Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3510195e-1140-33b0-aeea-4353032cdae7.roa
File: 3510195e-1140-33b0-aeea-4353032cdae7.roa (raw, json)
Hash identifier: c+5M+iiXG1DGWsy5gZX/yTgm8SIqASSyPlslCvHDMho=
Subject key identifier: F4:CC:B8:0A:C1:A2:A0:EB:F0:2E:68:63:E9:37:6B:7E:F4:E9:ED:52
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858484D7580B944A54BA1D29473F8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3510195e-1140-33b0-aeea-4353032cdae7.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 184.31.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:80:b9:44:a5:4b:a1:d2:94:73:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=769bcb8e-e493-4b38-8152-74e70564a668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:6b:20:8c:5c:5a:9a:cf:e1:40:be:18:56:
c0:f0:25:a1:83:e9:e4:d9:d1:6c:27:62:c5:e6:62:
60:21:18:86:d7:e3:02:f8:ee:17:5d:2e:f5:b5:31:
c9:1c:5d:e3:48:60:54:2e:7e:ae:c5:3e:0b:98:22:
22:57:d5:0e:0c:ff:2a:9f:8e:80:bc:5a:9f:5d:88:
07:86:2f:70:e1:7b:e2:91:fb:5f:11:b6:cf:62:65:
e2:4f:ff:a4:de:0a:aa:27:94:7b:31:66:cf:28:a1:
54:49:00:38:cb:25:cc:49:07:6c:96:77:64:c3:3e:
99:5b:ae:08:40:a1:79:72:8b:6c:62:fd:e3:4a:89:
25:66:b8:05:c0:7b:0a:04:db:f3:8a:d3:f9:c9:00:
5f:20:08:0d:f2:2b:cb:20:8e:f0:22:e0:d6:38:83:
25:3b:90:45:9a:59:50:5e:00:fb:83:ab:b2:f3:b9:
d1:60:c8:5f:60:b2:78:f7:a1:03:61:12:16:22:bb:
b1:9d:dc:7f:47:9a:6b:5c:27:1e:b5:e1:2f:7b:21:
c7:8a:38:60:d2:fc:e8:b8:2f:83:56:12:7a:41:8d:
cb:01:07:94:e5:b9:11:be:38:29:a0:01:c9:35:9e:
1a:9e:d4:f1:58:f9:87:e5:36:80:d6:34:3a:fc:de:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CC:B8:0A:C1:A2:A0:EB:F0:2E:68:63:E9:37:6B:7E:F4:E9:ED:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3510195e-1140-33b0-aeea-4353032cdae7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.31.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:3e:3b:97:ef:dc:4d:41:a2:97:21:de:2c:72:25:f5:b3:4f:
a1:d9:aa:67:f1:cb:90:5b:0d:d3:16:57:84:69:ec:ae:f9:58:
f0:3f:3a:ef:63:40:2b:db:af:d6:74:92:b2:db:ec:a4:87:89:
85:51:84:2b:4f:93:dd:fc:5f:44:88:27:d7:81:7c:f5:fd:e2:
0d:11:60:7a:3d:f3:c9:ea:aa:d4:cf:fe:46:79:be:d4:5f:7b:
27:7a:15:bf:fe:c4:08:7f:94:fa:88:a0:1b:f3:70:37:4c:67:
81:3a:4d:fd:7e:a7:46:22:ab:7e:ed:29:a6:99:6f:c1:8d:24:
d4:b5:97:5b:eb:53:a3:df:b9:c8:22:d4:03:0f:e4:2c:3f:ce:
8b:4b:ca:5a:2c:05:91:d8:af:ad:b2:b2:24:54:be:a1:d8:5d:
cf:84:1c:81:0d:2c:75:13:68:fb:5a:41:d9:74:15:54:a6:24:
59:a1:88:4c:67:21:cd:fd:63:ee:d1:5d:ad:0a:86:46:a7:ec:
b8:d6:43:d4:bf:4f:74:59:88:6a:76:19:d6:3c:ad:44:2b:78:
39:80:f5:fc:94:60:8b:23:b6:a2:ef:9a:98:de:99:84:e5:93:
50:f9:d1:e8:1b:c1:77:50:64:76:88:14:2d:e0:9c:f0:ac:03:
f2:4a:9d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:38 2025 by rpki-client