a:5c:26:44:0d:ca:dd:c5:ec:dc:2e:a5:02:b6:aa:
97:77:5d:22:7d:82:c7:07:a5:bd:f1:18:d6:45:f3:
26:9b:e7:30:19:38:0e:2e:90:38:6f:3b:13:0d:4b:
f1:fd:c7:71:bc:6d:e9:8e:9f:b9:64:28:25:48:fa:
a3:79:44:09:87:a3:dd:a0:19:1c:32:5c:d9:25:c7:
66:b3:3a:8c:78:37:03:4f:6c:e9:20:04:50:60:e5:
bc:ed:f0:31:52:e8:0c:d3:93:f2:3b:df:df:66:e3:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:FC:AD:78:CD:6D:F8:77:7E:86:3A:87:02:A2:D5:BA:B1:21:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
X509v3 Authority Key Identifier:
keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
sbgp-ipAddrBlock: critical
IPv4:
168.220.184.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:8c:06:20:d7:80:4b:6a:1d:c6:88:c0:c1:f0:ac:52:a9:7f:
48:54:c7:a2:d6:6e:26:3b:a6:5e:ca:25:c4:1f:f7:fe:00:61:
65:9c:13:03:d1:1d:d9:0a:a3:4f:05:ee:0b:a0:55:e7:2e:ad:
63:d6:7c:82:06:e3:fa:f8:c3:15:37:16:c8:04:41:ba:0d:42:
a4:b6:43:23:fb:f7:87:d6:e4:f6:a1:d6:40:af:97:06:07:14:
77:b4:90:2f:25:cb:74:20:16:85:52:0e:31:75:73:ec:d0:c0:
44:4d:04:e5:58:b6:a7:0e:9f:86:97:5b:2f:8d:de:83:e3:4a:
b2:cd:86:3d:f0:7b:cf:65:2d:cb:7c:0e:4f:2e:60:65:df:ad:
c8:25:cd:f5:96:50:f9:7c:e8:02:65:45:b3:f6:5e:ef:db:d1:
a5:80:4e:67:40:80:ea:43:d6:6f:d5:b3:4d:0e:3f:0d:e2:f3:
d5:b5:67:dc:e3:e8:d1:d4:2d:f0:18:6a:7b:66:ad:63:4d:91:
1d:cd:8f:b4:3f:55:cc:9f:02:59:78:16:bd:f9:2f:15:77:83:
5a:e0:18:1d:4d:60:bf:89:04:c5:f4:e6:01:b2:9d:47:8c:db:
31:c2:5f:98:42:d3:f1:2d:72:1f:e9:61:69:c0:03:43:c9:77:
cf:7c:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:34:10 2025 by rpki-client