Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28882b8d-debf-3cd2-ac74-b73104b5c21a.roa
File: 28882b8d-debf-3cd2-ac74-b73104b5c21a.roa (raw, json)
Hash identifier: dexJhVm6yPo/TMveiJLe5rzcD9asAJem6ca/ic37PFg=
Subject key identifier: 74:20:0C:DE:98:04:9E:46:18:06:AA:90:02:B8:54:59:E7:B6:DC:88
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285847F584F5E90220BE0279076500
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28882b8d-debf-3cd2-ac74-b73104b5c21a.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 21859
IP address blocks: 185.194.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:f5:e9:02:20:be:02:79:07:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=33abf2e8-b653-4a85-a186-00eb8904a47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:ac:28:68:72:e3:48:06:d0:f8:f5:28:57:
b7:bf:70:b3:2b:0f:fc:9c:7e:90:ed:43:e9:a8:27:
a4:32:bc:30:d9:df:9c:7a:24:8b:51:79:e4:69:b1:
28:85:f8:49:24:09:f3:a0:38:6b:3b:e6:61:12:29:
81:cb:98:d2:ee:51:01:a3:1e:9c:84:59:db:1b:24:
d8:d1:a7:ab:3f:90:d4:14:c5:c1:74:94:6e:b6:7e:
14:1e:81:74:47:c1:08:8c:1f:91:67:2a:7c:38:98:
8b:8f:da:af:9b:63:0c:2a:96:8d:0f:dc:b2:d1:bc:
f4:d8:85:59:2e:23:53:1c:74:c3:eb:a2:d3:a3:04:
81:2f:a7:0f:fa:f9:fd:98:a0:96:78:ca:7a:7b:5a:
50:eb:9d:e6:e3:af:70:ff:24:58:d3:ba:3d:bd:98:
53:c9:6c:8e:bd:df:06:f7:51:5c:57:0b:8a:09:b6:
ae:20:8f:8f:3a:0b:a9:df:bf:ef:d4:3c:bd:82:0c:
8d:69:d6:cb:7a:51:20:4d:2f:94:c6:46:bf:d3:f9:
b6:cb:11:50:45:02:f4:e2:ea:0f:62:38:e7:1b:3f:
37:ab:57:f7:34:bd:54:04:63:5c:5a:1b:66:7b:1d:
ff:a7:58:9e:87:31:d8:f5:07:1e:a8:0c:2a:5a:36:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:20:0C:DE:98:04:9E:46:18:06:AA:90:02:B8:54:59:E7:B6:DC:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/28882b8d-debf-3cd2-ac74-b73104b5c21a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
185.194.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:fe:af:76:d8:6f:8a:00:2c:5d:8b:88:6d:69:53:6b:5a:e0:
56:03:b8:a2:34:2f:74:02:51:51:21:a0:a5:42:af:be:3c:a0:
c1:f8:48:6f:68:d0:8f:29:4e:22:76:f8:a7:15:ed:24:3a:50:
8c:c3:e4:46:1a:ed:30:25:a2:8b:51:07:5b:07:c1:1f:98:8d:
28:58:38:19:b6:b7:1d:b3:5c:95:d4:90:de:a5:17:9e:50:01:
dd:87:0f:a1:b0:3f:d1:f9:1a:6b:06:e6:77:23:fd:7c:3b:f9:
8b:6d:51:f9:7f:c2:63:ef:2f:22:1b:3b:57:25:60:53:df:f1:
e8:5f:33:55:01:2e:0c:60:00:2f:58:f2:7f:4f:19:2a:ad:6c:
cf:35:7e:fe:e1:1f:c0:5e:0b:e2:20:16:11:20:7a:62:b4:b2:
34:d6:3b:70:3e:59:d2:b7:e6:d0:1e:0b:9a:34:7c:a2:5b:15:
4b:90:88:05:df:b9:8a:71:5c:2c:88:ed:bf:ef:2f:7c:54:98:
9a:1c:ab:c5:69:99:29:d7:44:4f:9f:ee:48:6f:8c:a1:80:3a:
ea:cf:99:d7:96:55:b5:46:94:51:96:a5:50:f9:d2:13:66:9d:
df:5c:0b:33:ce:bf:46:76:f2:ad:1f:16:27:7e:ac:36:63:99:
da:2a:0b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:32:38 2025 by rpki-client