Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa
File: 0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa (raw, json)
Hash identifier: rwq10Rq27yJqnI8wH/Igw7ZzokIs1qJukBBs6uT39NQ=
Subject key identifier: B1:26:BD:2D:AE:D6:9A:83:B6:C0:F3:4D:D2:0D:5E:01:8A:E6:D9:61
Certificate issuer: /CN=b18324da-6458-413f-b067-6f50e625e3dd
Certificate serial: 010D0C9F43285848626592F2F8459AFC2BEA8FA0
Authority key identifier: 1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 46692
IP address blocks: 184.94.224.0/20 maxlen: 24
192.40.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:92:f2:f8:45:9a:fc:2b:ea:8f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18324da-6458-413f-b067-6f50e625e3dd
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=d89a7355-12fc-497b-816a-6b1035520eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:97:13:02:c0:bf:3e:b9:e9:55:bb:1a:1e:
bf:75:c9:e0:64:40:cb:93:66:65:d9:d5:4e:9f:78:
12:d7:21:5a:50:64:9a:cf:9b:8e:c5:67:5e:ef:6f:
83:68:2b:fa:85:5c:07:b8:dc:43:cf:25:83:9d:98:
c6:9f:58:af:f6:b8:9e:0a:62:31:da:8a:33:11:74:
f7:2e:a1:a1:e0:2b:62:7e:1b:04:db:2d:37:ec:a8:
2e:38:aa:a3:31:79:f3:7b:88:d3:3f:f5:7a:f3:45:
29:21:b3:93:e1:96:90:c1:c0:28:e0:d1:77:90:14:
59:db:4d:a2:34:be:4a:59:3b:06:37:f7:fd:2f:5e:
5e:c4:b6:a4:52:1b:e8:87:02:78:8f:ce:c3:01:95:
b7:e8:56:2b:c3:f1:33:b6:f6:11:57:e4:3b:c0:95:
a4:19:3d:88:8a:0b:64:fc:f3:a2:6b:ed:fd:76:9b:
5f:e5:38:ff:5a:0c:7d:fa:35:fe:73:c5:f3:29:07:
af:9f:3a:33:57:e0:a0:da:17:53:6e:56:40:e3:24:
ab:ac:78:08:38:54:c2:09:aa:af:e1:09:a3:5b:aa:
da:fe:73:5a:1d:97:e0:08:55:d9:07:08:8a:1d:47:
22:76:e7:1e:d4:20:49:d8:e2:bb:2d:27:bc:2c:24:
f8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:26:BD:2D:AE:D6:9A:83:B6:C0:F3:4D:D2:0D:5E:01:8A:E6:D9:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl
X509v3 Authority Key Identifier:
keyid:1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
sbgp-ipAddrBlock: critical
IPv4:
184.94.224.0/20
192.40.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:dc:7e:ec:20:c3:b4:e8:fd:06:39:fb:a5:6f:c7:2d:00:16:
79:64:29:47:da:28:5f:2b:0d:52:47:93:ca:83:f2:3a:df:b6:
9b:ed:24:7d:2b:24:ce:bc:a8:29:35:f7:45:a6:be:a9:1d:07:
bd:1a:a7:be:89:4c:c4:ee:7f:78:e5:a4:86:57:3c:60:5a:bb:
a4:4c:47:d5:84:85:18:de:63:45:0d:ce:9d:00:8a:d4:d3:cf:
95:b5:31:c8:7c:e1:ef:7c:3a:81:3c:bf:49:f1:48:fa:c9:98:
1c:fc:4f:e4:fd:07:ce:1f:af:11:76:82:31:5c:c0:8d:c9:6f:
65:15:ba:2a:0c:9a:36:03:7a:a1:88:fa:3a:bb:79:01:b5:0b:
7f:0e:90:d9:43:06:e1:77:98:18:03:95:fa:29:c0:b0:e5:9c:
ee:2a:94:a7:48:ff:81:e4:fb:b3:fd:0a:a3:42:ef:93:cd:e3:
7a:c9:24:76:97:51:bb:cd:3d:98:80:28:76:3e:93:b2:07:fc:
6a:36:9d:75:d1:6a:1b:a8:47:90:24:ee:a0:ba:f6:95:ab:b0:
3c:fc:7a:54:40:b4:19:92:45:d2:47:f5:20:cd:2b:37:f4:24:
3a:9f:e3:0c:98:62:1b:88:17:6f:bf:de:b2:84:c4:49:7c:4b:
01:f7:a3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:22 2025 by rpki-client