Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a88ffa6-4e4a-333b-8928-dfb41db3443a.roa
File: 5a88ffa6-4e4a-333b-8928-dfb41db3443a.roa (raw, json)
Hash identifier: 1/0xcCgcIE2KcdgZDRvhi3LjlTdWnPEU8QamnUOYwo4=
Subject key identifier: 63:3F:22:CA:12:1B:19:7E:9A:20:4C:BE:7C:FB:F3:E0:1F:7A:E2:4E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482D5A9ED12BB610D41EDFD900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a88ffa6-4e4a-333b-8928-dfb41db3443a.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 16625
IP address blocks: 184.50.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:9e:d1:2b:b6:10:d4:1e:df:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=25e1a73d-79a2-4ed8-96a8-5af2fdf2bfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:16:6d:42:e9:b7:75:4a:3e:90:6b:8e:d6:
95:47:bc:20:d5:f6:0e:78:de:a4:b5:8e:a6:26:e5:
e9:4b:57:a9:53:2b:b4:d3:75:10:24:03:f8:b3:81:
32:97:16:8f:5b:4c:bf:f8:00:3b:59:1c:e5:67:a5:
e7:9f:89:8d:ed:07:9f:d6:b9:f7:56:73:ea:41:0c:
c1:ac:ad:07:50:b2:fd:e4:1c:9b:93:b4:41:47:e9:
1b:4c:70:28:57:50:da:e1:d3:e3:38:9d:4e:55:fe:
d1:b2:ed:38:3c:fa:6b:5f:c5:ed:ba:b4:5d:e3:c9:
9c:a6:c9:f6:21:3c:04:b4:80:9f:a1:5d:43:24:59:
54:0a:1a:d6:71:b6:a1:12:41:80:47:d2:6c:56:61:
ca:41:80:b4:23:96:95:bc:2c:67:c6:22:d1:cc:48:
6d:46:18:2a:4f:3e:96:e9:7d:fe:27:b1:0a:17:5e:
56:04:c9:72:18:2d:0e:ef:d1:9c:7c:9f:4d:1d:4f:
c0:09:72:4f:2b:d0:97:ac:e4:dd:87:f9:24:1a:68:
57:5e:5d:38:9c:88:fc:55:a0:38:e6:36:34:46:46:
81:1a:d3:1c:0d:d3:dc:1d:63:24:52:bd:09:51:e9:
b8:a1:3a:c8:8b:cd:7a:c3:fc:cd:e4:ff:ff:04:55:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3F:22:CA:12:1B:19:7E:9A:20:4C:BE:7C:FB:F3:E0:1F:7A:E2:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a88ffa6-4e4a-333b-8928-dfb41db3443a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.50.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:34:29:2e:65:38:cd:03:b7:b2:e9:54:94:58:44:44:a6:d7:
b2:81:6b:55:f0:59:91:eb:1f:d6:50:47:ec:89:e9:93:81:a8:
fb:25:f9:49:f3:fa:5f:de:89:d3:9f:6b:15:e8:20:82:e9:0e:
f3:23:31:aa:00:b9:8d:8e:3a:21:68:0d:3c:b7:fa:15:e4:45:
89:af:be:08:5e:a1:71:29:43:06:64:ae:4e:20:f2:14:c2:c7:
cc:1a:e6:ea:27:ac:e9:64:00:e5:3e:8a:83:ba:1d:12:fa:63:
b2:5c:73:e6:29:a3:c9:8b:a4:94:c9:b0:3b:f9:8f:56:06:8e:
78:b8:2a:47:99:48:a6:5a:2d:4c:42:0b:fb:e9:57:ff:9c:6a:
9a:b6:f3:df:5e:25:bc:77:c2:45:aa:ce:ad:e1:aa:f5:19:9c:
81:57:c2:9a:ad:ab:3f:e5:fd:03:ef:4a:f0:06:b8:80:de:99:
58:73:62:65:2a:4a:28:2f:f1:ed:8a:20:a6:e1:2d:a3:34:7b:
56:12:a3:b6:34:ec:13:a2:85:3f:73:50:dc:d7:15:d9:b3:1c:
ad:14:5c:20:85:d6:b1:cc:5a:cf:86:0f:6c:47:07:e9:28:5d:
65:6f:5a:7f:69:18:da:b5:29:60:33:7e:1b:e5:b1:7a:ab:49:
68:8e:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:13 2025 by rpki-client