Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70d39f95-04c3-3bf7-9be0-225b0abda71d.roa
File: 70d39f95-04c3-3bf7-9be0-225b0abda71d.roa (raw, json)
Hash identifier: o3sQUrxg/ypCkoYKtXRV7Vv+XeeVcfz8mTt5wNc+ybA=
Subject key identifier: 90:17:A2:93:A9:13:05:B6:1C:7F:89:5A:F0:67:FA:AA:1B:63:7D:E3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848424B10D071B72BD3FF9AEA10
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70d39f95-04c3-3bf7-9be0-225b0abda71d.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 184.28.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4b:10:d0:71:b7:2b:d3:ff:9a:ea:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=8523e6d5-0624-46f4-b3f8-019652f91fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:96:fe:70:ee:18:d3:94:25:ba:48:6a:99:
56:62:4d:dc:96:be:50:62:62:1e:f8:6e:a4:8a:2b:
44:d8:17:5e:20:8e:88:0a:7f:c5:3f:e9:ac:ec:96:
e7:6f:64:9b:55:18:69:ea:31:b5:d0:8c:9a:03:b8:
e8:2a:d2:e3:29:b7:fe:a1:1e:0a:aa:e0:78:e3:53:
6e:c0:46:b3:c1:ea:0b:6a:b7:f3:5b:85:56:10:2b:
08:3a:e0:dd:3d:dd:04:5b:63:65:ce:38:28:d9:18:
95:3f:13:0e:29:93:73:10:a3:01:a0:cf:7e:23:3a:
50:c3:8c:bd:62:ff:59:76:2f:03:e3:4b:63:5c:03:
7e:5a:27:bf:6b:1b:7e:12:26:c6:b3:a8:11:f9:3d:
5c:cc:21:6d:32:70:8c:bf:31:39:b6:43:44:80:f5:
4d:55:32:73:68:38:09:63:7a:83:82:ca:fa:a0:85:
c1:d3:c2:22:10:45:1e:d2:b1:99:c7:cb:98:9d:5a:
55:d6:4c:6b:11:88:3f:ba:06:fa:19:d9:78:87:e1:
77:6c:6b:dd:e1:c1:a6:a1:82:92:41:05:6e:c7:b4:
fe:fb:a2:ef:17:7d:61:02:71:0b:ad:72:5c:3c:1d:
1b:29:b9:ce:35:5d:2b:55:e2:5b:0e:a0:11:44:54:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:A2:93:A9:13:05:B6:1C:7F:89:5A:F0:67:FA:AA:1B:63:7D:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70d39f95-04c3-3bf7-9be0-225b0abda71d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.28.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:b0:d6:44:83:36:06:1a:79:e6:0e:7a:45:7a:22:03:40:aa:
92:4b:01:5e:d6:05:6b:ec:ae:41:e7:43:6b:63:a6:05:56:65:
e7:fe:fc:5d:78:31:11:16:53:e4:4c:36:69:22:37:81:45:a0:
97:ef:76:9c:f7:90:4f:05:aa:57:72:e4:25:fd:9c:f5:88:fc:
f4:01:6b:ec:14:83:e9:79:39:9a:37:bf:20:8e:65:b3:44:8b:
66:df:42:1e:b3:91:69:01:1c:71:6a:f6:c1:ce:6c:d1:56:0a:
ec:68:eb:8f:49:1c:f8:b3:d6:bf:43:10:08:33:c5:ba:ee:0c:
d0:ae:e6:16:1f:ff:df:59:c3:48:9d:c9:e0:dc:86:f3:3f:79:
3e:67:2e:d5:5c:a9:d3:f8:12:ee:66:d5:15:5b:63:fa:65:2f:
bf:ff:54:3b:a7:f1:4c:71:c3:18:c7:c4:02:10:96:83:eb:c5:
bb:80:76:52:87:25:ea:c7:ba:1f:03:27:c5:a9:bf:47:a4:df:
69:e6:2c:8f:2b:54:ec:86:34:ee:93:29:26:84:1e:f1:0a:8b:
8e:16:db:d8:96:09:df:94:8d:e4:fb:58:d2:9a:51:5d:24:05:
2e:e7:0c:4a:98:85:0e:09:b9:25:f3:78:df:62:8b:58:87:6e:
27:94:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:02:17 2025 by rpki-client