Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0303ad5-af9f-31ce-aad5-675b1f6f2186.roa
File: c0303ad5-af9f-31ce-aad5-675b1f6f2186.roa (raw, json)
Hash identifier: 48YCBuvoXdsAeOLkIM/xieUicYznv3fg0Tqvn7Yjuag=
Subject key identifier: 89:AC:7C:1A:D5:BD:0D:35:9B:79:DA:55:45:B3:D7:A6:81:E7:1E:37
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584835BA9D9D68B04BAB5EE1B580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0303ad5-af9f-31ce-aad5-675b1f6f2186.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 184.86.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:9d:9d:68:b0:4b:ab:5e:e1:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=89ddd9c2-52d1-4ade-b2a5-5efd421f93cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:cc:35:3b:f7:9a:4f:eb:a8:5e:5f:9b:73:
26:00:51:68:5c:04:9a:56:b2:1a:2a:d7:56:d8:54:
31:11:11:4e:25:0d:f2:d9:1d:88:d3:7d:fe:45:fc:
2c:71:b9:a4:55:78:85:5c:92:b3:cd:d9:35:91:df:
93:68:1b:73:91:25:2a:2c:35:01:0c:af:c1:ca:b2:
0c:1d:dc:5c:40:34:fa:fd:8a:0a:8c:28:b3:b8:82:
88:13:41:db:3f:2f:5a:77:02:c3:7e:41:b9:8f:0c:
c8:7f:eb:79:4b:f5:94:c7:72:2b:15:8e:bc:e5:b1:
18:81:e6:43:f7:86:5b:89:66:88:62:0f:6e:9b:d4:
c2:57:e4:50:14:04:b1:91:13:d3:d2:47:05:b6:04:
f6:44:41:45:80:bf:a9:f9:47:6a:30:f9:1d:0c:46:
28:8f:69:b2:02:4f:90:6a:26:d2:79:98:bf:6e:85:
a4:0d:6c:81:a1:75:dd:5c:42:1e:85:bc:f8:0b:c2:
08:65:96:99:ee:d5:65:7d:f4:59:2f:b0:2f:f0:32:
7e:60:c0:4b:0e:f5:fa:c6:b2:3d:88:a2:4e:d9:9e:
cc:a2:16:4a:85:1b:76:9c:1a:81:64:a5:69:d5:d7:
51:c6:56:81:98:94:04:be:e8:8c:3a:a7:10:a4:c9:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AC:7C:1A:D5:BD:0D:35:9B:79:DA:55:45:B3:D7:A6:81:E7:1E:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0303ad5-af9f-31ce-aad5-675b1f6f2186.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.86.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:0f:11:5d:5d:43:2f:b0:23:f0:5a:b1:04:9a:04:43:22:a1:
68:32:6d:08:ef:86:88:76:c4:37:b0:57:0a:97:2c:79:c8:8b:
1e:06:61:91:31:a7:ad:10:5a:7b:a3:64:f2:b5:de:ee:91:b9:
90:88:30:ad:65:d5:bc:3b:68:8a:ac:50:67:fd:3b:74:01:93:
3c:16:c5:f2:7d:9f:83:ac:87:6d:67:3f:5a:63:1e:a6:4a:4b:
de:26:ba:4e:26:0e:29:10:2d:84:d5:71:3d:f1:67:66:4f:cc:
ed:e7:57:48:c6:74:77:31:27:8b:f6:98:34:b0:c3:68:31:e3:
08:18:4c:1f:31:20:d4:be:43:b7:5e:5f:44:8b:09:85:69:94:
81:53:e1:44:f2:0f:c2:df:17:3c:9d:ca:15:19:34:eb:d9:fe:
90:fe:10:16:ac:3b:33:eb:ad:e1:a9:c0:3a:28:0a:f8:ed:05:
12:8a:a2:c7:15:71:23:fa:10:0b:e1:01:5e:f3:b5:bc:8d:92:
83:8b:4e:15:52:49:44:02:48:6a:75:c4:08:77:45:83:26:2a:
3f:d4:c2:5e:5e:8c:de:c1:a0:e6:ca:48:fb:3a:f5:66:55:01:
7b:16:25:3e:ff:7c:b2:24:eb:d1:53:23:9e:68:55:69:00:aa:
be:17:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:45 2025 by rpki-client