Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2c85781-6113-3d37-ab76-b3edf551f5c6.roa
File: a2c85781-6113-3d37-ab76-b3edf551f5c6.roa (raw, json)
Hash identifier: RfE4QT6MaH92RJJCPV9iyybuTvOcVypQYsQLwDu/J40=
Subject key identifier: 1A:BE:A0:C3:06:7A:77:BC:2B:03:F4:67:A0:37:ED:F5:33:C4:C8:81
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584835BA9E2352D4A62643B77280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2c85781-6113-3d37-ab76-b3edf551f5c6.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 184.87.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:9e:23:52:d4:a6:26:43:b7:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=d2e77bcd-7e0a-4ed5-b631-d8c73e24d498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:7f:82:02:61:79:72:3d:13:d8:6a:ec:20:
10:62:1a:75:6f:15:43:8a:cf:14:4c:6c:0a:f7:86:
ef:e7:85:13:98:a4:21:53:0e:85:c6:48:e3:3a:89:
3f:a4:46:16:54:49:5f:b3:e3:8b:92:46:e8:e4:70:
ef:66:e0:6e:64:a4:dc:01:8f:da:f5:34:55:29:61:
e1:4b:be:d2:b1:6c:d7:37:2c:a0:44:a0:94:31:06:
c6:4c:6f:cb:71:51:ec:73:5d:4b:8d:7e:cb:8b:62:
17:49:4b:c0:6e:36:ac:64:82:14:75:5a:e5:63:d5:
05:05:de:ad:a8:e6:eb:ff:f1:fa:49:90:e1:00:13:
ed:40:68:40:60:62:30:58:b9:ff:12:64:63:ae:0d:
c2:bd:2e:fa:2a:b4:cb:84:97:59:e4:26:b4:a5:b8:
88:ad:c9:b0:7b:3b:40:41:f9:cc:36:e8:82:42:9d:
6e:a1:6e:8b:38:1b:4b:0d:2c:79:79:dd:6c:83:70:
d4:3c:90:f3:90:d7:b3:52:4c:c2:a0:d9:96:95:71:
2a:a1:0b:a0:fe:ea:86:e1:bf:7c:35:bd:14:3e:0d:
52:aa:c3:b6:d1:d1:e2:80:83:ab:dc:5a:6d:ea:27:
22:a0:56:65:34:fb:27:95:fe:0b:1d:c8:6f:e4:3f:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:A0:C3:06:7A:77:BC:2B:03:F4:67:A0:37:ED:F5:33:C4:C8:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2c85781-6113-3d37-ab76-b3edf551f5c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.87.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:37:4c:8a:85:51:15:77:c6:d9:af:5f:c3:8b:b3:b3:51:23:
6c:11:81:8c:fb:99:ee:2f:af:80:7c:10:4c:33:5a:19:15:73:
fb:79:e5:0b:10:8b:3b:91:22:eb:ea:b2:a0:7e:ee:8e:28:eb:
5d:86:90:52:67:a3:9d:bd:dc:29:fc:33:35:86:f5:8c:46:de:
ac:db:c2:9e:14:f6:dc:52:53:6c:92:a1:1e:ad:46:76:b5:e3:
45:48:42:81:cc:54:03:fb:6e:96:d7:1e:86:98:1d:61:14:2d:
e2:9b:9c:22:b9:44:37:4f:59:57:fa:d2:45:f0:ce:0f:6c:91:
25:8b:89:04:3a:69:16:f8:55:28:64:dc:de:23:26:15:36:08:
5e:07:da:b6:32:ab:a8:45:dc:5b:1f:1c:08:a5:0a:2d:fa:d3:
17:91:21:c1:4d:03:a8:4b:cb:86:dd:3b:68:14:5c:da:49:12:
cb:62:49:43:18:8c:38:ff:ae:7c:14:e6:a9:b9:a1:2f:88:bb:
0c:a8:f0:8b:db:6c:ab:1e:da:fe:13:99:57:79:28:7a:79:bf:
c0:69:a4:38:4a:fa:28:c1:59:c7:a1:dc:9d:a4:3e:e1:3b:63:
0c:30:72:5c:72:4f:a8:03:e2:f2:a2:de:3d:12:07:46:d4:78:
eb:4c:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:35 2025 by rpki-client