Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82109d7d-5b74-3a4b-87df-880864798260.roa
File: 82109d7d-5b74-3a4b-87df-880864798260.roa (raw, json)
Hash identifier: lBsotI5meYjBrFurAIC1aqq5t/zTXY7aZw4sKowJy2Y=
Subject key identifier: F0:1D:09:42:6A:43:3A:4A:55:36:4C:D9:B5:63:76:91:30:67:EF:D7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848424B11BBB830DE5C26304920
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82109d7d-5b74-3a4b-87df-880864798260.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 184.28.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4b:11:bb:b8:30:de:5c:26:30:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=b2af95a2-2768-4485-b4a1-33b0b3f3226e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:d8:e3:4b:c8:8d:56:af:67:b3:e1:27:7f:
60:e9:39:b8:9d:35:27:9f:34:dc:12:eb:85:19:fe:
9c:3f:9c:d2:4b:57:6d:a0:af:6a:88:e0:b2:7c:52:
d3:82:e6:36:13:ee:f1:26:9d:85:7d:93:89:9b:9b:
4a:fe:82:8b:a5:c3:8e:58:16:03:97:1c:1c:4e:1f:
1b:74:2d:56:69:22:5a:1b:91:18:e7:9e:12:e5:93:
f0:63:a8:ad:c9:01:a9:a5:8a:96:9c:ac:25:d2:ff:
59:80:4e:3c:ff:23:88:40:42:96:98:96:43:d9:6a:
ab:d6:c5:85:a9:50:a0:c2:15:46:05:bc:d6:be:71:
3f:95:e0:36:69:2f:08:8d:81:e4:05:f1:c7:97:b1:
b5:05:77:36:6e:bc:b8:48:48:2f:52:3d:1b:c3:c9:
fb:c7:b2:ca:f5:23:fa:d6:3d:ce:78:31:d0:a4:56:
2d:61:df:f8:5d:4d:f0:d3:60:b0:50:54:25:b0:84:
d2:1e:bd:1d:c7:b2:0e:ef:c3:d7:85:1b:38:6b:67:
f4:1b:ff:cf:82:0c:34:69:a6:88:35:45:45:c5:d2:
bb:ca:a3:d6:85:d3:40:8c:fe:8f:20:3b:ef:ea:2a:
d8:3d:0a:9b:f1:c9:b4:1a:39:11:ad:94:1f:17:24:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1D:09:42:6A:43:3A:4A:55:36:4C:D9:B5:63:76:91:30:67:EF:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82109d7d-5b74-3a4b-87df-880864798260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.28.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:cb:4d:db:7e:50:09:52:37:0d:95:b4:10:35:c8:00:61:23:
00:1e:b0:c2:05:42:57:09:55:2b:8a:e8:20:c0:d2:8a:d2:4b:
e4:f9:c1:18:6d:a8:27:09:46:fa:c5:89:9c:94:c1:ba:7b:0e:
4b:9d:20:cc:a5:ef:66:b8:ee:ac:c9:f6:7e:db:c5:06:34:0a:
fb:21:12:5a:88:31:20:c1:76:00:c2:aa:b0:28:cd:43:26:d7:
c7:10:05:a5:b6:2c:31:bc:80:3a:04:ed:34:0a:7d:f4:a6:0d:
9a:f0:ab:e2:57:9d:c2:6e:73:fb:9d:ce:8c:ce:20:f5:1f:58:
6f:f7:5a:ae:07:ae:38:af:37:2e:0f:c8:e1:80:a7:6b:91:ec:
32:3f:8e:a6:40:b8:16:f6:9b:0a:68:ee:04:62:62:f9:df:d1:
22:a8:de:fc:50:1c:90:18:49:6a:7d:1c:a1:e2:2a:fc:ae:0e:
78:69:df:98:35:a6:f6:5e:cc:73:8a:b1:06:59:56:c2:fc:65:
7c:e8:b9:9d:66:53:49:18:da:a6:25:d3:73:1f:bb:78:4e:96:
03:a3:02:b1:c4:17:a6:db:1c:2e:8a:d1:a3:b8:87:9e:52:c3:
37:a6:8c:a6:4f:b0:e6:b5:9c:18:9b:f5:e5:64:26:cf:db:28:
e2:61:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:49 2025 by rpki-client