Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca0d3fa1-d5db-3d87-8127-406210dab0ca.roa
File: ca0d3fa1-d5db-3d87-8127-406210dab0ca.roa (raw, json)
Hash identifier: 3002vIUK9gO4Gn/oyXRXy7ZPYw/GKuBFEYmjKCfuh3A=
Subject key identifier: FD:4C:F1:44:F6:55:AB:13:E9:0C:32:E5:46:B0:5B:25:E4:31:F5:97
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848424AFC9A22A242A2BFE50C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca0d3fa1-d5db-3d87-8127-406210dab0ca.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 184.31.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:fc:9a:22:a2:42:a2:bf:e5:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=bf393dfa-80c1-4a8a-935f-7e8e5417a250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a7:3b:34:5f:a4:45:b1:16:6c:5e:cf:72:50:
06:7d:52:2d:c1:08:9d:65:b9:8a:57:11:4f:6b:cb:
6b:81:f9:29:7d:f7:ad:74:2b:cd:38:21:e3:c4:1f:
5b:8a:62:b7:18:4e:09:a0:5f:43:80:1d:55:6e:1d:
38:9e:b9:2e:74:d4:41:0b:57:2d:de:1f:2c:77:e4:
e3:fa:b0:87:76:48:e3:af:93:c5:6e:a8:a9:c6:64:
1e:1e:fe:6f:a7:4c:60:52:98:70:92:57:e2:10:0a:
57:4c:31:be:34:77:51:4b:23:35:dc:12:6e:1c:38:
64:da:75:eb:86:d2:b6:9b:4c:46:e3:bf:13:28:e8:
6f:ba:4d:f2:12:6b:38:e5:ca:ef:92:bf:8c:d7:92:
c2:0e:4b:b0:98:9b:f7:67:5f:d7:20:f3:90:06:e1:
e8:ef:e3:ed:66:ce:73:f2:03:4e:df:03:8e:70:18:
44:6a:d7:53:38:40:76:65:96:7b:7d:15:7f:f5:81:
0e:c2:bd:fd:4a:8b:25:53:61:50:fc:4a:8f:61:da:
df:b5:53:73:36:66:87:2e:c5:20:4d:ee:6e:f8:cf:
57:5b:65:b4:56:61:56:23:ea:04:cc:89:bb:75:6d:
37:31:ed:21:a2:22:e4:3f:bd:1f:e9:9c:a4:41:fc:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4C:F1:44:F6:55:AB:13:E9:0C:32:E5:46:B0:5B:25:E4:31:F5:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca0d3fa1-d5db-3d87-8127-406210dab0ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.31.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:97:63:aa:50:8e:2d:72:ca:3a:14:d4:97:bb:62:6c:12:55:
9b:4e:46:9e:9b:c1:d2:59:04:f5:98:4b:0d:05:aa:0b:8e:b1:
7e:e5:c6:94:ea:07:97:1f:50:c7:8e:a4:cc:7e:8f:d2:ae:f4:
50:e1:c7:7f:de:a1:f6:d4:8e:fc:7b:c5:e9:58:84:a5:dd:19:
27:38:cd:a1:7b:42:7b:a7:2f:f7:48:60:2e:ab:74:70:57:44:
9f:22:13:5f:de:b6:70:ad:24:92:8d:c8:3a:58:4a:08:e2:d3:
7e:62:8b:57:00:4c:ec:a7:52:ae:bb:7b:a9:25:d7:10:a7:40:
37:37:df:23:a4:db:d4:61:96:39:e1:c9:c0:8b:b2:e1:b9:01:
25:9a:ca:d3:16:c4:a9:c0:50:25:34:fb:17:02:34:9b:03:db:
8f:75:de:74:16:f8:88:4d:39:66:5c:54:e9:92:ac:84:64:ce:
14:61:81:23:49:41:29:22:75:6c:4c:62:31:c3:8f:be:0d:34:
a5:b0:02:fa:0f:8c:fc:9b:44:6a:08:dd:41:03:8f:1d:f0:fc:
91:b7:2c:ed:0c:1f:88:bb:be:db:55:24:60:ed:07:09:e0:4f:
44:3c:81:fe:4c:f5:ce:a2:77:14:45:a0:f1:37:9c:cc:98:24:
5e:7a:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:28:50 2025 by rpki-client