Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8920af1-0114-353c-a8eb-859ab8842937.roa
File: b8920af1-0114-353c-a8eb-859ab8842937.roa (raw, json)
Hash identifier: OxibCrh/7H14SETnJY57uyS6OztOU9p7FkBXj+PlUvQ=
Subject key identifier: 60:D5:C9:DC:32:1F:FF:7B:3C:DE:76:12:94:67:1B:81:B0:1D:DB:F2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858484D75809E338AC03C5939CE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8920af1-0114-353c-a8eb-859ab8842937.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 184.27.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:80:9e:33:8a:c0:3c:59:39:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=ca9e36db-f909-4ac9-899c-5f2227db0e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:22:7a:86:a8:c1:6f:a0:12:e0:39:f8:a6:
f2:f5:15:2d:15:1a:96:7a:88:4c:83:f1:7d:11:92:
07:9f:c8:2c:3d:da:7b:b9:5a:8f:c3:89:2c:be:1a:
cb:9f:82:b0:54:48:46:02:6e:2e:79:e1:95:18:2a:
39:4a:db:57:c9:ab:eb:e0:2c:83:34:9a:71:73:d0:
6d:34:2d:f5:89:48:a0:d2:d4:e6:f8:b6:1f:8d:89:
7b:e9:a5:df:54:1e:92:f0:47:ac:2a:42:20:56:4e:
ba:02:02:a7:a6:de:ce:b8:80:98:2d:ba:1d:96:8a:
2d:20:0d:78:56:6a:94:cf:0f:7b:5e:26:44:31:ea:
99:82:e3:53:55:ef:34:48:2b:1a:13:c6:bf:ed:42:
2d:14:d8:d7:49:42:6d:a7:f2:89:de:be:1a:b7:dd:
b9:71:bc:d9:14:08:4e:04:e4:70:df:c4:84:5b:b1:
69:bb:9f:0e:b7:70:b4:80:55:cf:78:e8:2c:06:89:
b1:ad:40:ff:ee:f7:c6:b2:bf:58:95:b4:ac:6c:c0:
33:1a:bd:d5:26:89:4c:e8:db:71:63:06:4d:6d:ac:
23:f0:c7:2a:bf:61:76:94:2d:5d:f2:e8:aa:e3:92:
f6:58:30:9f:93:a8:5e:96:9d:3b:da:dd:96:29:04:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D5:C9:DC:32:1F:FF:7B:3C:DE:76:12:94:67:1B:81:B0:1D:DB:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8920af1-0114-353c-a8eb-859ab8842937.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.27.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:e9:b0:24:09:2f:6b:42:fb:e3:30:8c:85:5f:d1:64:d4:d6:
80:3a:7b:f2:63:d7:aa:9c:a5:dc:ff:e7:64:ce:49:00:a3:dd:
e3:f9:ce:9a:69:56:9c:7f:76:72:b2:cd:39:bc:7e:88:ea:88:
f5:5b:e6:44:20:42:f7:6b:cf:13:15:b4:d3:c7:1a:a2:53:99:
20:96:dd:82:08:e6:cf:b5:87:05:0b:1f:cf:6e:7d:56:22:7e:
e5:c8:6a:7c:13:75:d8:32:07:d4:ca:aa:f2:88:bb:1d:f1:01:
7b:2c:89:4f:e4:41:fb:0d:ed:48:6c:49:c4:a1:1e:93:cb:75:
5a:75:ff:84:a4:cf:ed:98:bd:43:26:f4:9c:c2:0f:b9:ea:a5:
4e:52:47:34:25:79:dc:aa:ac:06:09:c0:5e:80:0f:fa:a6:f8:
57:22:d6:70:c6:b1:80:2b:0d:93:56:1d:f4:17:16:f9:23:90:
5d:c5:11:1b:f9:68:4e:97:6a:a4:47:ff:5b:05:fc:92:7e:2e:
c1:e0:1a:0a:bd:88:cf:54:64:be:35:4e:ad:f7:6d:3f:07:bb:
99:eb:5b:fb:dc:69:21:18:77:f0:e7:72:91:5c:2d:50:ac:6a:
59:a6:ce:c4:38:e6:ff:de:93:9d:e5:77:c2:09:07:13:61:65:
d9:d1:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:02 2025 by rpki-client