Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be0a320a-b966-3cba-8316-9e9c0eb6b043.roa
File: be0a320a-b966-3cba-8316-9e9c0eb6b043.roa (raw, json)
Hash identifier: fFl9ss9pfnCmjWXlJ6D7yGi/gkt5cCFVxfpPucUylks=
Subject key identifier: 11:79:30:30:7C:9A:2A:BA:4F:1E:8D:77:30:A4:79:B6:38:7D:A3:19
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584840E5BF93B5072DD316ADEB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be0a320a-b966-3cba-8316-9e9c0eb6b043.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 184.26.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:bf:93:b5:07:2d:d3:16:ad:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=969c304a-f9b0-4c26-baf4-18db6a76c063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a0:3e:d6:8f:b5:50:c8:be:4c:59:41:7e:0a:
1c:a1:55:6e:be:ec:a1:ed:03:b8:c3:c4:e5:44:62:
92:7e:c5:1f:73:12:45:e2:a9:13:73:4e:3f:4e:2d:
14:f4:20:97:86:72:11:1c:4c:12:89:60:d2:3c:a7:
f3:c2:16:62:11:1c:98:22:1f:7c:b7:6e:ef:e8:f7:
21:d1:dc:db:51:cb:ae:eb:9e:c2:4f:02:3d:b5:17:
04:7e:06:ef:5b:70:f7:a8:c6:5c:6a:15:53:51:34:
44:72:da:d8:82:42:6e:c0:cf:bd:86:ef:e3:2b:10:
d8:2d:2c:de:39:ff:16:18:01:4c:21:bb:f2:c9:39:
ab:23:0a:a0:7e:43:a6:52:e4:36:a5:51:e9:23:c2:
10:ed:67:80:fb:af:ba:69:5d:a4:75:bd:ac:12:28:
5d:38:6c:a0:55:c6:d8:a7:c5:f0:0d:6f:55:2c:03:
fd:df:bb:bb:2e:91:d9:5b:34:fe:2a:e5:a3:00:58:
72:af:98:a2:57:51:72:39:57:b7:1c:4e:39:19:73:
ab:07:84:76:34:e0:7c:c4:82:93:b4:01:12:db:40:
f8:90:15:03:9b:36:0f:1c:00:4c:0c:63:88:f2:71:
c8:fd:48:b0:28:9b:b6:8c:a0:43:e5:ba:15:86:ba:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:79:30:30:7C:9A:2A:BA:4F:1E:8D:77:30:A4:79:B6:38:7D:A3:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be0a320a-b966-3cba-8316-9e9c0eb6b043.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.26.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:4f:9a:6e:61:56:c8:05:4e:20:d5:2c:97:b7:ce:27:44:b3:
70:d5:36:02:21:09:6e:03:d9:7a:d5:55:2e:51:84:d7:79:60:
19:4d:e9:50:17:bd:16:df:2a:d9:de:9b:6f:79:0a:60:95:db:
5e:33:81:62:61:f2:01:8d:7b:d0:a0:28:15:01:d7:d1:4f:81:
7b:ce:93:75:0b:59:63:48:6c:df:42:85:8d:0a:fb:3f:32:e4:
e6:a4:0c:28:4e:02:b5:b6:62:ec:a3:d6:e9:98:83:b6:c1:dd:
a7:84:9e:d4:f9:57:3e:7d:9f:d9:e7:ce:78:3b:91:6a:b2:be:
d5:e3:68:de:53:02:26:80:15:55:64:6d:90:e7:a6:e3:b8:8a:
af:49:79:a6:d0:99:2f:2f:94:64:ea:2f:1a:44:35:24:b2:02:
f7:ac:3a:ab:2f:17:c6:75:74:1f:a9:fa:21:51:44:1e:c5:23:
40:1b:58:67:c0:5c:30:76:93:72:7f:9f:9f:e4:36:95:71:d5:
84:3d:48:4e:d6:e0:8a:96:7d:ac:38:97:50:76:94:4c:fb:90:
74:65:16:de:e5:ee:93:15:eb:4b:00:fb:24:5e:23:70:3b:fd:
ca:90:68:04:c2:48:a3:21:ed:54:a3:dd:d1:36:62:f4:c8:bd:
9a:61:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:22 2025 by rpki-client