Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eda0039-a73d-30ae-b2ae-64abbdbeb764.roa
File: 7eda0039-a73d-30ae-b2ae-64abbdbeb764.roa (raw, json)
Hash identifier: SrbM6h2TcP7okECO1vOpueEdkU4Ic89CbS8cJAzcDRw=
Subject key identifier: BE:C8:D5:98:9C:B9:91:BD:D8:78:52:91:BB:70:8B:73:4F:90:83:25
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584835BA9D48CF710F7DAD472688
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eda0039-a73d-30ae-b2ae-64abbdbeb764.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 184.86.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:9d:48:cf:71:0f:7d:ad:47:26:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=ae7fdf12-5382-4db0-8533-ba8276d735aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b8:67:bd:6e:f6:47:5a:46:dc:ee:99:5d:96:
ba:ac:e4:4c:d5:1a:bf:4a:75:a9:5f:fb:06:59:58:
48:20:1c:3c:5f:1b:61:5e:55:d4:6c:55:5b:ab:ba:
fa:a7:20:9b:c3:d8:a6:b6:5c:2e:68:82:6f:de:44:
1e:d3:a5:5e:0f:db:32:76:44:1e:86:87:4f:4f:36:
84:a0:ce:77:c3:7f:a8:0b:24:8c:67:bb:6e:ce:4e:
99:4f:eb:d2:32:45:de:0d:4d:23:11:cd:d7:7b:10:
3d:c9:45:b4:95:d5:c5:64:d4:b6:cc:1f:a9:28:90:
48:e1:da:24:21:56:6d:bb:40:11:66:b7:eb:a7:38:
df:9c:d5:23:26:2b:d4:73:32:2b:a4:c5:3c:41:8b:
32:db:3a:63:9f:0d:34:95:de:fe:fe:fc:35:d6:85:
dd:3d:72:32:b0:6a:b9:7a:fb:e0:76:27:9c:e5:41:
98:57:d0:32:8b:8b:42:12:80:80:ba:1c:a2:53:31:
b9:da:ad:dc:21:b7:11:98:e6:f8:19:09:ea:db:2e:
87:5d:3c:6d:d6:5a:3e:70:7c:ec:93:9a:47:6d:95:
db:5d:3d:64:f0:43:23:19:3d:41:bd:f8:83:98:5a:
bf:d2:0d:3d:06:3d:b0:ff:49:15:ea:98:8b:ca:34:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:D5:98:9C:B9:91:BD:D8:78:52:91:BB:70:8B:73:4F:90:83:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eda0039-a73d-30ae-b2ae-64abbdbeb764.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.86.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:fc:67:a7:7f:83:1d:f5:fb:3b:ce:68:9f:9d:0f:08:73:5c:
91:d2:59:11:68:4e:58:78:06:bd:fc:4f:df:dc:08:f6:1f:45:
96:23:af:25:db:d4:b7:fc:4e:41:6a:e3:65:b3:ad:1a:d3:bc:
f8:9e:ba:cd:d4:c4:4d:a6:03:b2:64:51:1f:31:57:3d:2d:7e:
32:03:62:23:19:6e:d6:b9:c7:fc:4e:67:33:cd:ae:95:9b:f3:
0e:9f:02:54:18:f8:1b:92:a0:db:62:e8:1a:56:3c:a1:c2:bb:
67:d8:d6:48:58:f3:11:04:6c:f9:37:39:24:13:6c:e3:7e:e4:
b7:b0:6a:6e:71:37:8b:c6:3d:83:98:81:89:1d:80:a7:ac:6b:
b9:87:c9:c5:c2:3e:c7:8b:39:b8:98:b9:a6:b3:e9:a5:d0:57:
1f:5d:67:a3:e8:ab:c4:ab:c3:46:1b:53:82:0e:a4:23:0e:ab:
d7:fa:d8:6f:53:43:40:e8:87:7e:15:e2:03:b4:d8:fe:d5:b1:
bd:0e:0c:83:1a:5a:c8:68:ff:7d:3a:21:34:81:2c:f2:b3:96:
1e:8b:57:4d:3b:ff:76:1f:10:f0:da:d9:0c:d9:bd:d9:6b:04:
9b:a7:6d:6c:f4:9c:22:c4:f6:68:42:c4:9a:ff:5d:89:67:33:
f5:b8:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:58 2025 by rpki-client