Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b28d8272-3a28-31a5-92b9-889735051afa.roa
File: b28d8272-3a28-31a5-92b9-889735051afa.roa (raw, json)
Hash identifier: q0jO6AoDfzkHIb9PaK9fo1uVRuOxtE8XJB7sRSmEyuQ=
Subject key identifier: 65:33:95:95:4C:B0:1D:79:AF:30:1F:3E:D2:D5:82:95:89:7D:A8:63
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584800AFC4EDBBDBC3F8DFF9FF10
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b28d8272-3a28-31a5-92b9-889735051afa.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 16625
IP address blocks: 184.31.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c4:ed:bb:db:c3:f8:df:f9:ff:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=2ca6bcf1-5423-4224-8ae6-a23190a067ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:0a:ab:28:c7:cb:20:62:20:ea:ac:22:6a:
3f:aa:00:42:87:b1:bf:59:03:c9:e7:11:6a:0e:74:
45:c3:8e:69:3f:53:38:1f:13:aa:4f:82:bd:a9:b1:
f7:e1:bb:2a:17:cd:db:be:15:01:66:c0:cc:9c:54:
67:f5:62:01:b5:1b:cb:a0:ec:39:2f:f8:d6:49:24:
ea:c5:df:be:9b:d5:d3:43:bd:4d:bf:82:46:ea:84:
ff:bb:b7:5b:f5:79:c1:e4:c6:04:09:63:f9:12:75:
f0:b7:16:4a:43:7f:aa:7d:83:c2:b2:d7:e1:24:38:
b8:46:b2:90:12:a5:4d:8f:cd:cb:6f:38:72:90:5d:
e1:7f:de:51:b9:f3:d4:03:a7:19:6d:cf:22:12:3e:
83:4f:88:3f:19:01:2a:5c:dd:c8:17:7b:ff:3d:82:
5c:42:e5:0c:40:63:fd:d9:0e:83:91:5a:11:82:f9:
3c:ea:8c:07:ae:42:15:5b:98:32:6f:7d:fa:20:2a:
cb:a8:06:fd:a1:0f:d0:7b:94:f5:4e:77:21:a4:a4:
66:7c:ee:05:5c:75:11:23:c5:43:eb:de:8e:b6:63:
85:86:89:35:53:04:88:3e:56:04:cc:cc:f9:d9:ff:
8f:c7:6d:72:0d:52:5e:3d:15:fc:b8:46:e7:cb:24:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:33:95:95:4C:B0:1D:79:AF:30:1F:3E:D2:D5:82:95:89:7D:A8:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b28d8272-3a28-31a5-92b9-889735051afa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.31.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:86:7d:ce:3b:5e:ed:3d:f4:f8:f0:c8:f7:3d:b0:20:bf:b3:
aa:95:ef:b1:aa:cb:7a:a6:3c:39:60:6f:cf:59:b7:f6:3f:e1:
f1:5a:32:e0:93:e8:59:9c:15:3c:22:ff:e5:25:44:45:90:99:
56:46:14:19:5f:1f:fa:82:cc:47:f3:41:15:5c:75:6e:4a:41:
0d:55:dd:bc:59:1f:19:f2:16:8f:b1:f8:62:6d:aa:aa:c7:d0:
9f:86:23:07:71:98:1d:94:be:28:35:ca:c7:49:26:0d:bf:04:
93:79:88:8b:f1:04:ae:d2:10:c3:28:88:91:99:50:ea:7a:ac:
07:cc:b3:3d:5c:5d:11:02:d8:86:10:23:b3:a6:e2:d4:27:3c:
59:ab:57:d1:e4:61:5b:f9:63:25:d5:a7:f3:67:b6:9c:b6:e2:
26:9e:51:29:27:e0:02:55:2d:1b:94:ee:bb:33:ed:29:cb:95:
e3:b6:d5:28:a2:79:ef:3b:9f:86:a8:a6:bf:22:00:78:e2:ea:
aa:81:f7:d7:c7:6e:d7:31:58:98:90:94:15:6a:82:87:52:93:
90:56:f5:e4:58:cf:64:04:2e:45:1d:63:df:87:8c:d0:67:91:
f6:8d:59:5f:b4:81:3b:94:bb:ac:32:86:94:b7:ab:86:0d:e9:
18:9a:15:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:48 2025 by rpki-client